Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146266.roa
File:                     AS146266.roa (raw, json)
Hash identifier:          jZOfElQXH1lLMZKnbT0baSvNZjdbQcib2n/XI/J7FFE=
Subject key identifier:   7B:C7:33:F8:2B:B8:EC:2C:0A:0D:FE:06:33:A1:0D:FD:3D:31:4F:F7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       20BB81A256A99C6DC1575A26B8E149098A74830B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146266.roa
Signing time:             Fri 22 May 2026 06:58:16 +0000
ROA not before:           Fri 22 May 2026 06:53:16 +0000
ROA not after:            Fri 21 May 2027 06:58:16 +0000
asID:                     146266
IP address blocks:        240a:ae20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bb:81:a2:56:a9:9c:6d:c1:57:5a:26:b8:e1:49:09:8a:74:83:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:16 2026 GMT
            Not After : May 21 06:58:16 2027 GMT
        Subject: CN=7BC733F82BB8EC2C0A0DFE0633A10DFD3D314FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6e:3c:39:58:eb:52:c4:4d:da:87:06:77:c9:
                    bd:d2:fb:9a:d4:50:0d:e6:c6:7d:d8:40:9f:46:76:
                    c9:38:6f:04:5b:fc:23:9c:cf:bf:68:e9:80:ef:f8:
                    ec:15:7a:85:88:42:08:36:d7:3f:90:8e:19:c7:52:
                    f3:18:e5:de:39:63:16:3c:36:01:c6:aa:41:59:ad:
                    25:c3:05:24:41:19:e6:0e:a8:50:9e:7f:f0:ec:51:
                    c7:4e:90:b7:0c:e1:3d:8a:40:0a:6b:d2:7b:e6:08:
                    d7:49:f1:f0:75:bb:0f:97:ef:57:b0:bf:0a:6a:a0:
                    a7:bf:ae:6d:50:fb:17:4d:67:ee:fe:31:b1:90:4c:
                    c0:20:0f:e3:cd:ac:05:ea:c5:56:ba:0b:34:29:00:
                    ed:bf:37:d5:04:0e:cb:88:af:3e:1b:3a:6f:10:ae:
                    44:b5:79:dd:12:85:9c:bb:26:36:5a:02:2a:60:19:
                    f3:78:4c:4e:ec:2b:c5:ef:a4:6a:41:dd:cd:b6:e4:
                    01:5a:3a:c3:cc:96:46:28:9a:23:20:9b:9e:e5:ec:
                    e8:5c:96:33:ad:f6:05:b0:87:90:dd:4b:0e:8d:12:
                    05:81:81:74:42:43:09:cd:48:8d:7f:99:0a:c0:09:
                    95:11:85:53:f1:c6:ca:2b:9e:17:45:83:bf:3e:24:
                    fa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C7:33:F8:2B:B8:EC:2C:0A:0D:FE:06:33:A1:0D:FD:3D:31:4F:F7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae20::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:4b:08:64:0c:ab:57:e3:00:ba:d4:2d:e4:29:9e:9f:3d:1c:
         40:68:5d:cd:0e:7b:81:b0:86:16:16:be:a0:a5:21:f1:68:f7:
         be:80:37:40:4a:40:43:9d:4c:5d:24:c8:e9:12:9c:22:41:f0:
         55:ed:70:d2:a1:9a:b5:e2:bb:8c:5e:42:92:36:2d:61:ba:61:
         8d:bd:f7:97:5e:81:2b:0c:f9:50:53:28:56:52:0e:e9:cc:ed:
         fe:36:10:23:de:e5:ef:9e:d7:b3:75:3d:48:cf:9f:ef:91:99:
         f7:00:06:bb:ce:13:00:42:52:20:e4:d6:be:67:d4:f0:00:5e:
         c1:cd:f2:2a:26:18:0d:5f:5f:06:9b:22:c7:5a:77:52:80:81:
         bd:bd:93:c9:c8:2b:f0:c4:2e:c3:d8:b0:7d:f4:da:22:9f:27:
         af:29:61:d9:25:23:0c:88:ec:7b:16:bb:16:d1:9e:01:6c:33:
         b9:bd:59:9c:b3:7e:3a:ff:88:21:14:14:fc:58:cb:ca:69:3d:
         06:f6:8b:64:1e:0c:48:70:fe:34:41:f8:03:ba:7f:df:56:6c:
         f7:e8:9c:4a:83:1d:cc:51:c7:a6:80:1b:3f:3b:c4:d1:24:41:
         d9:a3:ec:dc:57:9b:33:7d:e6:35:bf:0c:ab:05:b1:4d:9d:80:
         64:3c:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:07 2026 by rpki-client