Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146274.roa
File:                     AS146274.roa (raw, json)
Hash identifier:          FLOJshXB/okaoBli81GDwJpaoiFmzPmLyMpwMTsTGMQ=
Subject key identifier:   72:96:D0:D2:0A:D0:E6:FE:57:78:B6:31:85:70:DA:47:F4:9C:0C:27
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2BBE0DDF4BC8D66C8580001CD6E03578975A4C02
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146274.roa
Signing time:             Tue 26 May 2026 03:16:45 +0000
ROA not before:           Tue 26 May 2026 03:11:45 +0000
ROA not after:            Tue 25 May 2027 03:16:45 +0000
asID:                     146274
IP address blocks:        240a:ae28::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:be:0d:df:4b:c8:d6:6c:85:80:00:1c:d6:e0:35:78:97:5a:4c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:45 2026 GMT
            Not After : May 25 03:16:45 2027 GMT
        Subject: CN=7296D0D20AD0E6FE5778B6318570DA47F49C0C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:98:ef:10:c7:9f:47:0f:9e:0c:98:da:a3:
                    37:a0:4a:d8:56:c6:0c:31:88:8f:a8:e7:f1:37:ff:
                    99:42:00:2d:4a:5c:e6:c0:a6:8b:da:37:ef:83:22:
                    69:37:2c:c5:dc:64:46:f3:dd:a3:ed:d8:c9:9f:bd:
                    3d:c0:fb:13:07:ab:ec:0c:28:52:e3:65:eb:85:31:
                    35:6f:f5:80:19:8d:fb:24:e1:36:c5:da:5c:e7:5d:
                    b0:fd:97:65:bb:6b:de:0a:ac:a6:fc:8f:e9:d5:e9:
                    61:ce:8b:a7:b3:44:e1:dd:a7:c3:be:0b:ff:b0:fb:
                    e0:19:bb:02:65:68:60:3a:ae:d0:89:84:c3:16:a8:
                    31:d2:e0:97:c1:f2:0e:52:36:b7:c0:d6:3d:66:de:
                    fc:c8:28:a9:7e:ca:f6:96:14:9d:c6:85:db:e8:af:
                    e8:65:68:c5:12:5b:18:0a:33:a0:04:40:31:35:6c:
                    f4:c9:c3:b3:ba:8d:e8:f1:6b:d4:ed:08:30:9b:26:
                    08:14:3e:d7:e5:0d:e0:7d:d7:a3:3e:d0:eb:90:11:
                    fe:ad:67:2a:5b:ff:b4:04:32:88:fe:c3:ac:4b:e4:
                    76:9f:7e:56:05:56:a7:95:4f:89:63:a3:bd:51:f3:
                    7b:82:b7:85:e6:2a:74:a7:b5:10:f0:ab:4d:5a:cf:
                    b0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:96:D0:D2:0A:D0:E6:FE:57:78:B6:31:85:70:DA:47:F4:9C:0C:27
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146274.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae28::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:a6:45:fd:4e:e5:1e:56:31:c1:dd:89:61:71:d5:6f:17:a1:
         8c:d0:19:27:18:c9:e4:6c:66:4f:3a:49:48:db:21:75:78:8a:
         c9:f6:be:40:d8:9f:87:d7:3c:92:12:d0:81:38:4e:3f:c6:eb:
         d4:b5:06:8b:7b:ad:d0:c6:0e:63:18:6f:41:49:e6:e2:43:ff:
         58:90:51:07:a2:b3:11:24:27:17:36:ea:c4:af:d3:4f:1e:3f:
         01:c2:9a:e2:2d:ab:bc:0a:47:24:91:f5:de:a3:f2:fc:08:92:
         a6:3e:b2:ae:62:ae:d7:90:6a:db:0a:6d:a7:d0:1e:de:c5:2e:
         95:be:ac:76:2d:a1:ea:b5:50:03:e2:0c:d7:50:ea:b7:f4:f4:
         bb:26:aa:1d:22:1a:26:f0:dd:6d:19:38:92:2f:04:ed:5d:47:
         b7:09:7a:68:2b:cf:83:31:ba:cb:60:97:3a:a3:c9:38:85:18:
         bc:6f:3f:56:7e:a8:aa:50:eb:c8:bc:8f:72:e4:79:be:86:82:
         35:2b:d0:89:5e:6c:e6:2a:59:48:06:96:cc:5c:c2:50:f5:2f:
         26:d3:59:9c:9c:60:d3:a9:b7:3b:f7:ad:c8:58:59:8c:4e:92:
         ac:bd:2f:01:5a:83:9d:0b:3d:23:0b:de:88:ad:ea:f4:a7:a1:
         f7:63:fe:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:35 2026 by rpki-client