Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146439.roa
File:                     AS146439.roa (raw, json)
Hash identifier:          IKKwzapKaPbxysqD+42yDv7DoClXjZfcIS4poORkVAE=
Subject key identifier:   7B:0A:CA:D3:44:F6:CC:C9:85:DC:41:A4:CC:10:19:8D:23:03:36:3E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       76130B45F97F4EE78A0DB5404D86543D85527A54
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146439.roa
Signing time:             Tue 26 May 2026 03:16:45 +0000
ROA not before:           Tue 26 May 2026 03:11:45 +0000
ROA not after:            Tue 25 May 2027 03:16:45 +0000
asID:                     146439
IP address blocks:        240a:aecd::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:13:0b:45:f9:7f:4e:e7:8a:0d:b5:40:4d:86:54:3d:85:52:7a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:45 2026 GMT
            Not After : May 25 03:16:45 2027 GMT
        Subject: CN=7B0ACAD344F6CCC985DC41A4CC10198D2303363E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:20:b0:70:c5:89:ad:91:e5:68:c6:f9:d8:
                    18:c0:90:d6:61:23:cd:a0:64:d4:f4:4f:28:89:f2:
                    32:af:d5:af:6a:92:09:e4:01:63:ff:b6:9a:da:72:
                    b7:46:5a:ac:75:1c:8a:b4:d5:3d:e9:d5:f4:53:17:
                    c2:15:93:35:88:84:27:43:3b:2c:b5:7b:61:7a:89:
                    d9:a2:42:11:f8:a8:f4:6c:1b:c7:8e:14:38:92:ae:
                    61:e9:1a:59:56:4c:85:ff:d9:2c:2f:de:22:e9:02:
                    2a:2b:c5:0c:9a:e0:58:ee:fc:ba:4c:83:27:80:b9:
                    81:4b:18:3a:a5:9a:49:02:d3:35:11:3e:ae:3e:a6:
                    ae:9c:0b:3f:e7:42:58:1d:3a:26:18:5d:ac:7c:dd:
                    ed:be:12:3a:eb:a6:ba:95:d0:18:20:ce:57:e1:e3:
                    0c:59:1d:41:1c:ef:40:34:3c:b5:dd:f2:d8:f2:ae:
                    cc:e7:ac:57:16:36:fb:db:d4:83:d2:9c:80:1f:92:
                    c8:e2:8c:b9:b0:40:4a:f5:8b:1f:be:2d:ef:48:6f:
                    c7:5e:fd:cc:6b:72:df:4d:bf:12:a3:a8:46:b9:d2:
                    03:06:dd:e1:78:21:85:4b:93:cc:7d:7d:87:4d:6f:
                    af:a9:85:6d:ea:ab:6f:61:43:f1:f8:9c:20:c0:a9:
                    ef:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0A:CA:D3:44:F6:CC:C9:85:DC:41:A4:CC:10:19:8D:23:03:36:3E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aecd::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:7c:eb:88:5e:64:7b:e5:47:bf:30:b2:d0:32:9d:7e:27:b2:
         61:2e:32:c2:61:6f:98:4c:c8:fd:b3:ce:b3:3e:7c:b1:06:52:
         45:74:ed:ae:ff:9e:cc:69:17:07:85:55:ef:09:40:81:30:2b:
         45:6b:ee:79:2c:2d:31:40:5c:ee:59:86:1e:91:5a:d5:46:a1:
         60:85:c7:7f:51:59:8a:11:ef:f6:49:3f:af:4e:56:3a:87:f0:
         34:1f:7b:fb:04:57:21:f3:c6:ed:e8:4e:0a:93:5b:6c:46:9e:
         77:d9:45:2b:23:a4:67:69:c1:13:01:9e:88:6e:c6:6a:8f:35:
         b9:37:4f:81:04:39:51:35:f5:f3:e9:cd:c3:08:1a:94:33:3a:
         77:04:9c:e3:99:25:3f:bf:bb:8b:50:73:0b:f2:47:a4:a8:19:
         eb:bd:ef:b0:54:cb:b9:fa:6f:dd:13:51:36:b2:f8:94:df:02:
         80:73:27:de:36:9d:be:e6:5c:72:e8:f7:ad:85:d3:02:fa:8c:
         6a:54:cf:c7:81:14:ca:c6:be:a1:f7:dd:3e:28:9a:05:13:2d:
         02:0d:5a:f1:ae:56:5f:3d:a7:57:c2:7b:26:39:e2:3d:5e:a2:
         48:85:1b:97:c5:0f:a8:7c:37:15:2b:77:73:b9:80:96:c1:23:
         8b:45:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:47:46 2026 by rpki-client