Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146414.roa
File:                     AS146414.roa (raw, json)
Hash identifier:          UOBphZzuUPP91HY3Cptga4nUv/usHWFkpXG5vZJ+AKM=
Subject key identifier:   6B:47:47:77:74:08:6D:5C:04:29:69:21:3D:7A:69:79:11:F3:CE:8B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5A2A3170DFB94081A700ED89F05C7998B8B38DD2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146414.roa
Signing time:             Tue 26 May 2026 08:53:02 +0000
ROA not before:           Tue 26 May 2026 08:48:02 +0000
ROA not after:            Tue 25 May 2027 08:53:02 +0000
asID:                     146414
IP address blocks:        240a:aeb4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2a:31:70:df:b9:40:81:a7:00:ed:89:f0:5c:79:98:b8:b3:8d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:48:02 2026 GMT
            Not After : May 25 08:53:02 2027 GMT
        Subject: CN=6B47477774086D5C042969213D7A697911F3CE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a5:0f:f4:7b:9e:b6:7f:ac:60:f6:82:ff:0b:
                    8e:05:3d:76:1b:03:64:6d:36:7e:a2:ff:e9:46:9b:
                    ad:7d:23:ca:59:b1:6f:7a:ad:2d:64:f7:57:34:e1:
                    16:3b:69:3d:76:c2:b6:ce:13:0b:40:33:e6:09:ce:
                    74:26:31:18:52:49:e0:63:db:9e:62:64:25:15:fb:
                    86:23:0c:bd:3f:ee:87:bc:1c:61:50:ed:68:3c:79:
                    2b:b0:99:41:fe:9a:85:21:00:bf:69:5d:df:16:42:
                    4c:8e:f6:84:3c:1f:35:8d:b3:0f:ad:59:ee:b9:d9:
                    28:b1:27:96:b9:45:9c:8b:5b:55:ae:54:0e:bd:e9:
                    a9:3c:42:d0:bd:62:68:85:95:8f:a6:8b:a9:20:31:
                    5f:70:c0:bb:09:0e:ae:5b:2d:08:62:c0:67:98:df:
                    14:74:b8:0f:33:1e:87:c7:f0:a2:28:10:f4:2b:9f:
                    f5:5c:88:b6:64:18:42:6b:be:df:58:ee:6d:ef:e9:
                    e4:48:e3:5a:f6:8e:57:b4:5e:d5:b1:8c:a4:d4:fe:
                    b1:c4:f4:f4:43:a0:98:c2:70:a6:b2:ef:68:fb:07:
                    ff:07:a6:5e:3d:48:e8:d2:8a:e0:6c:da:71:d8:cc:
                    f9:01:e4:3b:6d:f8:ce:6c:c8:3f:cb:bf:38:9d:85:
                    54:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:47:47:77:74:08:6D:5C:04:29:69:21:3D:7A:69:79:11:F3:CE:8B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146414.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aeb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:38:16:90:5b:cf:09:1c:0e:17:7b:7e:29:01:f6:84:73:bc:
         25:cb:b5:37:03:c4:65:74:68:ee:fe:6e:07:64:37:0f:4e:87:
         4b:9b:8a:46:a3:97:ac:af:34:07:8a:37:6a:5e:df:6a:aa:ac:
         1c:a3:ca:4e:2d:90:c5:b6:30:a9:df:01:0d:75:47:17:91:db:
         0b:a3:98:92:96:52:28:73:89:37:ad:0e:98:55:43:b4:58:78:
         c0:46:ef:67:51:c6:64:ed:7f:49:2f:26:11:99:97:fe:5b:2a:
         18:2b:14:f6:9b:87:5f:2c:23:21:6f:66:d1:6f:30:10:5c:fd:
         4f:85:78:6f:32:8a:63:fd:cb:23:aa:75:87:71:c2:2e:88:2d:
         61:9d:c1:76:b5:ce:2f:6a:40:a8:08:5c:12:bf:fe:40:e0:0e:
         28:8e:ab:b6:0c:a5:bf:66:a1:5d:b3:2d:52:39:de:18:e5:d9:
         84:d5:a9:62:c0:20:5e:10:48:38:e9:da:44:79:42:8e:2c:4b:
         ce:b7:6f:82:b9:98:56:4b:9b:3b:fb:a2:98:63:ce:4b:42:2b:
         d2:f5:1f:ec:e2:cf:65:24:42:16:74:a7:c6:71:7c:9a:35:85:
         d5:b4:fe:a2:34:24:49:f4:45:7c:ba:dc:2f:1a:14:04:a6:5e:
         97:1d:6a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:58 2026 by rpki-client