Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146332.roa
File:                     AS146332.roa (raw, json)
Hash identifier:          peJgLRZQTiS+ydxwWqbbAAREFJFW1njgXYjZsB7yivU=
Subject key identifier:   41:EA:C7:A9:C8:62:11:C3:AD:2A:D4:23:0F:B5:58:7E:08:B8:1C:9C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3A6F00C3B46F85E3B70787CB1210E08E7B154748
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146332.roa
Signing time:             Fri 22 May 2026 06:27:39 +0000
ROA not before:           Fri 22 May 2026 06:22:39 +0000
ROA not after:            Fri 21 May 2027 06:27:39 +0000
asID:                     146332
IP address blocks:        240a:ae62::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6f:00:c3:b4:6f:85:e3:b7:07:87:cb:12:10:e0:8e:7b:15:47:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:39 2026 GMT
            Not After : May 21 06:27:39 2027 GMT
        Subject: CN=41EAC7A9C86211C3AD2AD4230FB5587E08B81C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:19:b9:d1:60:7e:1b:1a:91:35:83:dd:b3:
                    8e:27:78:7c:6f:bb:0c:58:54:35:32:2f:1a:1e:c8:
                    5b:f6:7c:72:e8:16:40:c6:3e:36:7e:d0:ec:f6:7a:
                    91:b7:69:0b:89:26:f7:a5:b8:e5:eb:60:bf:ce:d0:
                    2c:9c:41:e5:7d:ca:2a:62:c3:3a:c9:68:1a:c9:54:
                    27:37:be:f4:e2:ed:1f:32:ba:51:9f:ec:97:9b:5a:
                    45:26:a7:6b:e7:71:7d:f1:38:27:c0:b5:c7:73:70:
                    2c:53:6a:6e:48:d1:8b:40:0a:3d:fe:a4:9d:15:cf:
                    d0:1c:0b:24:a8:1d:3c:1d:90:c6:fa:f8:9f:7d:3e:
                    d8:94:e8:6a:d9:f7:a5:6b:b5:02:ec:d7:66:1c:1a:
                    c4:d2:d9:4f:de:49:b2:86:55:f6:68:a0:80:9a:98:
                    12:5c:ea:5c:8e:95:76:1c:de:f0:e5:c1:a4:b4:ed:
                    4d:21:a0:8b:7b:ef:17:a3:49:f9:52:ee:3b:95:04:
                    28:0e:b0:45:fb:b6:6c:5e:f6:e1:dc:fb:5b:a4:4b:
                    d3:50:e4:a0:80:3b:0b:86:b3:ee:d8:f9:77:cd:69:
                    b6:39:b5:89:fb:13:a1:4b:55:91:61:a4:8d:1c:a2:
                    fc:c8:af:52:10:fa:b9:5f:9f:84:71:b5:e7:74:8c:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EA:C7:A9:C8:62:11:C3:AD:2A:D4:23:0F:B5:58:7E:08:B8:1C:9C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae62::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:2c:c7:dd:3b:3e:b2:66:d9:9f:e5:07:5a:a1:05:53:fa:
         34:e8:3d:6f:25:82:d8:ef:83:05:7a:95:52:2d:48:67:00:c6:
         78:bd:16:05:97:a1:3c:32:6b:ba:61:4b:8e:e4:6e:a3:e8:a7:
         4a:ae:c6:a8:39:88:a5:97:d6:b8:73:f7:61:52:65:2e:64:f2:
         5f:cf:ae:55:5a:35:c8:89:6e:52:99:a5:89:db:95:8b:b2:a2:
         57:a8:04:a8:19:c6:c7:7d:ce:01:58:2f:cb:f0:2d:10:5f:ef:
         10:82:63:0a:bb:75:23:06:9a:48:ac:d1:b1:21:9c:6f:27:f6:
         7b:74:a7:dc:94:7f:b2:e1:6b:7c:40:23:39:54:08:53:56:08:
         1b:1e:d0:b8:2b:c9:75:2b:c4:4e:c7:40:a9:b4:b0:91:ba:5b:
         6e:be:5b:b5:b8:55:c9:8e:91:ec:57:96:55:9d:ff:70:b3:2e:
         16:c4:17:b1:99:0a:22:34:dc:53:95:ed:5c:46:49:06:8e:c5:
         63:fc:68:e4:14:3a:e3:33:51:53:cf:ff:53:4c:54:04:32:0e:
         d1:7a:db:c9:30:4b:9f:b9:7b:b8:a6:60:ab:90:6d:a9:53:fd:
         88:24:5f:1d:53:a7:8c:05:fa:5c:97:23:9e:e7:3d:13:bd:94:
         c4:c9:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:56 2026 by rpki-client