Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146314.roa
File:                     AS146314.roa (raw, json)
Hash identifier:          vITKe5PYgrXvlNxgSy+Mh28iqcpKs3EByYGodpOzNIg=
Subject key identifier:   6F:88:77:B2:37:44:EA:31:D9:1F:D1:06:A5:00:79:83:F6:F5:23:89
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0DAF3B0857F6C68CAECE10F93F300D1ACB169910
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146314.roa
Signing time:             Fri 22 May 2026 06:46:26 +0000
ROA not before:           Fri 22 May 2026 06:41:26 +0000
ROA not after:            Fri 21 May 2027 06:46:26 +0000
asID:                     146314
IP address blocks:        240a:ae50::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:af:3b:08:57:f6:c6:8c:ae:ce:10:f9:3f:30:0d:1a:cb:16:99:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:26 2026 GMT
            Not After : May 21 06:46:26 2027 GMT
        Subject: CN=6F8877B23744EA31D91FD106A5007983F6F52389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0f:87:7d:86:d0:68:ec:f7:46:f8:d4:ad:f2:
                    99:2e:c8:c1:59:d0:6d:8b:0f:de:89:f4:6c:c2:47:
                    eb:20:81:56:28:25:86:f2:ef:70:07:9d:00:bd:1d:
                    c7:1d:de:14:28:11:98:cd:5f:c3:7f:11:dd:ce:da:
                    67:ca:1c:63:33:e1:d4:65:bf:f1:0c:c2:7b:60:47:
                    be:8d:33:36:5a:0b:0e:14:b4:3c:cf:75:4f:5d:e5:
                    cd:a8:0d:53:93:1b:24:48:8e:58:c0:1d:53:d3:99:
                    fa:b9:b4:27:cc:bd:c7:22:e7:e2:f4:77:de:a4:52:
                    cf:5f:96:90:aa:20:8b:f9:47:c0:a0:11:49:35:62:
                    74:15:66:58:13:ef:8d:c9:e0:f9:bc:17:50:f3:78:
                    b8:e1:7b:a3:fd:ef:9a:89:07:b3:89:f0:54:1d:52:
                    12:11:e2:ab:d3:a9:05:23:48:d8:af:04:a4:f2:f0:
                    63:04:09:a9:3a:52:ee:8f:72:ea:72:24:c4:95:38:
                    46:4c:2c:bd:4d:ab:85:6f:4b:f3:6c:e6:4e:5d:6d:
                    99:1b:f8:f8:9d:13:b7:1e:0a:7b:0c:84:5a:89:d9:
                    3f:7b:ea:46:c0:b6:80:38:c0:69:66:02:86:b5:ed:
                    57:f9:76:7c:ab:9a:27:9b:fb:c4:cd:b6:53:42:63:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:88:77:B2:37:44:EA:31:D9:1F:D1:06:A5:00:79:83:F6:F5:23:89
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146314.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae50::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:70:58:8a:ed:b0:98:05:7e:53:db:9d:c1:4e:82:22:5a:e1:
         f6:ef:cd:44:3c:da:81:74:c3:e1:5f:fa:d9:3e:91:47:5a:49:
         29:6d:cb:ab:25:b5:01:06:8a:67:3c:b1:36:82:a8:27:2a:37:
         b8:b3:e6:14:01:8b:44:71:3e:70:19:10:bd:2b:65:64:6e:95:
         59:e4:df:4c:34:be:60:46:b6:6c:5e:e3:7c:84:3a:b9:12:45:
         22:1c:b7:a5:ad:38:a0:cc:4c:99:06:41:15:5c:88:c1:9d:d3:
         1f:31:d2:8a:b2:7f:ea:9c:53:6e:6d:51:8a:d0:99:a0:6b:13:
         76:f6:23:59:31:66:bf:2b:6e:6b:51:94:aa:31:a7:61:b1:97:
         f9:fe:30:94:d8:b5:36:b4:7a:d1:dc:64:3f:a0:48:00:d2:21:
         b0:00:d6:49:59:2f:a8:c6:a1:67:49:ec:75:05:f4:3b:d7:14:
         ef:0b:99:ae:b2:84:43:b3:69:6e:75:97:45:17:5b:ce:86:a4:
         68:54:6c:99:02:7a:e7:78:26:d4:5f:cd:a8:e1:41:26:d2:34:
         9c:35:21:e0:a7:55:64:fa:d6:c8:0a:41:6a:fa:ca:29:2e:ae:
         44:61:92:25:64:18:e3:6e:fb:57:b9:96:3d:85:bf:cf:f1:40:
         99:5f:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:20 2026 by rpki-client