Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146319.roa
File:                     AS146319.roa (raw, json)
Hash identifier:          sVFP2DuZnUzxYprjzyq6YQMgR2U5/lzxThOZKeeZ+P8=
Subject key identifier:   EC:FF:76:57:DB:74:A9:ED:C5:66:DC:85:F7:44:12:5B:1A:05:C1:83
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       13F742CDD65083A392E83E0DC9F559F211E95FA9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146319.roa
Signing time:             Tue 26 May 2026 02:34:55 +0000
ROA not before:           Tue 26 May 2026 02:29:55 +0000
ROA not after:            Tue 25 May 2027 02:34:55 +0000
asID:                     146319
IP address blocks:        240a:ae55::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f7:42:cd:d6:50:83:a3:92:e8:3e:0d:c9:f5:59:f2:11:e9:5f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:29:55 2026 GMT
            Not After : May 25 02:34:55 2027 GMT
        Subject: CN=ECFF7657DB74A9EDC566DC85F744125B1A05C183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:75:c6:85:3d:91:f5:fc:44:fb:1d:04:16:44:
                    da:ba:4c:fe:b6:7e:2c:68:19:d1:64:3a:41:fc:bd:
                    88:b8:cb:67:b7:7b:82:2f:a5:8f:46:4d:5c:a6:15:
                    8e:b9:7e:3f:e0:17:7e:4d:d1:1f:ec:33:6e:53:94:
                    20:cc:98:9f:31:d0:5f:3c:dc:59:f1:ff:6e:1a:73:
                    84:cd:0a:17:38:b4:c2:d9:db:83:98:f8:dc:5c:8a:
                    67:cb:57:6c:17:a3:59:7a:b1:f8:11:44:c9:2f:46:
                    82:b1:73:89:63:14:16:0c:c5:df:ab:23:4b:02:f1:
                    f9:c8:5a:de:88:36:8b:e2:03:2e:90:12:a7:0f:02:
                    00:49:fa:a7:5b:36:96:f2:c9:2b:57:9c:e1:a0:0a:
                    74:f6:e9:8a:89:35:6b:b8:9e:0f:71:86:6d:a8:fc:
                    68:51:e8:62:d5:92:9b:2e:38:41:52:bd:d1:ff:98:
                    fa:e5:4e:4e:7e:7a:62:fe:7e:35:1f:af:f7:a7:2d:
                    ea:80:0a:c4:46:05:4f:63:92:29:26:3b:ac:26:c6:
                    e2:a7:cd:be:b7:42:a9:9e:17:7e:3a:96:6d:71:76:
                    94:e8:cb:6f:6c:95:e9:0f:23:7e:30:5a:3c:7e:77:
                    15:3b:70:09:0f:1f:72:75:1d:a2:7b:96:be:a7:d0:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FF:76:57:DB:74:A9:ED:C5:66:DC:85:F7:44:12:5B:1A:05:C1:83
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146319.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae55::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:73:8f:a7:d4:2e:f4:b4:3b:cd:ef:51:6a:ee:56:8c:db:1a:
         ce:e0:a7:14:3a:cd:29:ba:eb:43:d1:3e:71:80:c8:14:a5:df:
         67:bd:55:db:44:7a:a4:ff:db:0d:7a:06:55:11:7b:6b:09:b1:
         26:c3:5f:df:88:84:7d:84:fe:96:3b:ad:89:70:0c:1e:fd:e7:
         35:f1:e9:15:33:d8:15:0f:45:8d:00:b8:88:64:c9:29:ed:58:
         dd:1c:98:42:06:4f:78:61:b1:3f:75:a5:b6:f8:06:29:c5:62:
         2b:f6:a0:e6:5e:a8:1d:33:a3:ef:a2:0d:c3:39:2d:33:dc:c6:
         20:a3:81:b1:79:54:e4:36:f9:ad:ee:ae:1f:ef:56:81:c6:e0:
         19:b3:2c:92:c9:c6:f6:de:d4:fb:f6:6c:d9:36:64:ee:e5:cb:
         49:28:34:2a:96:ec:a0:a9:0e:08:1d:8a:3f:58:70:71:e3:75:
         e4:65:88:ae:a9:cf:c9:44:63:02:bc:ad:a5:c7:d4:58:76:ad:
         e0:0c:67:7f:29:42:94:0c:d6:50:2d:8b:52:25:c0:3a:c7:88:
         8b:20:c2:f2:5a:0b:ca:35:e6:9b:7c:a7:70:9c:35:b5:2d:84:
         9b:e1:e4:b4:a0:8c:6b:ce:01:7c:3a:30:99:d9:f1:f3:d1:ee:
         c9:18:be:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:18 2026 by rpki-client