Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146592.roa
File:                     AS146592.roa (raw, json)
Hash identifier:          T5HnduAI9w61YCTcoa72xd1lRO5wIXH+gMX8iljlPzs=
Subject key identifier:   74:7B:C4:86:14:A5:64:EA:45:BB:58:B7:AC:14:DB:B7:88:5D:FE:89
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       05419ABA213D4EB374E116074D570E046E1EADD7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146592.roa
Signing time:             Tue 26 May 2026 03:17:05 +0000
ROA not before:           Tue 26 May 2026 03:12:05 +0000
ROA not after:            Tue 25 May 2027 03:17:05 +0000
asID:                     146592
IP address blocks:        240a:af66::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:41:9a:ba:21:3d:4e:b3:74:e1:16:07:4d:57:0e:04:6e:1e:ad:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:05 2026 GMT
            Not After : May 25 03:17:05 2027 GMT
        Subject: CN=747BC48614A564EA45BB58B7AC14DBB7885DFE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:c7:be:da:7f:87:ed:2a:8d:a4:32:e8:70:
                    98:bf:8a:09:43:cb:5b:db:41:d7:25:ec:d5:09:b0:
                    b4:5b:56:28:d5:c5:82:f1:03:36:5c:92:80:12:3e:
                    6f:93:a0:3a:96:47:76:d1:97:d9:a6:18:31:82:33:
                    16:69:fe:43:39:97:1c:b8:7a:26:27:38:e9:18:c5:
                    ab:40:69:ca:e3:2a:7b:2d:6f:aa:2c:a7:46:d0:fb:
                    bf:15:00:39:d6:a7:bc:ba:83:3f:cb:c8:6b:4b:5e:
                    b2:c7:7e:e8:e9:9e:89:7b:c7:c1:e8:79:14:8b:32:
                    60:04:77:ea:96:fb:ce:0a:a3:3e:d0:2a:8e:93:d9:
                    9b:68:2b:79:73:00:7a:d5:59:d6:99:f0:df:9f:0e:
                    d6:44:a7:48:ca:91:e3:c0:1e:3b:f4:41:11:d8:7d:
                    47:66:9e:45:6c:fa:79:ce:e4:11:6a:ea:6f:b4:db:
                    19:b0:25:cf:fb:bd:86:31:e8:5e:29:4b:78:01:25:
                    b4:2e:16:8b:80:62:6b:39:f4:94:b4:12:19:25:27:
                    96:14:1a:f4:70:a5:0a:06:68:29:f5:41:69:aa:4c:
                    01:8f:47:af:0e:dc:6e:c2:ba:dd:dd:fb:fe:89:c2:
                    a6:70:b8:09:1e:1c:67:07:7d:cf:a2:e2:1f:74:fe:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7B:C4:86:14:A5:64:EA:45:BB:58:B7:AC:14:DB:B7:88:5D:FE:89
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146592.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af66::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:4d:99:98:43:2f:87:ee:4c:d1:a8:e9:af:fc:8b:70:eb:46:
         d6:e1:7c:f0:7c:ee:99:c6:dc:85:36:da:e0:0d:1e:80:5b:fd:
         91:40:cf:cd:64:c0:04:e0:1d:09:aa:f8:e1:d5:7c:3b:ae:b6:
         c6:71:e7:a3:98:6f:df:e1:28:2f:57:20:b0:14:63:2e:1b:84:
         c0:05:bf:59:0e:ef:aa:80:df:46:2e:7b:03:d5:2c:2c:fb:08:
         70:83:8f:65:92:72:63:5a:9e:20:19:7a:6c:d5:14:43:eb:0f:
         a4:ea:43:71:1a:8f:87:1d:2f:d3:65:68:ef:3e:5b:aa:07:b2:
         a5:31:3b:62:3f:70:63:ec:c4:46:5e:d7:56:6b:c5:7b:0b:cc:
         63:ca:7b:e2:ec:89:34:33:74:b8:19:24:e8:ef:50:5a:d1:49:
         f3:7f:5d:1c:1e:db:31:40:63:41:c3:5b:77:bf:d0:55:e8:43:
         3d:39:ab:e9:ac:b1:f7:b6:0d:40:a2:f0:f8:21:5f:b9:d0:40:
         45:13:fd:14:20:7e:21:33:e4:b1:8a:4a:45:8e:20:97:22:0a:
         d4:97:13:0a:7f:45:85:7b:37:78:d1:dc:21:60:61:dc:29:b0:
         12:4d:20:4c:74:ec:59:57:43:75:67:cc:6d:af:43:e2:35:17:
         df:31:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:35 2026 by rpki-client