Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146351.roa
File:                     AS146351.roa (raw, json)
Hash identifier:          yOl9BdAhOkp8TF0HoWijXrRTHDJCQiK3nIJsiymav4E=
Subject key identifier:   24:75:86:F7:F3:FB:34:22:21:33:CD:91:77:96:EC:61:EC:AE:B9:9B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       55B45481B5100999D7A7221B62DF0B0B1219FCF6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146351.roa
Signing time:             Tue 26 May 2026 03:17:06 +0000
ROA not before:           Tue 26 May 2026 03:12:06 +0000
ROA not after:            Tue 25 May 2027 03:17:06 +0000
asID:                     146351
IP address blocks:        240a:ae75::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b4:54:81:b5:10:09:99:d7:a7:22:1b:62:df:0b:0b:12:19:fc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:06 2026 GMT
            Not After : May 25 03:17:06 2027 GMT
        Subject: CN=247586F7F3FB34222133CD917796EC61ECAEB99B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:01:18:ad:d5:51:47:ee:99:d1:e5:4e:b0:dd:
                    ce:6f:79:de:ff:e8:f9:21:7a:91:71:b3:12:16:a0:
                    9b:6e:80:43:f5:26:a2:50:bc:13:08:67:9d:25:63:
                    1d:69:cc:44:20:a0:d4:d3:ba:62:3a:ed:36:19:3c:
                    50:58:88:7b:e2:5a:26:c2:f5:3d:aa:f8:11:f9:37:
                    0f:9b:18:b8:6c:e1:e6:3d:40:98:7e:e5:f2:8e:f5:
                    98:4a:95:55:47:6b:2c:4b:52:a1:73:61:f7:6e:1a:
                    5e:30:d7:71:68:52:bb:ee:f9:18:e4:8b:23:8d:62:
                    b8:cf:af:a6:64:11:a8:44:26:73:ef:29:6e:d4:81:
                    19:df:56:36:80:a6:5f:84:6c:0e:dc:b0:65:5c:cb:
                    79:3c:cc:03:9b:30:0a:ae:e5:89:80:93:2f:98:a4:
                    d4:bc:a7:5a:b7:46:4e:c0:42:27:44:ec:50:fc:02:
                    e5:2d:3b:30:a7:1f:52:75:e3:86:63:2c:2f:e6:ea:
                    b4:28:c1:f9:3f:44:7e:4e:a7:af:98:7c:53:41:0e:
                    af:c6:bc:7b:00:97:37:f5:c9:03:d6:8d:a9:ca:15:
                    13:3c:5b:c6:ce:9d:61:8c:6f:1a:52:2a:be:cc:28:
                    33:79:a5:19:6f:05:70:e2:2e:99:56:5e:15:86:98:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:75:86:F7:F3:FB:34:22:21:33:CD:91:77:96:EC:61:EC:AE:B9:9B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146351.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae75::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:48:59:35:24:b3:d5:fc:63:22:5a:f3:0b:c8:e5:ae:d6:16:
         cc:86:3f:5c:14:1c:6b:62:6a:5f:a1:df:46:83:ca:65:7b:0a:
         26:a2:8b:63:7f:27:b7:92:bd:e5:6e:db:6a:8c:19:ce:d0:a6:
         7b:ec:e0:2f:ea:2c:f5:fc:12:94:16:46:c2:ed:03:0f:e7:26:
         93:37:db:ab:23:12:c7:44:0b:3c:91:20:41:cc:eb:f9:99:2e:
         7c:65:43:e2:99:97:a9:8c:75:06:91:42:5b:9d:33:95:e2:25:
         81:bb:5d:31:9e:8d:c4:27:89:e2:9a:a1:4d:10:4d:a8:38:41:
         f6:be:db:91:51:53:56:3f:88:02:0c:cb:0e:bc:e5:2a:39:a1:
         39:df:d2:9e:d4:bf:1c:2c:3c:c5:12:e8:ca:c0:8d:b3:18:3e:
         99:75:40:e7:8a:fd:24:0d:f6:cd:94:c8:26:4f:c6:91:ba:da:
         fe:87:d2:46:0f:b9:c1:08:29:dd:fd:f8:a8:11:5c:ec:9f:e8:
         38:0e:06:2d:2d:09:9c:1d:c5:b8:44:10:5b:c0:27:18:e4:17:
         cb:39:57:f1:39:6f:f5:a4:e9:71:d5:ae:f4:ef:b7:f6:c3:96:
         91:a2:c1:69:48:33:39:9b:5f:a0:da:b9:a5:e3:a0:f0:d6:4c:
         29:79:fe:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:17 2026 by rpki-client