Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146370.roa
File:                     AS146370.roa (raw, json)
Hash identifier:          fysO1hNGGLrrXzqsFII7fI0W12MzSLXrgptWJWEb2iI=
Subject key identifier:   E0:3D:44:64:47:E9:97:98:DA:7F:AD:0A:C9:0D:F4:E6:D8:20:BD:D1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4A5520665499F1CB596E364AEBC88FE73419065D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146370.roa
Signing time:             Mon 25 May 2026 06:49:05 +0000
ROA not before:           Mon 25 May 2026 06:44:05 +0000
ROA not after:            Mon 24 May 2027 06:49:05 +0000
asID:                     146370
IP address blocks:        240a:ae88::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:55:20:66:54:99:f1:cb:59:6e:36:4a:eb:c8:8f:e7:34:19:06:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:05 2026 GMT
            Not After : May 24 06:49:05 2027 GMT
        Subject: CN=E03D446447E99798DA7FAD0AC90DF4E6D820BDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:1c:45:8e:57:14:2d:41:b0:63:a3:e0:23:
                    bf:35:47:05:ae:54:77:9c:36:9e:4e:16:f0:05:71:
                    70:ea:31:eb:de:94:26:40:26:f6:5f:d8:39:cd:9b:
                    9b:90:35:0b:57:9e:e3:78:f2:da:d8:b9:84:e1:86:
                    9a:4f:af:9f:70:b5:dd:97:1e:77:d8:7f:12:07:44:
                    c3:fc:f6:ab:3e:0e:ad:c3:76:06:d2:87:98:cb:f8:
                    05:1c:35:b3:57:25:ca:90:82:ce:39:f6:bd:3c:92:
                    09:84:05:70:c6:81:45:42:31:72:33:9e:94:f7:19:
                    58:60:e4:c0:08:46:4a:0c:03:df:90:c7:3e:11:90:
                    0d:b1:8c:cb:bf:a8:d1:60:16:72:2e:5c:04:86:1c:
                    2d:be:c7:9e:3e:72:f7:d5:51:00:2a:1e:ed:2d:be:
                    f5:64:d5:d2:63:42:f1:ed:b1:55:59:55:ee:3f:5f:
                    93:ff:f9:91:05:f5:4b:bc:79:ba:96:74:78:98:45:
                    47:6e:9f:fb:1d:02:aa:b9:dc:4a:f0:eb:3e:72:39:
                    76:44:d0:fb:34:a7:f0:9b:f7:d7:a1:c8:37:de:60:
                    09:54:e6:41:5a:8f:77:2c:bc:d1:ab:1b:30:34:ff:
                    13:af:fa:ee:c4:8e:62:ce:25:bb:7d:52:12:a4:22:
                    c4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3D:44:64:47:E9:97:98:DA:7F:AD:0A:C9:0D:F4:E6:D8:20:BD:D1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146370.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae88::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:b1:05:4d:b1:1a:cc:a9:f9:f9:ff:34:5c:f2:b1:9d:c1:65:
         83:e1:40:03:73:e7:d2:5e:da:00:fc:0a:7b:06:d7:fb:7d:4e:
         11:a9:b7:4f:a2:cd:41:53:e2:ad:11:ff:a9:0b:0d:99:29:ed:
         6e:71:29:1d:ed:f4:c4:c0:9a:d4:ae:1f:e7:f7:94:3f:7e:35:
         c9:8b:00:84:0a:f4:55:4b:44:8d:b1:f2:76:a9:53:b4:bc:34:
         ed:e3:71:d0:52:cf:1a:ae:b2:4c:d8:ac:d1:6f:92:c9:90:db:
         73:3f:e5:58:42:38:6f:be:39:34:93:0c:b4:11:c2:79:f2:24:
         0b:7e:d3:5d:bb:b8:84:9f:50:58:94:24:7d:da:f0:91:c8:e7:
         cf:47:e3:b2:6c:dd:fb:87:34:e3:4c:8f:d7:04:22:98:90:50:
         94:e1:75:d6:7e:be:57:11:c5:a9:30:31:9b:23:f9:d7:b0:d6:
         87:9c:22:49:b5:3d:56:2f:f3:cb:34:71:11:e0:e5:d4:f2:18:
         e7:d7:18:db:9f:88:91:bf:c9:c6:1a:51:08:ae:47:bc:9e:3c:
         5a:a3:f0:b7:02:80:5a:27:25:2a:a3:95:b5:39:d5:44:b6:47:
         4e:3e:17:55:18:64:2d:58:58:4b:47:72:9a:83:a5:c2:30:b5:
         56:5f:a1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:12 2026 by rpki-client