Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146278.roa
File:                     AS146278.roa (raw, json)
Hash identifier:          ZTMmLrbPzNGNaiMGR3ryWeJSveP8VatbpapeQFVr9eg=
Subject key identifier:   83:FD:C6:37:1E:20:8C:D4:57:33:3E:CE:9F:F9:09:F4:13:EE:C8:49
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       18A2624FC60CE197A7D8C113432917A68A404F33
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146278.roa
Signing time:             Mon 25 May 2026 03:19:49 +0000
ROA not before:           Mon 25 May 2026 03:14:49 +0000
ROA not after:            Mon 24 May 2027 03:19:49 +0000
asID:                     146278
IP address blocks:        240a:ae2c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a2:62:4f:c6:0c:e1:97:a7:d8:c1:13:43:29:17:a6:8a:40:4f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:49 2026 GMT
            Not After : May 24 03:19:49 2027 GMT
        Subject: CN=83FDC6371E208CD457333ECE9FF909F413EEC849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d4:6b:7b:20:c8:84:b8:99:58:3f:cd:7c:94:
                    80:81:ae:d0:0b:71:57:ef:86:85:e8:53:3c:19:a3:
                    87:71:21:ed:af:33:ff:79:28:ed:f8:71:e3:88:ac:
                    ce:27:37:f1:a4:87:c8:18:71:61:ce:b7:7b:b9:bc:
                    9f:ca:a6:b0:2b:3d:6a:56:da:a2:26:42:d4:4c:db:
                    89:4f:d8:ea:03:d9:be:87:4a:9a:e3:20:89:6e:31:
                    0b:30:bb:0c:b3:ea:91:09:d4:03:21:0a:e5:de:ea:
                    f2:89:7b:a6:21:0a:c0:b9:4f:0d:52:b1:24:c5:e2:
                    69:9e:42:24:9a:9d:a7:7e:70:a0:93:01:c0:22:49:
                    f0:06:22:e6:fe:ca:55:32:3f:82:70:ad:f6:2d:42:
                    52:11:a1:fd:be:4a:5d:d6:6c:7b:f8:ae:ba:47:9f:
                    2c:db:3d:12:a8:cf:dc:0b:6b:0c:79:df:00:f2:1a:
                    a5:33:48:a9:3c:63:5a:da:ba:87:ce:8e:c8:2c:63:
                    1b:1d:a6:b6:cd:6a:b9:26:9f:50:af:ac:87:33:61:
                    34:f7:8b:d0:d7:9e:93:7b:33:8b:3f:dc:35:d5:29:
                    ab:98:f0:81:b4:5d:1b:c7:19:62:da:e2:e0:42:88:
                    b9:53:fa:5b:86:f6:d4:ca:6e:2e:7b:ad:2c:5a:36:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FD:C6:37:1E:20:8C:D4:57:33:3E:CE:9F:F9:09:F4:13:EE:C8:49
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146278.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:01:63:38:20:49:11:1e:8d:dd:8e:e8:80:08:73:33:53:d6:
         ea:1d:63:58:06:4c:d1:94:4f:d2:f9:10:cc:bd:de:1d:ca:01:
         b7:ea:13:50:16:0f:30:3b:61:06:9c:f9:85:91:0e:b8:b3:32:
         23:a6:6b:5a:c9:48:7c:12:bd:a4:ee:e5:d3:9e:5a:5b:07:8f:
         7f:05:78:4b:37:68:d2:40:2b:78:05:86:df:ac:ee:f0:04:66:
         69:7e:88:b0:b3:67:05:04:3e:70:5a:02:b3:1a:a6:fc:5a:c1:
         8c:ce:08:48:b6:ed:0a:ec:32:e9:c7:fb:d5:fa:e2:42:bd:8c:
         b2:91:6f:67:74:b0:d4:a6:48:8d:2d:cd:bb:e1:00:68:9e:d6:
         89:25:ac:67:0e:10:e5:8a:e9:fc:46:3d:30:72:3e:a2:a0:10:
         51:6e:24:6e:04:a9:4e:a4:fc:9c:9f:21:3d:98:5d:6d:a9:3c:
         e4:79:52:30:c7:96:56:01:23:1e:6f:df:f4:21:d9:e3:7d:3f:
         3f:05:3d:e6:1c:ab:4d:f8:e3:a7:1b:29:7d:56:e0:15:0d:93:
         29:38:79:67:de:38:df:48:09:2e:e4:9a:60:16:2b:8f:b9:6f:
         83:49:5c:6a:29:2d:89:19:be:04:f4:6b:08:4a:a6:7f:42:c2:
         74:74:3c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:02 2026 by rpki-client