Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146226.roa
File:                     AS146226.roa (raw, json)
Hash identifier:          FVPiSi/dc4y5M3r3Jl4J7d9q5hcSEcyjNZHS3C7L9Oo=
Subject key identifier:   B6:32:54:0F:A5:7D:12:41:7B:8E:6E:25:98:3C:A9:8A:DD:1F:37:D9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       16BD1DFAD8C028AD046108D05DAD1B19995A8D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146226.roa
Signing time:             Tue 26 May 2026 06:12:56 +0000
ROA not before:           Tue 26 May 2026 06:07:56 +0000
ROA not after:            Tue 25 May 2027 06:12:56 +0000
asID:                     146226
IP address blocks:        240a:adf8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bd:1d:fa:d8:c0:28:ad:04:61:08:d0:5d:ad:1b:19:99:5a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:56 2026 GMT
            Not After : May 25 06:12:56 2027 GMT
        Subject: CN=B632540FA57D12417B8E6E25983CA98ADD1F37D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:55:13:ee:de:15:83:d2:2a:89:12:3e:0b:
                    42:f3:3c:44:02:40:cc:b0:a4:c6:27:22:ec:62:cf:
                    a2:cc:e9:08:dd:f4:96:9d:6c:e0:8f:52:ff:ae:47:
                    3b:83:96:76:cb:aa:58:47:6a:29:d2:97:9c:77:68:
                    aa:fc:8e:d9:13:9d:3e:a9:ab:ce:12:5e:70:a3:99:
                    13:8e:a6:27:9e:1e:ee:5a:ca:73:45:bd:d1:33:4e:
                    e4:b8:58:b8:14:81:9b:97:ab:4f:09:52:76:ef:0c:
                    a0:75:72:6d:e5:92:64:a7:fe:5a:f2:25:1d:34:2b:
                    a4:3c:d7:df:1f:3d:2d:6b:5a:77:0b:d7:48:04:01:
                    88:9c:6b:ee:a3:4e:f6:77:bb:87:ce:92:c4:56:bb:
                    1a:5e:b0:c3:43:ef:72:dc:bb:4f:7b:81:02:89:05:
                    fe:90:86:fd:a9:04:dd:a6:c2:7a:14:d7:94:1c:4d:
                    67:60:87:14:19:9d:84:ac:b8:60:73:b6:25:bb:07:
                    fe:0d:84:0a:78:dd:95:e0:46:c7:17:29:e8:a6:c9:
                    ea:73:ac:41:44:c6:bc:57:52:42:fb:2e:da:d1:31:
                    e9:65:10:8b:33:b4:f6:43:2e:31:f6:4e:cf:b5:b0:
                    0f:66:b6:69:17:53:5d:56:94:43:72:a6:be:32:84:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:32:54:0F:A5:7D:12:41:7B:8E:6E:25:98:3C:A9:8A:DD:1F:37:D9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146226.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:1b:de:d7:58:9d:23:bd:4b:91:fa:56:d1:0e:36:73:9d:d0:
         63:1a:ba:60:e4:9b:a8:7b:36:89:3d:ae:82:53:f9:1d:7b:26:
         2b:44:3b:6d:c3:04:61:35:b4:da:5e:1f:0b:18:4c:9d:f1:39:
         d0:54:24:06:9d:1c:43:a0:58:70:74:7a:f9:92:ed:db:21:b6:
         7e:fe:20:dd:e6:d0:7e:60:93:80:15:83:90:2a:71:d0:56:34:
         69:16:5e:90:55:5e:74:29:52:5a:e2:41:b7:44:1e:90:13:5a:
         c4:44:95:6e:59:72:f0:88:ca:5a:8d:a4:44:23:e1:17:6e:54:
         95:34:76:e7:69:c7:c8:25:9c:b5:f4:97:3a:e5:04:f1:88:ba:
         31:8a:fa:de:93:d8:36:8d:16:a3:38:fe:30:55:a1:ae:1c:63:
         eb:10:37:0c:cb:84:d8:8a:23:b0:70:04:e9:ec:ce:da:5c:c5:
         cf:1b:e4:13:fe:11:e9:ff:b2:94:23:da:0f:1d:f7:ad:f9:93:
         38:8c:fa:47:c0:43:c6:7f:af:42:2a:65:a1:9b:94:70:81:e7:
         b2:b0:0e:0a:e6:3e:5c:75:5a:9f:1f:a2:fc:c6:2e:0a:78:c1:
         b4:7a:ca:2e:35:25:b5:9c:76:92:0b:91:20:f8:80:01:fc:a5:
         e8:72:f3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:55 2026 by rpki-client