Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146459.roa
File:                     AS146459.roa (raw, json)
Hash identifier:          WkBIV+idisfIuV4BeVd05svaf1vexE3TO+cvmObMNog=
Subject key identifier:   BB:5D:8B:90:3C:BE:7D:96:70:D4:5C:8C:A0:04:D5:70:F8:7A:82:1B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0E551BF25F9DA1443F1DBC1DD9D21CFFD8A5AE0C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146459.roa
Signing time:             Tue 26 May 2026 01:13:11 +0000
ROA not before:           Tue 26 May 2026 01:08:11 +0000
ROA not after:            Tue 25 May 2027 01:13:11 +0000
asID:                     146459
IP address blocks:        240a:aee1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:55:1b:f2:5f:9d:a1:44:3f:1d:bc:1d:d9:d2:1c:ff:d8:a5:ae:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:11 2026 GMT
            Not After : May 25 01:13:11 2027 GMT
        Subject: CN=BB5D8B903CBE7D9670D45C8CA004D570F87A821B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:e8:fe:b3:1b:ee:f4:dd:d9:5f:61:26:ce:
                    8b:f6:d8:47:46:f6:56:a4:b4:72:d4:c7:fd:2d:4f:
                    f6:2f:73:22:4a:74:36:ee:8e:be:d3:62:e0:24:a2:
                    2e:16:a6:b7:14:2b:77:ff:56:b9:b8:54:14:cd:eb:
                    09:44:0f:38:a5:e8:c2:7b:f6:a1:91:fb:8a:82:9b:
                    a9:11:ea:1a:36:88:76:f9:69:84:db:33:e2:84:78:
                    b4:8c:46:44:6a:09:b0:a6:37:90:fb:27:d2:fa:8c:
                    69:10:4e:ff:3e:30:4c:2b:49:0d:bd:c3:39:77:8b:
                    d5:d5:a2:48:69:ce:3d:69:88:f6:fd:e9:53:70:97:
                    ba:cc:e9:d6:03:a1:ff:ab:d2:86:ff:ca:ed:6d:c7:
                    e0:d3:1c:0f:a9:a8:1b:aa:57:47:3d:7b:a5:07:66:
                    f4:5b:3a:5b:03:28:6c:31:98:32:ef:2d:2a:4b:3d:
                    0a:de:42:79:56:2b:c4:ed:4f:44:1b:a8:9e:c1:f9:
                    56:f9:a0:30:b7:01:19:8f:78:ec:dd:35:5d:91:b9:
                    71:7a:d5:9d:d8:d8:0f:1d:ed:ef:68:8a:ea:95:06:
                    d0:93:2f:6c:3c:03:f3:da:1f:15:58:b8:62:42:8a:
                    85:33:95:12:9a:83:78:71:19:2b:bd:5a:c6:c6:d1:
                    c2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5D:8B:90:3C:BE:7D:96:70:D4:5C:8C:A0:04:D5:70:F8:7A:82:1B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146459.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aee1::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:e8:e5:f5:c4:e8:ed:14:14:47:5a:a3:11:da:cf:ca:a9:7f:
         83:ba:1e:80:e4:93:00:db:33:27:ca:f1:04:1f:de:f5:18:af:
         c7:05:41:b8:7a:d6:34:42:96:8f:d9:54:82:34:c8:66:69:13:
         4f:f9:48:9c:ca:03:ff:75:8b:82:7f:82:f3:57:5b:43:5c:09:
         e7:47:53:05:12:8e:28:45:0e:74:be:77:fc:c1:70:20:45:2c:
         ba:15:fb:eb:07:5d:66:d8:6b:61:85:07:b8:5c:62:a0:7d:72:
         57:03:fc:cc:d6:ba:27:02:64:9c:03:8d:db:dc:91:28:3d:fe:
         70:ea:0c:ec:d8:76:1b:2d:79:75:51:4a:ad:c9:02:af:8d:86:
         ff:cb:d8:d1:da:f7:cb:1f:c5:70:27:53:c1:c9:94:40:f5:fa:
         a5:bc:64:84:ce:cd:a6:58:46:dd:ba:ec:ca:f8:9e:4a:63:38:
         a4:ef:8a:42:b8:d4:fa:18:0e:1c:90:d1:67:ea:51:9b:11:63:
         a0:e3:5d:3a:d3:7d:84:5a:48:e3:36:97:a9:e9:a1:50:f0:64:
         31:f4:ac:12:50:87:df:26:9f:f4:a1:d7:c8:b5:37:69:85:f9:
         17:24:38:99:35:23:0d:c6:26:0d:16:18:be:0e:7c:11:bc:6b:
         d5:ee:71:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:11 2026 by rpki-client