Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146280.roa
File:                     AS146280.roa (raw, json)
Hash identifier:          bssOnSg62TVIDef8d87SyUpND+J4uzB5iGWxM5vdF7k=
Subject key identifier:   6E:FF:39:C8:BD:BA:6A:BA:61:15:0B:2F:E9:C6:41:B8:F2:1F:4E:F0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4E9750B89370A625875753E048B7BD096AAB9215
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146280.roa
Signing time:             Mon 25 May 2026 03:19:45 +0000
ROA not before:           Mon 25 May 2026 03:14:45 +0000
ROA not after:            Mon 24 May 2027 03:19:45 +0000
asID:                     146280
IP address blocks:        240a:ae2e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:97:50:b8:93:70:a6:25:87:57:53:e0:48:b7:bd:09:6a:ab:92:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:45 2026 GMT
            Not After : May 24 03:19:45 2027 GMT
        Subject: CN=6EFF39C8BDBA6ABA61150B2FE9C641B8F21F4EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:d5:88:5d:b6:4e:5d:fb:f4:26:38:16:87:
                    b1:3f:6f:70:5a:1e:08:c5:bc:a1:45:f6:41:69:9e:
                    7e:04:ed:94:49:40:e2:8e:3e:7c:66:e4:02:c9:9a:
                    89:ce:b4:f5:97:9b:a9:42:4f:66:2f:bd:ce:4b:be:
                    c4:34:c9:06:72:9e:06:1f:d2:43:83:6a:eb:aa:64:
                    05:29:0a:54:01:06:84:69:40:81:8f:69:79:a5:71:
                    6b:27:ae:40:b6:9a:80:2c:5f:7f:dc:4f:f9:9e:d7:
                    e3:64:79:f9:23:16:2c:fa:63:89:08:4b:63:00:a0:
                    bf:60:22:b5:86:4f:92:bb:b0:e7:a8:68:cf:95:aa:
                    bf:a1:0a:73:62:7f:32:3a:10:45:55:94:4c:6b:36:
                    f1:69:a7:43:8b:d0:b3:7b:71:85:57:34:a9:89:72:
                    f1:43:e5:2c:44:33:06:e8:f4:99:2d:54:b2:eb:25:
                    fb:40:71:53:ad:26:66:68:28:c9:f9:bf:1d:19:53:
                    ac:18:d7:37:2e:c1:3e:6d:80:86:00:40:8c:fd:82:
                    8f:66:9e:1b:42:8b:92:82:18:5d:03:14:31:cc:80:
                    d1:4c:6e:77:24:fb:e0:c2:c9:d5:aa:71:a3:9d:1e:
                    4e:b0:7a:22:64:f6:99:ff:36:3e:6c:2a:dc:1a:da:
                    f4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FF:39:C8:BD:BA:6A:BA:61:15:0B:2F:E9:C6:41:B8:F2:1F:4E:F0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146280.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae2e::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:0a:38:49:7b:e9:89:bb:7e:7f:14:26:85:1f:8e:6f:f8:e3:
         74:80:16:30:c5:64:ee:11:b9:2c:2f:de:e0:60:ba:fe:af:10:
         d8:ce:58:87:ba:b8:e6:5d:d9:da:12:9e:ec:9d:8d:37:21:a0:
         6d:9c:1c:1e:e2:b1:a2:c4:04:7f:8b:2c:a0:83:7a:a0:4e:e0:
         d1:62:61:f0:60:cb:44:7a:bf:78:ad:c7:8d:53:27:9a:8d:a4:
         c0:1b:bf:99:3d:7c:0f:d2:05:f3:9d:49:42:f2:a8:71:27:64:
         22:7b:83:cf:63:cd:d1:77:e0:4b:0e:38:72:12:91:88:6e:f7:
         10:0d:28:03:d5:df:b6:a2:88:b7:3a:fc:5a:4a:bf:1c:ad:7f:
         f2:0f:11:99:55:b5:ea:d4:03:fb:81:92:fb:d7:1a:9a:61:9c:
         db:25:a9:20:70:cc:8d:02:26:fb:7b:22:e3:8a:55:19:82:41:
         66:21:f6:e0:78:75:81:d9:33:27:4d:0f:15:2c:96:be:e2:6b:
         0d:86:f2:45:08:f1:31:e6:73:b3:98:4f:b3:5c:18:a1:21:11:
         0e:9b:b1:b9:a0:83:72:96:29:1e:95:a1:a9:2a:c8:5d:6a:c4:
         f3:07:ad:33:b4:8b:1a:00:ff:ac:7f:37:6b:27:dc:79:95:0b:
         03:91:81:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:20 2026 by rpki-client