Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146451.roa
File:                     AS146451.roa (raw, json)
Hash identifier:          evX8XBeZcK4LQoougTdKTlAewsqFqxoIakGl122thE0=
Subject key identifier:   1E:23:0A:0D:BA:C5:85:3F:98:80:7D:63:FF:82:92:4C:50:4C:FA:1B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       41E69F3AA908EDF06253B0C619F41B01BDD22FEC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146451.roa
Signing time:             Tue 26 May 2026 06:12:59 +0000
ROA not before:           Tue 26 May 2026 06:07:59 +0000
ROA not after:            Tue 25 May 2027 06:12:59 +0000
asID:                     146451
IP address blocks:        240a:aed9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e6:9f:3a:a9:08:ed:f0:62:53:b0:c6:19:f4:1b:01:bd:d2:2f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:59 2026 GMT
            Not After : May 25 06:12:59 2027 GMT
        Subject: CN=1E230A0DBAC5853F98807D63FF82924C504CFA1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:46:4b:46:7d:0b:83:23:91:ee:0a:11:b0:0c:
                    64:c9:5e:e9:b1:ca:16:ef:de:7f:8b:98:03:06:62:
                    ed:ed:3f:05:bc:43:9f:29:3a:26:01:c1:b8:de:a6:
                    55:ed:73:9b:0d:3d:7c:6f:5a:59:06:08:5a:73:c9:
                    67:d5:3e:1d:8d:d1:0e:c9:f8:1b:88:8f:66:bd:08:
                    a6:b4:a3:b9:a1:9c:71:8e:91:8f:1e:04:9c:1f:1d:
                    ef:e5:90:27:e3:0f:f4:f8:af:8b:76:79:5d:f4:59:
                    ae:ef:b8:38:5f:dd:4c:b9:be:e5:f0:67:70:64:49:
                    5a:b3:52:77:b0:33:d1:82:91:38:5a:50:18:a4:22:
                    21:2b:17:81:a1:7b:4c:7f:34:83:0d:c5:54:28:38:
                    8a:9b:be:d7:f4:e5:0a:a0:3c:0f:01:77:1a:bf:e0:
                    2e:a7:a8:2f:bc:19:82:4b:cb:ba:e2:7c:cb:62:6d:
                    0d:43:31:ff:d2:be:f8:d5:47:f8:2f:8a:e2:73:94:
                    a1:ff:de:a6:4b:e7:18:d4:64:fc:b4:f4:46:63:2a:
                    f6:89:f4:ac:42:da:ca:87:38:43:ae:00:d4:d7:fd:
                    cf:e8:47:96:83:bf:d0:7a:7e:1b:d0:ec:62:ee:cb:
                    4c:a3:8d:3e:03:d9:44:5a:4a:52:1a:21:5d:c1:7c:
                    37:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:23:0A:0D:BA:C5:85:3F:98:80:7D:63:FF:82:92:4C:50:4C:FA:1B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146451.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aed9::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:45:91:1a:a0:64:2b:a8:0d:1c:0b:02:41:a2:7f:9b:0b:1c:
         b5:66:99:a7:f7:00:30:2d:34:b9:2a:81:9d:fc:ff:84:73:4b:
         ab:7c:45:b2:89:59:7b:cb:e2:c0:cf:87:e9:02:07:6c:da:4c:
         c6:9c:37:77:d5:b6:e1:35:93:4b:97:30:bd:ab:89:35:03:31:
         bf:ec:e3:43:58:b1:dd:ad:bf:ef:91:80:9d:19:9b:dc:ab:b6:
         8e:49:9e:18:8a:58:dd:e0:7f:43:69:12:11:1d:58:4d:00:1a:
         00:72:4c:01:96:c5:b6:61:d2:d3:34:ca:b0:f6:74:4f:60:07:
         95:ac:d0:85:ec:d9:db:f9:69:65:bf:5b:00:f8:8d:09:0b:71:
         c8:c6:bf:49:05:fb:6b:7c:b9:78:ea:70:85:19:2c:d8:d1:d9:
         2f:ea:7c:19:07:ac:f9:29:16:57:23:73:2d:5e:1e:2a:90:84:
         e1:fa:87:34:ef:ba:53:5e:c6:48:9e:a2:06:26:7b:4e:f7:cc:
         c6:4b:b7:09:89:2b:37:91:43:57:63:db:24:5d:06:f8:c6:09:
         0d:6c:b7:15:e3:6b:40:47:b9:1b:98:14:94:3c:24:45:7f:56:
         28:7d:66:ae:94:55:17:d4:ef:c5:ef:05:a9:b8:57:be:b7:a5:
         55:6a:e1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:39 2026 by rpki-client