Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146283.roa
File:                     AS146283.roa (raw, json)
Hash identifier:          13llNGfx7uCxzmU2Fb8L7t4Dqih2NI8RZwaBzITxs+0=
Subject key identifier:   51:7A:04:91:A5:B2:AF:4E:97:F4:30:AC:95:A9:B4:C3:0B:53:14:89
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       23B2BB77BB995B0296A0176FCEE686038877B152
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146283.roa
Signing time:             Fri 22 May 2026 07:24:35 +0000
ROA not before:           Fri 22 May 2026 07:19:35 +0000
ROA not after:            Fri 21 May 2027 07:24:35 +0000
asID:                     146283
IP address blocks:        240a:ae31::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b2:bb:77:bb:99:5b:02:96:a0:17:6f:ce:e6:86:03:88:77:b1:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:35 2026 GMT
            Not After : May 21 07:24:35 2027 GMT
        Subject: CN=517A0491A5B2AF4E97F430AC95A9B4C30B531489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:26:75:97:aa:97:94:8e:cd:9f:e6:24:51:30:
                    2f:79:d0:f2:75:a7:c8:70:bf:1a:09:4a:dd:aa:4a:
                    8b:37:90:27:27:bd:0d:37:bf:c5:a0:2f:33:1e:ee:
                    f2:a0:6d:11:33:84:89:0d:27:78:27:a5:b0:6c:b6:
                    83:61:b0:96:56:21:bb:a3:ab:c2:34:35:b5:cb:69:
                    89:77:98:58:00:5a:0f:93:d1:27:28:ec:8b:cb:46:
                    e1:47:d8:ec:e5:c5:01:27:63:85:9b:91:13:29:13:
                    b1:0a:c6:67:6a:c9:1f:bb:a6:12:be:2c:90:a0:47:
                    fa:5e:7a:6d:51:d3:fc:21:e2:51:49:e9:ca:e9:0e:
                    11:5c:c2:f9:77:49:3c:75:18:ca:6b:2b:62:b5:fc:
                    61:c7:c2:d3:3e:06:b5:38:ac:5c:f3:2e:9e:e4:ec:
                    bd:4d:75:99:f6:57:22:52:96:88:f4:40:2a:14:29:
                    2c:e7:69:c6:9f:b6:e2:be:0a:b3:de:84:ef:3f:d8:
                    75:54:e6:2b:8c:d9:34:b2:a9:f3:73:70:64:9c:87:
                    2f:6c:eb:2c:8c:e2:b7:62:82:17:cd:4a:fc:12:b7:
                    89:b7:29:f8:d8:51:16:11:f7:e8:b1:ab:44:6e:bb:
                    b5:43:fc:34:cc:c5:21:cb:20:98:ad:b1:b8:82:1b:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7A:04:91:A5:B2:AF:4E:97:F4:30:AC:95:A9:B4:C3:0B:53:14:89
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146283.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae31::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:b0:71:a4:42:9e:00:56:cf:32:2f:2b:6a:e8:f0:96:9c:da:
         01:af:8a:d2:c4:04:68:1c:7c:5e:89:6e:8d:af:17:30:77:61:
         de:b0:00:b1:98:3d:e3:af:25:28:9d:84:89:0d:c9:48:13:fc:
         c8:fc:28:7b:2c:ff:c8:76:8d:48:36:46:af:31:36:3e:66:5a:
         86:e5:8a:2d:df:bb:8b:cb:c7:e5:6d:7a:c4:64:44:96:ef:f6:
         b1:aa:86:e5:e4:80:a3:ea:e3:d6:f7:e1:1f:75:85:0e:88:65:
         b1:3d:4f:c5:87:fc:1e:fa:8a:91:5e:1f:fe:4f:98:20:d8:6d:
         36:f2:d5:08:7d:d0:60:a5:52:c7:ae:ad:3a:8f:05:2e:56:76:
         96:d5:fb:4c:01:fe:31:32:b0:8e:d0:e4:bb:a5:bb:75:5a:d2:
         cc:11:5f:52:9c:ec:4e:f4:a3:cb:95:56:c3:83:d0:20:fd:9f:
         12:cd:18:8d:0e:89:3e:c8:79:47:1a:27:0a:4e:94:0e:42:d7:
         35:98:6a:df:7c:38:13:b5:fc:6a:11:e6:d0:e9:cf:10:c0:d4:
         f2:e7:ef:10:c2:70:f1:b0:9e:ed:ff:37:c6:19:0c:fb:92:62:
         9a:44:75:84:3f:b0:20:86:79:1f:e3:2e:11:8a:d0:7c:c0:e0:
         a0:a9:db:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:55 2026 by rpki-client