Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146551.roa
File:                     AS146551.roa (raw, json)
Hash identifier:          wi7rftcoNOa7/TFEDaJEB8xokPP/bQWUra1of7LGmg4=
Subject key identifier:   FB:03:61:14:2B:0B:4D:47:AB:34:FB:88:8F:70:28:B4:A3:B5:79:FB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       68442D25006D3D964761A4B1816F950928ECFA4B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146551.roa
Signing time:             Tue 26 May 2026 06:13:01 +0000
ROA not before:           Tue 26 May 2026 06:08:01 +0000
ROA not after:            Tue 25 May 2027 06:13:01 +0000
asID:                     146551
IP address blocks:        240a:af3d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:44:2d:25:00:6d:3d:96:47:61:a4:b1:81:6f:95:09:28:ec:fa:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:08:01 2026 GMT
            Not After : May 25 06:13:01 2027 GMT
        Subject: CN=FB0361142B0B4D47AB34FB888F7028B4A3B579FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:7f:88:68:8b:e0:f6:b9:b0:37:c9:f1:d0:
                    32:30:cb:f3:a7:29:d1:2d:60:51:ba:44:96:24:db:
                    05:bf:83:e6:ad:cf:46:9e:6b:83:ac:8b:01:c0:0f:
                    5c:24:8c:46:cd:5f:b9:32:66:d3:44:9f:fb:31:73:
                    42:8c:f7:d7:74:ce:b9:d9:b2:20:b4:06:7b:39:b1:
                    bb:00:53:ee:2a:58:91:42:e3:8e:42:92:a2:3a:13:
                    b3:f6:89:1d:1a:d1:dc:34:ee:13:3b:e5:07:e6:13:
                    cb:40:f2:37:58:63:8b:44:b7:c9:c3:03:da:bb:6f:
                    12:61:7a:c6:92:8c:8e:2d:26:8d:84:51:7e:ab:83:
                    cf:63:a4:01:72:f6:ae:69:c7:15:49:7b:91:b1:6b:
                    35:08:60:d2:ed:64:0e:ff:11:f3:a9:91:d8:51:4f:
                    ab:43:9e:62:13:3a:82:2c:88:c8:1b:2a:16:f2:f0:
                    cc:f5:ac:b2:d1:7b:45:f8:ed:8d:93:e0:01:37:ab:
                    1e:5b:00:ce:b3:a8:a3:54:32:b7:e2:46:9f:7b:7e:
                    b8:d4:7e:6b:da:bf:a5:c3:d5:e2:3e:e3:bc:8d:f6:
                    43:93:10:f8:46:28:1d:13:29:89:22:e2:40:94:be:
                    ad:40:2e:32:1e:9c:f6:b6:c0:01:f1:d6:eb:00:5f:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:03:61:14:2B:0B:4D:47:AB:34:FB:88:8F:70:28:B4:A3:B5:79:FB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146551.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af3d::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:68:a8:93:76:ae:00:2a:8c:8d:0a:d2:43:7f:7b:ed:3d:08:
         ba:5d:4d:a0:74:36:c5:fb:a2:00:b1:a6:d5:54:9d:f5:79:50:
         c9:db:da:7f:4f:5a:7f:19:6f:b3:7c:9d:a9:46:6b:97:af:47:
         c4:55:f3:b1:ed:cf:37:76:8c:92:2e:95:b4:28:c0:ff:25:db:
         33:0c:95:06:59:93:09:89:73:cb:7f:f9:3d:3a:70:df:33:91:
         ac:02:bf:4c:12:da:78:62:dd:69:d0:3f:17:da:2f:1d:e2:b1:
         f1:90:0d:f2:3b:7a:ee:5f:50:ee:89:c9:ac:83:29:ee:7f:fe:
         09:e0:d9:2b:ca:fc:67:a4:a0:47:5d:77:02:be:02:98:f3:c9:
         e9:7c:57:1f:0f:db:af:34:38:d4:79:6a:04:5b:9a:b8:46:cb:
         29:d1:20:d1:fc:ba:e9:9d:7b:21:69:a3:86:f7:1a:0d:4b:e8:
         37:39:cd:39:f7:94:3c:2d:55:30:49:ba:7d:e2:77:96:67:90:
         d9:aa:0b:ca:16:50:f9:88:02:d3:cb:19:ed:18:8d:04:b1:31:
         11:c1:47:8c:7e:fb:d3:50:a4:ae:cb:7e:0a:5e:65:79:6e:ee:
         81:20:d2:3c:ed:91:76:dd:23:8f:47:77:e0:b8:ad:81:d9:70:
         c3:8f:93:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:05 2026 by rpki-client