Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146455.roa
File:                     AS146455.roa (raw, json)
Hash identifier:          Z/vEIPdlEM6PPMTbkX+FC10GTB7OinrZSYNkvJ9aZN4=
Subject key identifier:   F1:BB:BD:08:42:23:2A:CF:29:F3:BF:BA:19:1F:D8:2D:57:D3:CC:BD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       35B53686276DEBFC56F62B35A051EA427BFE6094
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146455.roa
Signing time:             Mon 25 May 2026 03:19:22 +0000
ROA not before:           Mon 25 May 2026 03:14:22 +0000
ROA not after:            Mon 24 May 2027 03:19:22 +0000
asID:                     146455
IP address blocks:        240a:aedd::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b5:36:86:27:6d:eb:fc:56:f6:2b:35:a0:51:ea:42:7b:fe:60:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:22 2026 GMT
            Not After : May 24 03:19:22 2027 GMT
        Subject: CN=F1BBBD0842232ACF29F3BFBA191FD82D57D3CCBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:d6:e0:5a:d5:0d:88:bd:5f:4b:25:d7:2f:
                    c5:f3:43:1b:41:de:07:df:41:9a:34:28:a1:35:6a:
                    2c:9a:51:35:35:8f:cf:4d:f4:ca:28:4b:9b:ba:87:
                    df:df:ff:fa:c5:df:e7:a0:60:55:e2:5d:49:8f:06:
                    ba:9f:e6:bf:45:ab:66:db:7c:ef:bf:31:71:cf:20:
                    21:a1:7c:c7:09:1c:3a:17:72:ae:78:b9:53:46:45:
                    70:42:1b:47:2a:d6:e1:c0:db:1e:52:a6:3f:3e:b0:
                    f7:ed:d8:4e:74:82:2e:71:42:25:a5:23:9a:4d:ae:
                    95:f7:bc:7a:ae:f5:aa:bd:f7:96:54:23:85:79:91:
                    b0:33:c2:7e:5c:8d:37:9c:8f:2c:95:fc:2e:a9:12:
                    72:8b:1e:a0:99:59:92:eb:c2:9b:f5:cc:0b:7f:e9:
                    56:75:0f:99:06:18:18:22:d3:5b:aa:b3:19:32:1f:
                    f6:93:58:c2:d5:be:0d:9e:5d:67:f1:16:6f:6f:b1:
                    68:a3:7d:09:de:d8:5b:41:b8:dc:76:65:d8:cb:87:
                    a2:ae:6b:78:f3:54:49:cb:67:5e:8b:2d:32:0a:a1:
                    d4:6e:db:93:3c:22:fe:4b:e6:be:b5:6f:f3:a9:37:
                    83:ba:d5:43:2f:4d:5a:46:42:28:0e:5f:23:ad:c9:
                    4f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:BD:08:42:23:2A:CF:29:F3:BF:BA:19:1F:D8:2D:57:D3:CC:BD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146455.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aedd::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:ad:57:fb:94:9d:5b:ef:02:62:cc:70:e2:bc:b3:af:db:38:
         16:6d:09:5e:1f:15:a0:7d:50:b6:c2:c8:cc:7c:57:e3:9a:76:
         02:d4:5a:fe:54:e5:dd:63:15:4b:39:e1:e2:73:08:6a:36:6c:
         2a:c7:3d:89:72:2f:6f:62:6f:d3:3d:47:ac:13:79:67:f3:58:
         a7:40:0c:e0:cd:31:b3:39:e5:4a:dd:4a:c1:32:f8:fd:e3:40:
         90:33:11:a0:9b:27:e8:38:56:eb:c7:d0:79:4f:34:99:ec:e7:
         2a:ab:c8:d1:b9:b0:ac:9a:13:7d:82:3f:5a:ee:7f:5c:2c:b4:
         52:55:1c:7d:8c:86:b8:de:c4:a3:4c:52:a7:cd:4a:69:c2:1a:
         77:ae:42:71:88:63:ec:62:16:bb:f6:04:f6:a3:6f:66:30:df:
         69:fa:a5:67:c6:55:03:d5:d0:03:49:5b:87:7f:7e:a1:e5:03:
         cb:41:6b:95:f8:fd:2d:aa:46:73:aa:76:3e:3a:56:9e:3e:f0:
         4c:5b:1f:29:f5:45:a3:e8:10:cb:b6:25:ae:25:4a:9b:7f:79:
         87:67:54:98:fe:ad:d7:be:1f:06:93:35:48:c3:86:dc:6d:d1:
         43:75:2c:37:0d:d6:78:e7:7f:b3:05:82:46:5f:73:d6:50:f1:
         84:8f:5a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:54 2026 by rpki-client