Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146255.roa
File:                     AS146255.roa (raw, json)
Hash identifier:          pKv+Rlt8YIvlDeFONUizjyZNeXrwfm4A1pKkVZy/nrk=
Subject key identifier:   8B:38:B2:46:C5:C4:61:DA:AB:15:FE:07:E8:30:DA:04:D0:0D:8D:1F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       12E0CE0994CE9903B1AF77D59204A4FED848143A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146255.roa
Signing time:             Mon 25 May 2026 06:28:21 +0000
ROA not before:           Mon 25 May 2026 06:23:21 +0000
ROA not after:            Mon 24 May 2027 06:28:21 +0000
asID:                     146255
IP address blocks:        240a:ae15::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e0:ce:09:94:ce:99:03:b1:af:77:d5:92:04:a4:fe:d8:48:14:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:21 2026 GMT
            Not After : May 24 06:28:21 2027 GMT
        Subject: CN=8B38B246C5C461DAAB15FE07E830DA04D00D8D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:f2:60:b0:77:cf:65:24:5a:6f:d0:c0:53:
                    76:8b:84:88:39:fa:d8:c6:92:91:c4:9e:17:8c:d1:
                    56:8e:e4:29:8c:fb:c4:79:53:7c:2e:bd:b1:a3:2e:
                    4d:ae:2c:5d:f9:60:3a:63:86:06:64:57:b2:41:9d:
                    9f:60:29:f3:10:95:2a:4a:ab:c5:99:df:db:3a:a7:
                    f6:7f:2f:7a:2c:58:9b:84:79:b6:b7:9b:03:c4:55:
                    6f:08:87:0c:ab:d9:a4:52:11:90:b8:cb:5e:7b:22:
                    e2:92:c4:b9:63:e8:b5:78:bd:b2:6e:9a:dd:c9:8d:
                    0a:42:4d:fd:dd:0d:6b:af:33:c0:c7:b0:2e:ee:2f:
                    96:18:b9:e7:82:08:5e:9b:8f:5d:09:43:52:1f:85:
                    f3:4a:01:dd:de:f4:0b:61:c4:59:39:8b:5b:a6:24:
                    10:ac:7e:62:0d:09:30:3a:d5:11:0a:43:9c:9c:75:
                    11:e1:c6:18:15:74:5b:f5:f4:b3:ef:5b:f1:28:95:
                    50:23:b4:f0:09:0c:9f:50:9e:d1:d8:5c:5c:a7:45:
                    bc:71:b7:db:db:63:29:04:76:20:37:ad:10:99:00:
                    4b:94:65:a9:7c:b4:16:a7:8c:6a:5f:e5:7d:bd:87:
                    5f:94:7d:a7:a8:9a:6a:3a:8d:a3:6d:3c:a5:8f:51:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:38:B2:46:C5:C4:61:DA:AB:15:FE:07:E8:30:DA:04:D0:0D:8D:1F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146255.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae15::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:9e:93:83:f2:ec:67:6a:e0:05:26:26:ef:3d:91:b4:0f:32:
         4b:f4:ba:4f:cd:ad:2d:61:82:ce:e4:e3:57:93:c4:57:7e:e5:
         76:f2:9f:9b:e0:ee:13:cc:ff:b4:8e:59:a2:16:e8:91:51:20:
         c1:d1:fb:93:27:39:ea:bc:34:a0:9c:d7:e8:34:01:33:87:d2:
         c5:24:76:9b:52:86:1f:0a:70:93:61:d7:61:2e:78:5f:69:68:
         89:14:d0:2a:b6:63:a7:c8:b7:e7:7b:b2:4c:f6:ac:04:60:1b:
         70:45:e7:2b:05:22:4e:b5:b4:07:08:ff:6e:da:11:e5:be:5d:
         c7:e2:01:01:2f:95:04:97:11:87:96:6d:d9:51:d1:de:fc:ea:
         29:18:f1:9d:bb:09:a6:1c:e0:bf:8c:30:84:e1:28:00:74:8c:
         2c:e0:39:2e:e8:f6:fe:3e:79:ca:05:ce:d5:69:80:91:0c:d8:
         90:47:3a:80:ff:dc:d8:23:09:28:f4:17:f8:67:a9:e7:67:24:
         bd:5f:ab:a0:34:a8:83:f9:c6:d0:11:1c:4e:f1:2b:06:c9:dd:
         77:e1:14:45:58:11:53:3b:a1:de:79:28:72:03:34:bb:9d:a3:
         eb:ad:0d:ee:66:5f:0d:57:ff:73:0f:b8:00:64:09:36:ef:b0:
         86:4b:06:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:41 2026 by rpki-client