Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146536.roa
File:                     AS146536.roa (raw, json)
Hash identifier:          cklxO1O68xSe+DeRW60Iy91u5aqRJmqXGuk4VufRZiM=
Subject key identifier:   98:76:6A:E2:87:BC:05:17:A2:ED:72:70:BF:5A:7F:B3:B8:42:BC:34
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4AF4F281320ABC5DB0EF115E300908CCA559419A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146536.roa
Signing time:             Mon 25 May 2026 06:28:42 +0000
ROA not before:           Mon 25 May 2026 06:23:42 +0000
ROA not after:            Mon 24 May 2027 06:28:42 +0000
asID:                     146536
IP address blocks:        240a:af2e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f4:f2:81:32:0a:bc:5d:b0:ef:11:5e:30:09:08:cc:a5:59:41:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:42 2026 GMT
            Not After : May 24 06:28:42 2027 GMT
        Subject: CN=98766AE287BC0517A2ED7270BF5A7FB3B842BC34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:91:df:4a:bd:66:e2:d2:54:e2:d3:38:62:
                    36:96:bb:80:64:c5:b1:ad:30:c5:8a:b4:14:91:e6:
                    d0:bc:fd:01:52:1c:4d:83:3e:94:37:78:94:2f:75:
                    af:fb:71:ce:04:48:92:38:91:7f:5a:30:8c:09:28:
                    11:22:04:3a:77:b7:09:4a:2e:ac:95:26:e1:a5:3d:
                    13:0f:2f:de:da:b5:48:39:17:3f:72:84:62:23:bc:
                    36:5e:08:ba:d7:64:b0:da:74:52:2b:cc:e9:a5:39:
                    7c:80:83:7f:db:3e:1a:ad:67:bf:04:14:28:9e:71:
                    c8:e9:7a:15:d1:fe:7e:ad:c9:e9:0b:6b:ae:e8:02:
                    f2:72:1a:f7:0b:21:86:7b:9f:bc:83:a7:58:79:eb:
                    cc:1e:20:28:c4:9e:10:69:4a:05:e3:23:be:95:89:
                    92:0b:df:76:dc:ec:fa:2b:01:08:7e:1a:6a:69:95:
                    c7:c7:ff:61:22:d2:d7:ed:ea:dc:2a:17:08:8a:ed:
                    fc:81:24:06:dc:3b:b8:35:f6:c2:01:d4:ec:c6:f5:
                    1b:31:4a:78:e1:6a:07:40:b2:16:5f:e8:95:34:c8:
                    b2:79:fe:9b:7b:bc:87:7d:fc:a4:66:94:20:d3:af:
                    f2:df:ae:00:61:e9:cf:4f:83:ad:5b:06:94:78:2c:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:76:6A:E2:87:BC:05:17:A2:ED:72:70:BF:5A:7F:B3:B8:42:BC:34
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af2e::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:5f:7f:a4:2c:15:11:f1:18:62:0e:a5:8a:fd:e1:fd:f3:d0:
         f2:26:77:ef:53:6f:49:57:11:a1:5e:52:39:44:8a:fd:eb:b9:
         0c:3f:74:fb:61:6a:ac:54:96:df:71:06:34:61:2a:24:a5:40:
         30:81:2a:a6:19:77:da:23:e3:8b:ad:59:18:43:cc:06:b5:19:
         4e:74:64:ce:79:01:63:c8:f5:8f:06:f1:48:83:06:60:77:58:
         5b:7b:e2:9c:b5:31:a6:3e:ea:33:ed:fc:62:b2:6b:1a:52:50:
         90:9f:b3:d3:40:71:af:06:66:70:d9:47:e8:a5:67:86:95:c6:
         d1:d6:f8:ec:4a:4d:f4:47:7a:ed:d8:74:da:c1:d0:e1:47:2e:
         e5:3f:2c:10:a3:c9:cf:db:4a:72:96:38:7f:10:fc:4f:b2:2b:
         ba:e8:a9:e0:8a:6d:84:32:89:5c:a3:bc:a9:f1:b9:51:f3:ef:
         72:c0:8d:75:1c:70:bd:b6:3e:a3:7f:d4:86:46:38:75:d4:9c:
         90:d6:b2:e3:76:e6:ef:cb:1a:cb:0e:97:84:2f:63:bf:51:b4:
         21:76:4e:79:3d:f6:7a:5a:67:65:8c:1a:c2:9a:d7:29:e2:ee:
         6f:48:21:c7:38:74:4e:e1:74:74:bb:d0:34:09:e8:c8:b0:4d:
         1e:7f:af:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client