Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146496.roa
File:                     AS146496.roa (raw, json)
Hash identifier:          Je8r7ip64uaxD36WEyZBiOU2WvVK+S29MSNcbfrbBBI=
Subject key identifier:   B0:B7:61:26:0D:E7:F7:54:28:44:C5:9C:01:3B:8B:06:EA:FE:A3:F5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       260D916C4B8FA92044F12091BD1145D5BE0D611E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146496.roa
Signing time:             Fri 22 May 2026 07:32:06 +0000
ROA not before:           Fri 22 May 2026 07:27:06 +0000
ROA not after:            Fri 21 May 2027 07:32:06 +0000
asID:                     146496
IP address blocks:        240a:af06::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0d:91:6c:4b:8f:a9:20:44:f1:20:91:bd:11:45:d5:be:0d:61:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:06 2026 GMT
            Not After : May 21 07:32:06 2027 GMT
        Subject: CN=B0B761260DE7F7542844C59C013B8B06EAFEA3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:01:87:cf:a7:4b:4b:69:4d:a4:1b:6d:d4:
                    14:bb:18:f3:a0:87:91:cd:d0:d8:c7:b9:61:28:89:
                    b2:bf:34:a8:2c:a8:cb:f6:72:e3:06:eb:29:53:f2:
                    f1:28:f8:59:a5:a4:27:1d:2e:2c:34:88:a5:b1:d9:
                    ba:cc:ce:19:45:9c:b5:e8:12:e1:46:f4:c5:06:90:
                    20:04:98:dd:16:c2:e3:26:86:e9:36:54:44:ee:14:
                    cc:92:ab:02:a2:41:8d:c6:34:3b:22:2d:aa:7a:da:
                    e9:12:86:16:06:df:c1:7b:d6:0d:56:2d:1e:de:ed:
                    1d:70:93:a0:44:69:fd:bb:99:a3:42:46:ef:43:de:
                    8a:d0:2e:9f:0f:0b:74:b1:2e:f9:64:49:6f:43:3a:
                    5f:35:99:67:59:58:a4:82:a0:db:35:61:c8:9b:1d:
                    b9:fc:99:5f:f4:63:02:8d:6e:3f:28:0d:fa:88:d3:
                    da:6e:9f:95:fb:c9:13:21:f7:72:16:ae:26:c5:d1:
                    7a:55:93:ee:ba:ff:2e:e9:85:a2:ab:60:b4:b9:d5:
                    09:2e:3f:fa:1c:95:3a:78:5c:00:6b:c2:bc:56:fd:
                    80:da:db:fe:99:38:13:da:17:99:6f:cc:c4:ca:0e:
                    4c:e5:ca:24:45:af:70:df:1d:3d:f1:60:90:a0:26:
                    22:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B7:61:26:0D:E7:F7:54:28:44:C5:9C:01:3B:8B:06:EA:FE:A3:F5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146496.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af06::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:1e:4d:2a:63:4c:d6:58:c5:8c:d3:17:ca:ee:e4:f3:b3:92:
         8d:59:a6:a2:4b:28:37:95:80:3a:7b:09:0e:85:31:cc:5d:c1:
         b3:e6:9c:c9:21:4e:5e:77:45:a7:ff:5b:05:4d:a3:ba:a2:da:
         af:66:32:aa:d9:b8:81:fa:ed:d6:9e:ce:0f:ca:f0:2c:4a:86:
         bf:f6:16:fd:49:f2:59:ac:73:c7:0f:80:66:9f:79:fc:77:1b:
         2c:e3:4b:0a:95:6f:d6:46:fa:00:3e:a1:38:7f:d9:9a:2a:b4:
         76:33:a9:a8:8a:cc:fe:83:e0:19:db:42:b8:94:59:09:9f:a9:
         23:55:9d:2e:61:f9:1e:1d:dc:1b:34:82:2b:79:8a:50:e5:55:
         c9:c1:6c:3b:58:45:d4:4e:4d:07:5b:e4:1d:1c:00:44:82:fa:
         97:a9:bb:2e:2a:be:3f:88:f2:f2:dd:71:c6:11:b7:d9:38:7a:
         21:30:1f:30:3f:10:dc:e7:18:aa:87:5e:f4:4d:d6:3d:79:8d:
         c5:b9:2c:ea:7b:0f:96:4d:a2:22:99:99:ce:6c:d4:1c:99:d4:
         96:45:82:fa:62:c4:4e:93:74:87:26:59:21:d8:13:e4:1f:77:
         2c:a8:63:eb:91:18:fc:fb:12:21:58:cd:dd:b2:4a:b2:95:19:
         bf:43:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:31 2026 by rpki-client