Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146438.roa
File:                     AS146438.roa (raw, json)
Hash identifier:          bhh37nKLuMFVKMFAP191GaVK5Ny0nAGwIHf3k9ZDYhU=
Subject key identifier:   04:69:9D:FE:08:6B:FC:BB:C5:8C:06:83:6D:C3:62:DD:4E:50:C9:DD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5F65000BCFD2E398E81D1ED76082258CDB20C547
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146438.roa
Signing time:             Tue 26 May 2026 03:16:43 +0000
ROA not before:           Tue 26 May 2026 03:11:43 +0000
ROA not after:            Tue 25 May 2027 03:16:43 +0000
asID:                     146438
IP address blocks:        240a:aecc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:65:00:0b:cf:d2:e3:98:e8:1d:1e:d7:60:82:25:8c:db:20:c5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:43 2026 GMT
            Not After : May 25 03:16:43 2027 GMT
        Subject: CN=04699DFE086BFCBBC58C06836DC362DD4E50C9DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d9:ab:7f:c0:90:a2:cd:85:a9:6a:b2:c1:40:
                    bf:e3:aa:49:35:bf:6b:42:a4:7f:2e:36:de:a4:23:
                    38:9d:5c:13:63:e4:ed:af:57:3e:cf:3f:06:e1:6a:
                    25:c6:43:2e:72:0f:42:dd:ed:63:be:b7:ae:1f:41:
                    8c:ef:86:e1:e1:54:93:37:20:26:3d:00:aa:10:27:
                    86:98:35:3d:57:de:4e:b5:b3:ee:e3:8f:9d:10:84:
                    26:1d:73:6f:f2:8c:2f:a5:2e:be:00:6f:12:98:41:
                    fe:86:59:c3:b4:be:26:c6:a5:a7:d5:3c:1c:7c:3a:
                    bb:c5:f3:b7:71:5b:b8:1d:0c:7c:4e:15:d0:11:89:
                    a2:40:f1:24:ee:ee:53:09:67:51:82:50:a3:9d:bf:
                    4f:e4:f3:e1:40:05:26:fe:8a:60:61:71:f4:62:7b:
                    1f:e1:d0:de:44:a1:ae:91:19:42:f5:a4:e2:3c:9a:
                    5a:13:f1:22:e3:8e:cf:24:ea:b7:a4:7b:91:61:63:
                    84:06:4f:ca:3e:09:58:83:73:cf:0d:6a:57:08:2e:
                    b4:54:e6:1c:ea:74:47:40:8a:e2:44:0b:c0:d3:d6:
                    d8:f7:18:c1:2b:7f:ca:ba:6b:05:a9:ad:92:fd:c0:
                    f7:08:3b:43:f3:b2:c7:26:4f:ed:08:4b:45:b2:5b:
                    17:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:69:9D:FE:08:6B:FC:BB:C5:8C:06:83:6D:C3:62:DD:4E:50:C9:DD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aecc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:54:88:99:32:1e:29:5f:6a:04:70:d1:44:82:d1:10:de:27:
         bb:0f:fe:b1:9d:c7:0e:49:9e:5e:aa:d3:48:35:6f:9c:da:d8:
         3c:3b:f3:5f:4c:6d:59:33:ac:2c:e0:e0:8a:34:33:3b:7e:a9:
         95:8f:62:a9:bc:17:70:b8:fd:17:f5:32:db:a8:8c:c5:8c:70:
         71:e2:33:91:74:8e:92:05:3d:5b:ef:b2:5f:4d:87:3f:15:78:
         56:11:9f:19:35:68:b9:8c:f6:3c:cc:fd:ae:ba:30:8e:29:44:
         56:40:49:c7:a1:dd:c6:46:5d:5b:8d:25:ec:99:49:2a:f8:65:
         2c:a4:cd:a9:7f:00:c9:43:a4:aa:c4:03:22:9b:34:89:a5:71:
         29:b5:05:17:94:4b:86:04:f7:89:07:f2:ef:b7:38:d9:c5:a2:
         3d:96:33:74:f0:76:a9:77:cf:39:27:ed:e7:69:4d:46:15:19:
         a9:1e:ab:98:41:82:d7:31:2b:1e:8b:0a:56:56:26:6c:cd:9b:
         f3:06:5a:47:54:b3:27:a2:46:df:d5:d7:99:33:0d:34:6b:a6:
         42:e9:5e:d4:22:9b:61:b7:14:eb:5e:25:d7:7e:a2:97:03:d5:
         9e:af:83:3f:40:e9:35:6d:6e:44:a7:68:0e:d1:8e:d6:f2:a4:
         2b:3b:ce:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:01 2026 by rpki-client