Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146263.roa
File:                     AS146263.roa (raw, json)
Hash identifier:          pDWP1htgNPC1zQxTYhp48pofSmHA3a7dzgRxGWmWceI=
Subject key identifier:   42:97:F7:2B:C1:17:73:2F:D7:9A:15:D7:75:25:8B:3C:7F:5E:D9:85
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       53A6E1C384C99F79E54C0DEA4DF995FF9767418C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146263.roa
Signing time:             Fri 22 May 2026 07:32:14 +0000
ROA not before:           Fri 22 May 2026 07:27:14 +0000
ROA not after:            Fri 21 May 2027 07:32:14 +0000
asID:                     146263
IP address blocks:        240a:ae1d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a6:e1:c3:84:c9:9f:79:e5:4c:0d:ea:4d:f9:95:ff:97:67:41:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:14 2026 GMT
            Not After : May 21 07:32:14 2027 GMT
        Subject: CN=4297F72BC117732FD79A15D775258B3C7F5ED985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:89:fc:ca:51:d6:f2:c9:3e:28:3b:36:63:
                    dd:b5:30:09:d6:c2:14:36:8a:df:c6:81:72:ff:71:
                    9a:53:89:a1:5d:8b:7a:98:54:22:d1:9d:82:66:c3:
                    ad:c3:65:1d:38:43:90:db:75:fc:78:35:63:02:65:
                    8b:4e:5c:57:c1:7c:9e:e5:6d:5d:48:e3:35:65:db:
                    a4:ad:9b:c2:9f:a4:46:f0:cd:49:87:3b:da:3f:f9:
                    db:d7:4d:a2:fc:b2:85:16:be:c7:17:f8:62:aa:4e:
                    58:62:ca:19:6f:c2:ce:44:dc:e7:e0:a5:05:6c:95:
                    2e:06:0e:4e:64:52:d2:87:13:8c:eb:87:12:d1:22:
                    0e:b5:75:e6:89:32:68:18:f9:63:aa:28:f4:b5:ea:
                    d6:be:6f:c0:a1:e7:25:d2:a9:1e:aa:a1:13:2f:06:
                    ad:6a:a0:e1:02:a3:ba:1c:7a:c7:d8:dd:33:4c:e6:
                    1a:ee:6a:1c:99:3f:0f:4d:a2:2c:cc:f4:83:e1:b9:
                    79:6e:05:57:e2:3b:79:d7:68:48:db:7e:b2:da:61:
                    77:8d:0d:77:06:80:96:9e:ef:23:ff:18:5d:fe:50:
                    32:b5:91:52:89:88:82:39:fe:f5:a6:41:67:01:ad:
                    fc:57:a4:f4:f9:00:9c:35:76:76:cb:98:a7:71:d8:
                    17:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:97:F7:2B:C1:17:73:2F:D7:9A:15:D7:75:25:8B:3C:7F:5E:D9:85
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146263.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae1d::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:fa:3e:90:78:02:38:0e:c9:85:94:c1:21:c1:46:e2:36:3b:
         bf:4c:04:cd:dc:95:72:0f:48:be:7c:e9:58:a2:41:0b:ad:33:
         8b:aa:10:b4:c6:3a:52:2b:95:fa:48:f4:13:4a:55:41:ad:13:
         87:17:d3:f1:f3:4e:30:0b:e7:d8:46:bb:49:08:70:d9:f7:55:
         a7:e9:7c:9e:9a:28:2d:60:2e:60:4b:a1:fe:76:d4:ed:9f:23:
         e1:1b:c4:fe:ce:08:3c:fe:25:c6:42:a4:df:3e:b0:2e:28:bc:
         88:14:ae:da:7a:b4:15:19:83:45:2f:d3:9b:e0:91:12:0f:2a:
         93:e6:16:26:07:51:57:0b:c8:e9:57:45:7e:d6:1f:33:4e:af:
         58:a2:40:9a:e1:5d:66:34:25:fa:e1:97:28:bc:31:77:73:ed:
         70:43:1f:1c:85:3a:d4:9d:d8:43:ef:dd:e2:fb:c7:4c:81:ed:
         ba:5a:1c:c9:9f:ed:2d:f7:2f:3f:de:53:f6:59:3d:cb:89:05:
         a5:a0:38:8c:c0:04:ba:79:60:a5:fc:05:f4:e6:e4:c0:51:df:
         cf:b0:19:d4:f8:93:45:59:9e:b2:5e:ef:f8:48:c1:cd:00:f4:
         22:2a:b4:ee:9c:24:dc:25:e3:36:8e:8c:0d:c6:a2:75:77:61:
         7e:0c:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:51 2026 by rpki-client