Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146362.roa
File:                     AS146362.roa (raw, json)
Hash identifier:          lzCtT6jcWESxpShZIJhp2pHoFADKdF0piTOJ7ssUKyg=
Subject key identifier:   EB:F8:96:F1:98:A7:91:7C:4E:DC:41:BD:A5:79:D0:CA:39:33:A3:9F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       73245B257014BE61367F046787D30B1D10810D55
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146362.roa
Signing time:             Tue 26 May 2026 01:13:12 +0000
ROA not before:           Tue 26 May 2026 01:08:12 +0000
ROA not after:            Tue 25 May 2027 01:13:12 +0000
asID:                     146362
IP address blocks:        240a:ae80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:24:5b:25:70:14:be:61:36:7f:04:67:87:d3:0b:1d:10:81:0d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:12 2026 GMT
            Not After : May 25 01:13:12 2027 GMT
        Subject: CN=EBF896F198A7917C4EDC41BDA579D0CA3933A39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1a:4f:74:6e:f5:44:58:a4:5d:87:8a:89:83:
                    3a:22:c9:d3:dd:35:42:f0:8e:b0:75:25:a0:ce:f8:
                    89:56:80:c1:94:c4:1c:0a:10:fb:60:55:c0:54:5d:
                    8b:af:ae:14:ed:b8:fe:80:4a:c4:39:b7:73:2c:b6:
                    52:ed:05:6b:88:0f:f2:78:8a:6f:d7:cb:69:eb:89:
                    33:b9:eb:e2:e7:e8:66:9c:4b:4b:da:6c:e5:7e:90:
                    ea:91:bf:49:eb:bd:ae:d6:c7:3c:22:a1:bf:81:f6:
                    1b:27:78:d6:00:dc:dd:27:0e:46:35:ee:c6:dd:3c:
                    9c:b8:d9:6c:a8:92:fb:1a:34:8f:fa:49:38:ce:c2:
                    0a:b2:6b:53:fe:86:df:8c:6a:23:32:3a:33:b0:a5:
                    f2:29:3f:02:80:a5:16:bb:9d:5e:fc:8d:5a:d2:08:
                    e3:5e:8f:dd:ce:50:e0:0d:c7:d0:4e:c6:3c:cf:68:
                    c5:9b:77:cb:aa:13:eb:ed:a5:5f:c6:c4:b1:61:6e:
                    ce:79:ea:b8:f3:3b:11:f5:d6:21:c9:14:f1:87:5e:
                    8e:08:f7:05:15:27:b2:1e:3b:b1:a1:93:31:bb:0d:
                    d6:11:83:f5:32:76:a2:60:9e:59:73:d9:bf:13:10:
                    c8:0b:83:6c:86:7e:77:94:1c:5d:f4:b3:60:30:1e:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F8:96:F1:98:A7:91:7C:4E:DC:41:BD:A5:79:D0:CA:39:33:A3:9F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146362.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae80::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:4e:c3:98:aa:2a:98:55:64:c9:13:a1:fa:3b:32:99:8e:
         f6:10:60:11:16:fe:32:1d:97:ce:09:5d:ec:51:f5:8f:61:d0:
         13:fc:31:a9:aa:b0:78:bb:aa:b0:c8:c4:83:cc:60:58:cf:db:
         c9:b1:a4:4c:af:09:80:f2:f6:67:ae:bf:37:55:11:27:c4:17:
         30:2a:24:f8:23:f4:d2:5c:8c:e9:aa:f3:21:10:b0:92:da:5f:
         5d:7e:00:bb:fe:3b:76:6e:11:70:3c:f0:6b:07:a6:df:af:2a:
         20:c0:13:c4:54:45:ed:f4:b6:6f:7d:c8:80:3a:85:c6:5b:2f:
         e9:a7:56:25:21:ef:6e:a7:d8:92:04:66:7f:cb:cc:79:9b:dd:
         48:e7:d7:c4:a5:71:d2:bc:af:76:95:77:4e:b8:85:99:24:c0:
         ff:cc:b3:c4:72:4a:c3:4f:a5:bb:50:da:6b:87:bb:46:ba:42:
         96:65:a4:cf:9d:b4:0b:98:32:05:f2:80:f1:8d:60:69:d4:55:
         e6:bb:a5:5e:0e:4f:ed:27:a5:05:ba:ed:2d:c9:a4:ee:6a:82:
         2d:71:ef:db:e5:cf:cc:40:f3:a7:53:d4:ce:34:aa:70:d6:1d:
         ad:fa:51:72:e5:e6:8c:cb:f6:22:8f:ce:d9:6f:9f:74:55:d2:
         63:06:01:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:05 2026 by rpki-client