Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146427.roa
File:                     AS146427.roa (raw, json)
Hash identifier:          893m2MO7OvBiKPv3AI/WuRCLFwnQIMHvBoobfrGOe7k=
Subject key identifier:   AE:41:58:16:AA:0E:82:B3:08:0D:5F:E3:D9:8D:82:37:4F:58:F2:6B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       33B306AD409FC54CF9F100B601C2C047ABA58731
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146427.roa
Signing time:             Tue 26 May 2026 02:35:17 +0000
ROA not before:           Tue 26 May 2026 02:30:17 +0000
ROA not after:            Tue 25 May 2027 02:35:17 +0000
asID:                     146427
IP address blocks:        240a:aec1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b3:06:ad:40:9f:c5:4c:f9:f1:00:b6:01:c2:c0:47:ab:a5:87:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:17 2026 GMT
            Not After : May 25 02:35:17 2027 GMT
        Subject: CN=AE415816AA0E82B3080D5FE3D98D82374F58F26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:46:af:4a:9c:6b:77:fc:b5:4e:a9:95:3f:
                    d0:07:aa:00:1b:ec:7b:9d:50:cf:12:a5:bd:80:e5:
                    37:7b:e8:c3:e4:48:8b:6f:ad:8e:32:33:35:7a:84:
                    12:8b:7e:3a:87:86:e3:72:42:45:3a:7d:ec:7e:d4:
                    96:d3:b0:22:7b:35:36:d5:6a:04:63:a5:81:ec:b7:
                    d6:1d:54:fb:56:81:dc:f6:1f:36:93:4c:5b:88:6f:
                    ab:85:dd:ab:d5:83:4f:91:88:86:7e:dd:05:a7:3b:
                    f4:19:11:22:87:66:cc:2e:3d:12:7e:8a:0d:43:72:
                    9e:b5:d7:62:59:e0:ea:45:19:4b:f8:08:ba:a0:e2:
                    85:58:13:fc:8c:0b:f4:ab:a5:08:11:2f:d7:48:7d:
                    fd:82:e4:47:3e:03:18:90:49:45:e3:9c:d3:64:60:
                    87:6c:19:49:3c:69:e7:67:3f:e6:9b:d9:c6:32:02:
                    1a:24:be:23:a7:b1:65:cc:17:4c:61:3a:54:00:c4:
                    7e:d1:cd:c4:25:9f:e3:db:b6:df:77:82:8d:fa:e0:
                    42:da:f4:ac:45:6e:0d:32:65:ba:aa:2a:83:bf:9d:
                    7a:4e:a0:9f:26:78:9c:c9:c6:13:62:95:22:e9:47:
                    76:98:08:36:29:40:71:de:db:48:53:b1:68:2d:b1:
                    b7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:41:58:16:AA:0E:82:B3:08:0D:5F:E3:D9:8D:82:37:4F:58:F2:6B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aec1::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:6f:d1:ad:a0:27:38:df:1b:73:d8:df:30:da:47:ef:22:a7:
         61:e2:19:0d:17:83:71:ef:74:1b:a6:a5:6b:bc:e5:0d:b3:64:
         41:37:7f:6d:19:32:5f:06:86:2f:21:db:90:6d:14:e1:6a:86:
         39:91:e2:d3:ef:fe:e3:bf:c8:e6:37:56:15:ef:26:36:91:9d:
         b2:12:b3:73:5f:45:05:b9:93:08:20:56:d2:38:96:22:85:c1:
         5b:39:48:1f:66:c6:fa:6c:fc:15:74:2d:37:c4:79:a9:c4:c8:
         65:f8:64:94:27:5c:98:bf:8d:d8:9e:21:e1:e5:97:d1:84:d5:
         cc:60:bd:40:5f:43:cd:cf:85:5f:67:c8:7f:ab:5d:ef:19:7c:
         af:c6:49:8d:3e:92:3b:99:f5:6b:13:21:85:42:c9:7a:70:59:
         b0:40:5b:a2:25:88:98:8f:a4:d2:0e:2e:38:0a:f5:31:9b:bc:
         c6:84:43:32:0a:bd:e2:f4:7a:5c:84:7d:cc:07:3d:49:60:56:
         fe:69:f7:c9:fb:74:16:de:5c:ef:9d:db:cd:1b:b5:99:ab:95:
         3c:3f:8f:b4:ae:cc:d9:d3:fa:d0:0b:37:da:1f:c1:ba:d1:b8:
         49:ec:ca:b8:db:c8:6b:4e:50:fc:34:c2:c2:f1:c7:20:fa:72:
         45:91:48:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:54 2026 by rpki-client