Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146504.roa
File:                     AS146504.roa (raw, json)
Hash identifier:          mvW34GPTYahQhRLlu3ZtpoZ+ujkR5dozpZzlhth2Vpg=
Subject key identifier:   17:29:F6:F9:AD:24:50:DD:89:6E:90:07:14:CE:4B:3F:AD:24:A5:A3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       58ACF24A382FD9F5CFEC46155EEA7086FF090805
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146504.roa
Signing time:             Tue 26 May 2026 08:52:40 +0000
ROA not before:           Tue 26 May 2026 08:47:40 +0000
ROA not after:            Tue 25 May 2027 08:52:40 +0000
asID:                     146504
IP address blocks:        240a:af0e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ac:f2:4a:38:2f:d9:f5:cf:ec:46:15:5e:ea:70:86:ff:09:08:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:40 2026 GMT
            Not After : May 25 08:52:40 2027 GMT
        Subject: CN=1729F6F9AD2450DD896E900714CE4B3FAD24A5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:49:e5:92:65:9a:df:a6:d5:22:cf:cd:a7:
                    45:bb:ad:1f:4e:58:c5:71:e9:70:66:66:cb:db:cb:
                    11:bc:86:df:48:6d:fb:5f:73:cb:c9:e7:70:84:9d:
                    eb:49:d4:8d:35:fc:86:a1:11:83:81:b4:ce:cd:7c:
                    ba:5f:42:bf:8b:0b:db:4c:cf:35:db:58:8c:84:41:
                    18:27:4f:74:ab:d7:de:0a:0e:ba:e8:78:9b:7f:46:
                    f7:11:45:cc:81:1a:28:d5:b8:5d:4e:d2:2f:38:4b:
                    ef:ee:ca:24:2d:24:65:dd:17:17:37:f9:8b:3c:38:
                    b9:43:82:92:47:67:2d:e2:3b:e4:4b:17:f4:f1:30:
                    d6:4a:c6:9c:e7:80:b1:11:ca:a8:65:2a:a7:49:00:
                    e1:68:d9:74:69:b9:75:51:29:ca:40:1a:95:a9:4f:
                    1f:9d:56:30:1f:27:ea:4c:f1:b9:f8:e2:68:ed:6c:
                    f7:cc:8b:33:df:c7:72:7f:ad:bb:23:ae:c7:5e:ee:
                    b7:f0:25:b2:c3:6b:e3:df:49:6b:24:bc:e3:0e:ef:
                    07:88:a9:e4:fc:35:c6:15:72:b9:43:bf:e1:24:26:
                    65:da:67:16:d5:52:38:cb:1c:3f:17:f4:cb:30:9f:
                    d8:a1:a4:5c:58:27:b5:96:fe:b6:ab:29:04:7e:8d:
                    3f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:29:F6:F9:AD:24:50:DD:89:6E:90:07:14:CE:4B:3F:AD:24:A5:A3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146504.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af0e::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:f8:e4:20:15:39:ab:5d:85:90:48:6a:94:48:4f:8e:25:92:
         eb:21:cd:a0:95:c4:5e:51:0d:d0:43:b8:3e:3b:6b:02:9c:6d:
         83:87:a2:5d:fc:60:53:dc:c8:59:4b:ee:2c:15:13:e8:14:2f:
         61:ee:d3:72:fa:82:b3:82:5e:95:d7:8c:0b:0d:d2:1a:9a:96:
         20:59:a7:f4:c6:6c:b0:b8:32:08:61:d1:cb:f2:c8:14:d2:1e:
         fa:24:b4:da:97:8d:64:cc:21:1f:bd:6b:11:0c:49:75:2f:58:
         c3:5e:ac:57:d8:6f:ae:fb:38:7f:84:09:c5:65:c1:2b:25:45:
         83:c7:1e:5b:f2:2c:8f:73:ff:d6:fa:a8:a1:5c:b4:2b:76:fc:
         0a:a0:ac:3e:76:10:da:00:98:4a:26:37:9b:c4:95:c8:34:68:
         37:92:92:65:34:22:b2:2e:22:c1:2c:16:23:c2:d9:32:84:f3:
         d2:7e:7f:f5:98:02:80:cc:00:99:cf:78:ed:8d:87:cd:ac:57:
         23:26:79:8e:94:e4:23:58:57:85:70:9c:09:e3:3d:6c:1a:de:
         d8:c8:0a:77:e2:f5:96:61:5c:ed:75:d0:84:12:12:89:af:28:
         03:d8:28:bb:14:29:3a:5c:cd:0b:49:8c:e5:f4:d2:fb:aa:df:
         ab:85:39:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:08 2026 by rpki-client