Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146344.roa
File:                     AS146344.roa (raw, json)
Hash identifier:          nhxjRsFWTKG8EZNFEMkjGJziBiU+TtBGNmP7fvKjnEg=
Subject key identifier:   E8:58:66:E8:9F:95:12:28:6B:60:01:17:FD:55:97:78:B6:C2:60:74
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       25CAEA60B2951855E8942C2D36E1CA61080CCAEF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146344.roa
Signing time:             Fri 22 May 2026 06:27:46 +0000
ROA not before:           Fri 22 May 2026 06:22:46 +0000
ROA not after:            Fri 21 May 2027 06:27:46 +0000
asID:                     146344
IP address blocks:        240a:ae6e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ca:ea:60:b2:95:18:55:e8:94:2c:2d:36:e1:ca:61:08:0c:ca:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:46 2026 GMT
            Not After : May 21 06:27:46 2027 GMT
        Subject: CN=E85866E89F9512286B600117FD559778B6C26074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:19:fc:25:8e:13:ae:17:1f:db:53:93:86:da:
                    08:a9:c2:af:6b:d6:72:5a:68:2c:dd:e1:3f:cf:6e:
                    77:f3:d4:0f:a1:83:d3:de:b1:40:f1:5d:8b:0a:25:
                    5d:79:a6:14:be:bc:1b:51:97:f4:23:72:98:9c:67:
                    6a:94:4a:ea:28:ad:03:bf:e1:4e:f6:e4:6d:3f:1d:
                    60:11:8d:95:05:14:c8:ad:f7:45:b0:0b:5f:81:bf:
                    37:b8:57:b5:97:a6:c5:6b:82:44:3b:e5:5a:c7:56:
                    15:45:69:4e:14:31:3d:f7:3a:f2:12:2a:9e:23:98:
                    87:bc:d2:6b:91:b7:09:5c:88:9d:69:7f:76:85:6a:
                    c3:22:1d:60:a4:e8:1c:d5:f1:e9:b5:04:a2:e6:36:
                    ab:83:ff:7f:c2:ff:1f:ba:54:94:4c:aa:85:a7:dd:
                    51:f9:6a:35:fd:5f:9e:56:98:d8:90:27:4c:31:4b:
                    2a:bc:53:37:b4:fc:b4:a3:5d:a4:2a:92:73:32:8d:
                    3b:54:02:a9:fa:25:d0:c1:7c:30:11:40:ee:89:94:
                    2e:45:07:b6:d6:95:8f:ed:16:96:4a:90:1e:4a:12:
                    2e:2e:fc:fd:d8:f2:06:1f:6c:29:c5:88:de:9a:f6:
                    2c:36:c0:79:ea:71:f2:29:9c:09:c4:be:0e:d9:6f:
                    0b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:58:66:E8:9F:95:12:28:6B:60:01:17:FD:55:97:78:B6:C2:60:74
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146344.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae6e::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:21:7d:96:4b:a3:5d:ab:b6:1a:44:04:e2:e6:6b:95:64:17:
         b1:51:9e:8f:40:19:41:0b:51:3f:66:b6:60:43:0e:24:ce:b1:
         3f:e1:ee:f4:10:30:61:b3:ff:47:c8:be:29:8a:f2:53:1c:b8:
         a1:30:93:ac:0f:62:ac:73:5c:e6:9a:ea:82:75:a5:28:d2:7e:
         9c:b7:0f:99:a4:39:8b:54:67:a0:50:c5:72:6c:b5:c3:49:7a:
         df:66:62:a4:52:09:7b:43:58:94:18:10:b5:ec:0d:c9:f9:9b:
         c2:07:53:c7:bc:7a:23:c2:bd:2b:0a:a0:05:82:de:99:5d:a6:
         ee:07:08:71:80:cb:16:ef:2c:b2:84:88:29:ea:f5:43:7b:fb:
         93:db:bb:77:b4:01:14:d9:16:8d:81:50:7a:f3:f8:7f:13:11:
         59:86:39:74:f7:71:ee:cf:1d:8f:bf:28:21:da:64:f2:95:10:
         71:cb:d9:35:03:c6:98:ab:d4:47:1d:98:a1:5c:3e:95:c1:d8:
         71:d0:76:c6:18:4e:c8:63:be:5c:6b:c2:b4:36:d3:10:04:41:
         bd:1a:1e:75:fd:70:6e:d9:4e:1b:70:50:91:01:5e:e4:fd:a9:
         64:3b:94:12:59:70:8e:46:33:b2:c1:1c:a7:bd:ad:da:be:38:
         01:25:fb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:30 2026 by rpki-client