Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146296.roa
File:                     AS146296.roa (raw, json)
Hash identifier:          uJG4chzzhrVMtouv4dHu1Eu7Ky4I2aHyU3SFsly4SjY=
Subject key identifier:   FE:50:C6:FC:56:E1:A1:57:35:82:38:10:F7:5A:BC:2C:CC:79:7F:C2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       498CFAB06585CFAD7A6F215DF80ED397C00F7FEA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146296.roa
Signing time:             Fri 22 May 2026 07:32:28 +0000
ROA not before:           Fri 22 May 2026 07:27:28 +0000
ROA not after:            Fri 21 May 2027 07:32:28 +0000
asID:                     146296
IP address blocks:        240a:ae3e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8c:fa:b0:65:85:cf:ad:7a:6f:21:5d:f8:0e:d3:97:c0:0f:7f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:28 2026 GMT
            Not After : May 21 07:32:28 2027 GMT
        Subject: CN=FE50C6FC56E1A15735823810F75ABC2CCC797FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:29:79:c0:e9:90:9f:de:2f:54:4c:63:ed:
                    ee:60:3a:7c:0e:57:81:48:fb:c6:27:de:4c:b2:22:
                    2b:2a:63:a8:96:ca:b9:5e:7b:06:fb:9f:5c:f1:c6:
                    3a:94:10:94:0b:79:79:bb:90:c1:60:3c:ca:18:cf:
                    4c:3b:4b:15:60:ed:ec:8a:d2:4c:57:66:1a:68:be:
                    56:d2:0b:80:d4:b2:4c:3d:4f:83:0a:26:2b:ab:44:
                    2d:db:33:94:7b:75:b4:ae:68:8d:0c:68:8e:05:6a:
                    6a:48:fa:f9:16:46:c9:2d:6c:97:2f:d3:60:e9:93:
                    a7:ed:0d:2b:23:b5:69:dd:b1:16:ba:89:85:05:64:
                    99:be:48:14:e1:38:88:a0:17:14:01:db:58:b7:08:
                    60:57:e5:45:b2:5d:79:dd:36:34:af:94:3a:f3:34:
                    42:af:e2:6c:57:7d:01:4b:57:ec:aa:6a:64:7e:9c:
                    9e:4a:a5:6e:b4:0b:59:80:fb:38:f5:fc:69:12:55:
                    09:08:35:44:4d:6a:d3:81:eb:7f:f5:76:8f:75:2a:
                    8b:c7:14:85:0e:43:63:a1:6b:3f:ac:75:ac:9e:52:
                    ba:ac:e0:6d:7b:20:0a:52:ec:68:dd:4e:b5:1c:85:
                    14:5c:4c:a6:90:6a:95:de:1f:b5:12:61:2d:02:85:
                    df:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:50:C6:FC:56:E1:A1:57:35:82:38:10:F7:5A:BC:2C:CC:79:7F:C2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146296.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae3e::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:ea:13:3c:c8:3d:c4:5e:3c:fc:38:ff:54:10:f8:50:48:a1:
         66:e6:0e:59:78:b1:49:b9:9a:1e:8c:6a:1c:6b:8e:9a:37:14:
         9c:c8:37:86:cc:2a:58:20:8d:74:90:79:30:15:07:25:59:60:
         11:1e:7c:23:69:85:89:e6:2d:0d:2e:b7:35:da:ca:af:1c:f2:
         87:6d:c1:14:16:b1:66:50:c7:e8:46:d0:86:70:65:c3:97:b4:
         b2:1e:c6:66:08:c0:b8:b6:75:e1:d9:86:f3:f7:6b:37:b5:2f:
         c8:4e:b1:92:3a:77:af:29:65:a3:21:0a:1f:ba:24:b0:4a:7f:
         c6:a2:c9:53:db:6a:be:43:be:4b:22:c3:6b:c1:06:10:1d:f1:
         35:45:5b:a5:ec:10:dc:80:38:ba:10:7f:13:9c:8d:56:d4:a2:
         52:f9:68:05:28:ba:3c:e0:96:cd:a4:32:6d:49:c9:af:6b:7a:
         bd:9a:f5:c9:c4:d3:43:29:35:c1:d5:c7:63:25:63:3c:00:7b:
         6d:56:82:63:46:a7:f3:a4:85:27:21:d2:2c:72:8f:90:ea:04:
         37:fa:f0:4b:48:2b:1d:ac:ba:05:f6:b1:4b:1a:c9:b1:0f:4c:
         9f:91:94:eb:21:62:42:70:24:04:b5:cf:0c:55:73:37:05:32:
         ed:ba:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:02 2026 by rpki-client