Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146548.roa
File:                     AS146548.roa (raw, json)
Hash identifier:          oR7ewEqgSN4uwn/XM7ZRQqX0ca0ljTNn9Dpq6q7+oqk=
Subject key identifier:   64:43:0D:1B:0B:A4:DD:39:8A:53:B2:1B:71:B1:CC:67:CE:86:41:FD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       09DDE472EFE56C183472458D5F769D4180074AB8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146548.roa
Signing time:             Mon 25 May 2026 03:19:14 +0000
ROA not before:           Mon 25 May 2026 03:14:14 +0000
ROA not after:            Mon 24 May 2027 03:19:14 +0000
asID:                     146548
IP address blocks:        240a:af3a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:dd:e4:72:ef:e5:6c:18:34:72:45:8d:5f:76:9d:41:80:07:4a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:14 2026 GMT
            Not After : May 24 03:19:14 2027 GMT
        Subject: CN=64430D1B0BA4DD398A53B21B71B1CC67CE8641FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:c5:24:38:c0:e9:24:88:fc:87:34:03:7c:
                    44:17:68:5b:1f:0f:05:4c:d0:d4:3c:e7:da:19:da:
                    5e:a9:ea:2a:4b:35:9a:42:38:80:7c:6a:d2:7d:fe:
                    cb:c7:a7:66:46:68:a4:3c:c2:71:c7:71:d6:33:a7:
                    5d:d2:28:91:34:75:dd:6b:12:a0:d0:be:75:6b:56:
                    a1:0c:a2:d8:ed:40:30:9d:09:dc:67:67:10:30:a6:
                    40:84:91:ee:da:66:94:ba:de:d4:53:37:a0:73:9d:
                    bf:1d:7b:b9:4a:53:c1:b5:b7:c1:71:d1:70:cd:55:
                    9e:92:c5:5e:eb:27:d8:27:e6:96:1b:a3:f6:18:b1:
                    09:79:c7:84:82:88:f4:d9:91:75:64:fc:61:3d:00:
                    8e:3a:bc:3f:2a:2a:c2:55:9d:58:2d:a8:30:54:d4:
                    01:9c:af:df:9a:0c:7b:f6:48:51:31:05:66:be:ca:
                    75:5c:68:b5:75:da:dc:31:52:a6:9a:77:c8:97:70:
                    eb:5e:d8:fb:d1:10:ef:d3:5e:38:fe:15:bd:cb:45:
                    e0:31:0b:ba:b0:02:53:d0:aa:11:37:e1:08:8c:12:
                    0d:ab:c2:63:22:c7:16:51:66:68:96:46:d8:9f:fc:
                    20:87:80:db:3b:05:49:b1:8e:f2:79:6e:37:bb:bd:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:43:0D:1B:0B:A4:DD:39:8A:53:B2:1B:71:B1:CC:67:CE:86:41:FD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146548.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af3a::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:a9:52:0f:19:b1:e5:f9:04:ef:a2:6b:81:66:c8:8c:8d:
         96:2a:7d:7e:3a:c0:b0:ac:3f:55:d9:8a:0a:12:b2:15:a1:a5:
         8a:b4:d1:94:38:b4:75:aa:48:08:92:0c:a6:99:99:25:49:59:
         9b:aa:c0:c0:63:5c:f0:2b:71:72:cf:ff:53:a7:4f:42:4e:38:
         f0:50:c7:d3:14:3b:e5:60:02:bd:5f:7c:6c:80:64:e3:e8:47:
         56:c7:aa:5e:18:02:e9:7c:eb:12:92:b1:96:6c:7f:37:5a:b7:
         00:b9:b9:3b:98:0a:82:55:cf:78:46:a1:44:c5:8c:5d:ec:39:
         6e:4a:4c:ea:34:53:ca:2e:ec:a8:b4:f4:a9:5e:2c:fb:62:12:
         cb:a9:3a:62:67:70:37:08:68:b8:17:ac:72:24:38:a2:40:d7:
         1d:7f:9d:7f:4a:05:20:3a:bc:b2:3b:77:05:7a:e0:a5:a3:3f:
         67:5e:ad:58:8e:1a:17:be:87:71:67:e5:33:d2:e7:66:da:41:
         a7:cd:8e:ec:ea:77:48:9f:f4:7a:84:10:ba:d8:cd:e9:1d:bc:
         6a:82:e2:c0:14:01:62:29:f5:da:4d:bc:25:c0:3d:d0:cc:b6:
         4f:d1:e4:cc:09:d3:b2:65:97:d6:71:bd:62:2a:a5:1f:b8:b5:
         cf:b4:e0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:44 2026 by rpki-client