Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146453.roa
File:                     AS146453.roa (raw, json)
Hash identifier:          i0E+/mUTUXzkmudbc8s9/um1LPLKm1zVu98yVd3im18=
Subject key identifier:   57:06:CB:65:24:07:7E:44:ED:95:D8:14:63:22:95:85:6A:23:E3:5D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1E4407CA4146E132DDCEAEBA5F7C17B780767428
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146453.roa
Signing time:             Fri 22 May 2026 07:40:54 +0000
ROA not before:           Fri 22 May 2026 07:35:54 +0000
ROA not after:            Fri 21 May 2027 07:40:54 +0000
asID:                     146453
IP address blocks:        240a:aedb::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:44:07:ca:41:46:e1:32:dd:ce:ae:ba:5f:7c:17:b7:80:76:74:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:54 2026 GMT
            Not After : May 21 07:40:54 2027 GMT
        Subject: CN=5706CB6524077E44ED95D814632295856A23E35D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6b:f9:02:a8:3a:de:d0:62:57:d5:d1:56:d1:
                    65:11:bc:88:26:b5:de:a7:47:43:59:15:47:19:af:
                    f8:24:d5:ff:5b:d5:20:bf:6b:51:af:32:3f:f6:60:
                    6c:1c:e8:61:d1:d1:f6:5f:07:7c:10:f0:a7:82:41:
                    68:5f:83:50:84:0d:e6:1f:af:50:1b:ea:32:2d:a1:
                    f4:9a:a2:4f:18:96:42:8e:4d:88:1f:94:b2:40:dc:
                    be:23:b3:46:d0:f0:29:0e:d7:46:43:74:08:ab:e6:
                    10:cc:4e:ee:67:fa:12:77:5d:0c:0d:64:3a:f9:59:
                    1b:32:fa:bb:58:db:13:e5:83:a3:67:b1:f3:ab:4c:
                    16:44:85:52:02:34:0d:5e:74:86:ee:13:4f:7f:a9:
                    b1:e5:9a:68:46:04:84:c1:a0:1e:f8:42:5e:03:7b:
                    b0:29:fd:67:8e:1b:45:55:a0:2f:05:c0:9c:c4:02:
                    a7:70:b9:eb:f5:4c:47:5f:21:b9:2d:2e:a5:4f:7c:
                    29:32:f6:4f:9f:9a:78:a1:e3:fc:15:f8:c4:6a:5b:
                    9b:7d:b7:59:43:5d:1c:5f:8c:b7:08:44:64:55:2d:
                    8d:87:a6:ef:6b:bc:41:4c:7b:e3:b7:25:0f:79:86:
                    fd:66:15:a3:e6:29:ee:c1:10:63:13:02:b6:1a:53:
                    61:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:06:CB:65:24:07:7E:44:ED:95:D8:14:63:22:95:85:6A:23:E3:5D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146453.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aedb::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:1d:ea:2c:9e:68:70:6a:0f:f0:8c:7f:b2:5b:ea:cd:93:2b:
         bc:61:1a:10:d0:0a:eb:d1:36:7b:ff:27:3a:89:64:bf:5d:2b:
         ad:53:e2:d2:b9:4d:f3:7f:d3:1c:83:4d:30:46:33:ec:ce:5c:
         92:d1:c3:80:19:82:7c:85:e3:27:8f:85:e7:1f:b4:1e:35:3a:
         e4:a8:98:c4:0c:16:89:e6:52:8f:10:9c:9e:13:2c:a8:63:90:
         c6:7d:5c:c0:6c:0f:7b:0f:ae:e3:7a:22:b1:42:4b:e8:6a:fd:
         7d:63:ff:52:07:42:9e:77:64:bd:20:96:c7:21:c9:3b:7a:15:
         d0:9f:40:3e:c3:17:c5:dd:c5:65:4b:53:92:d8:a9:13:12:bc:
         b8:1e:5e:5a:05:10:57:e4:20:73:45:e8:58:2e:d2:80:92:93:
         10:9b:26:69:a7:ac:6a:8d:9f:19:3c:27:c5:74:c2:cc:65:68:
         3f:e2:0b:de:e3:f6:96:07:16:25:3b:d0:dd:32:da:04:45:c9:
         73:36:f1:41:e9:a1:6a:a5:ad:1e:82:ef:df:63:af:60:4f:72:
         1c:97:f4:32:3c:8b:f2:b9:b0:97:16:1c:b5:54:81:f0:a4:6d:
         40:86:86:c1:52:36:36:11:3e:da:32:47:5d:93:c6:93:c0:5d:
         71:fa:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:14 2026 by rpki-client