Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146369.roa
File:                     AS146369.roa (raw, json)
Hash identifier:          6qk+mZoPjyRo92vnm77zqUwtFUl5r9HqBGlBilI3jrY=
Subject key identifier:   F7:C6:3E:DA:03:29:54:CE:2C:4C:69:BD:98:D9:64:AE:C9:91:EB:09
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       209C4C49F154EFAF9039BC820858D53BB4C59730
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146369.roa
Signing time:             Fri 22 May 2026 01:50:08 +0000
ROA not before:           Fri 22 May 2026 01:45:08 +0000
ROA not after:            Fri 21 May 2027 01:50:08 +0000
asID:                     146369
IP address blocks:        240a:ae87::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9c:4c:49:f1:54:ef:af:90:39:bc:82:08:58:d5:3b:b4:c5:97:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:08 2026 GMT
            Not After : May 21 01:50:08 2027 GMT
        Subject: CN=F7C63EDA032954CE2C4C69BD98D964AEC991EB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1c:5a:1b:77:a8:91:02:c9:f8:cc:13:83:56:
                    05:ca:90:97:0f:36:6f:5d:3e:d8:6a:53:a6:80:15:
                    72:42:3e:79:31:5f:f6:98:ce:d8:3e:b1:63:6b:fa:
                    5a:54:8a:aa:ef:75:8a:d0:ce:23:8a:ba:8f:16:67:
                    e7:e7:ad:74:91:b0:8b:a3:3a:bb:c2:a7:10:7f:f2:
                    6e:c5:48:3a:d2:6c:af:43:e7:c2:78:c7:7e:9a:a7:
                    40:77:a1:0f:19:74:d4:c6:3d:f1:58:ec:4b:a6:97:
                    7b:8a:95:12:f7:61:04:45:fb:af:86:43:cd:74:33:
                    d4:c3:3c:ed:21:93:a7:26:80:41:d9:dc:3d:05:98:
                    d6:80:3f:e8:29:bc:8a:eb:a0:88:37:ee:18:0a:f2:
                    05:17:ba:4e:03:36:ca:9b:f1:db:5e:50:bd:38:fa:
                    25:ce:9f:e4:3c:af:cb:0e:8e:04:35:cc:56:5c:30:
                    40:07:fc:00:39:7d:39:67:33:c2:fc:1b:98:7d:1a:
                    94:2f:53:55:5a:3d:fe:68:cf:42:7a:cc:86:e4:bd:
                    ab:e6:9a:73:db:b8:be:68:ea:2d:8f:99:b5:0b:6e:
                    54:25:8d:c3:19:e7:4c:6e:d0:0f:06:9f:fd:93:37:
                    24:a3:3c:74:f3:b9:a4:43:f0:f1:5e:81:11:6f:6a:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C6:3E:DA:03:29:54:CE:2C:4C:69:BD:98:D9:64:AE:C9:91:EB:09
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146369.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae87::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:d2:94:17:27:f9:5f:67:fe:54:f6:3b:f0:f1:85:89:af:57:
         e5:29:66:c8:f8:3a:2c:77:77:d3:d7:3c:57:6a:7e:3a:d2:6f:
         19:0d:e5:2a:c6:54:99:f7:19:dd:56:b2:16:32:66:4f:ca:a8:
         5f:a5:3e:d1:10:23:28:27:2a:9d:08:c1:69:a6:99:26:61:eb:
         db:e5:6f:fc:88:19:57:eb:1e:e1:17:9a:4f:62:52:48:82:c9:
         34:39:47:a7:d3:64:02:72:12:a4:34:ee:df:d9:52:29:84:eb:
         c9:f1:2b:7f:aa:2e:3f:e6:70:a7:ba:14:2e:2d:66:7c:b2:e6:
         0a:e4:97:27:28:b7:b3:2f:0c:ba:3e:ee:ed:a6:82:3b:d2:6f:
         f3:ce:ee:92:5f:86:10:b5:95:37:53:3c:63:0b:75:22:08:2e:
         18:66:92:79:a4:17:6a:22:b4:77:d6:54:0f:85:5b:a5:48:80:
         5f:eb:14:6c:d5:ac:4a:d7:89:5a:41:85:1e:31:38:fe:f0:d1:
         ab:35:01:83:31:2e:7b:7a:64:06:b0:5d:5d:ac:ab:2e:74:c6:
         68:f1:d8:db:02:3e:2c:fc:a0:80:5a:e8:13:e1:a3:46:11:35:
         4f:5c:1a:c0:99:9b:2b:bf:36:61:7d:20:34:67:71:d0:a8:44:
         6f:d8:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:34 2026 by rpki-client