Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146595.roa
File:                     AS146595.roa (raw, json)
Hash identifier:          7+5iy1Qyn1gK99JezLZDW47nvvHlaPXVE8U6PXnvvxY=
Subject key identifier:   A8:8B:FE:C7:53:6F:E3:AC:74:08:6E:F4:8A:A1:2E:CA:9A:C1:10:4E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1C51E0712917F3D0B25C2CFC55C94B47D5D97362
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146595.roa
Signing time:             Mon 25 May 2026 01:51:02 +0000
ROA not before:           Mon 25 May 2026 01:46:02 +0000
ROA not after:            Mon 24 May 2027 01:51:02 +0000
asID:                     146595
IP address blocks:        240a:af69::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:51:e0:71:29:17:f3:d0:b2:5c:2c:fc:55:c9:4b:47:d5:d9:73:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:02 2026 GMT
            Not After : May 24 01:51:02 2027 GMT
        Subject: CN=A88BFEC7536FE3AC74086EF48AA12ECA9AC1104E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:5d:3d:8b:88:9a:2a:31:72:68:e1:09:d3:
                    39:16:66:1c:06:62:e7:53:fe:5e:c9:43:4b:5e:29:
                    fa:83:34:16:6c:c0:6b:a2:e5:32:46:a6:2d:ba:d9:
                    63:60:17:b8:24:97:37:87:09:69:d7:95:af:b2:4d:
                    3c:03:a9:5e:8f:6b:a2:98:9c:78:48:a1:59:61:7f:
                    b9:38:1d:63:07:c1:44:c1:8e:27:8c:74:82:fe:53:
                    0e:cf:07:7a:2f:1d:66:b4:44:1c:06:fd:83:1e:0a:
                    50:95:e4:3a:26:25:1f:b0:a8:37:2e:fc:31:14:e3:
                    e6:9d:bc:d7:c4:b9:ce:34:50:51:d2:d8:5e:bc:8a:
                    58:a5:15:94:c3:a9:a6:cf:d7:9e:96:c0:95:ff:08:
                    2d:c1:00:53:8f:5a:d8:a7:31:78:c4:26:cc:4a:4d:
                    12:60:80:08:1c:d3:85:9a:18:20:eb:52:d1:e1:cc:
                    67:38:87:fa:52:d1:e1:98:45:81:00:1c:60:c0:13:
                    43:b5:35:80:5f:16:54:cb:64:e7:d7:78:19:03:d1:
                    c5:be:9b:e1:21:7c:5e:22:41:22:64:1b:fc:4b:5a:
                    f6:ce:31:41:45:e0:7b:0b:bd:fb:37:bd:8c:d6:5d:
                    44:25:bc:58:73:9a:40:c3:28:9d:1c:84:7f:7d:4f:
                    e1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8B:FE:C7:53:6F:E3:AC:74:08:6E:F4:8A:A1:2E:CA:9A:C1:10:4E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146595.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af69::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:c0:4e:12:a9:f5:db:d5:00:c2:46:ca:4e:36:a9:c9:32:5e:
         ad:73:63:97:21:ac:dd:a9:1a:cd:f0:8b:2c:b2:5d:d4:d8:2d:
         eb:91:19:79:e9:ad:d6:98:24:fd:1e:1c:56:4e:e2:cc:18:95:
         54:23:4a:b5:23:4a:50:db:13:ac:b0:c3:d6:58:ea:df:96:be:
         9c:e7:66:36:ed:53:fe:2b:ea:bc:09:23:f3:c3:21:27:42:3c:
         65:74:ae:9a:c8:75:67:5c:2a:f2:32:4d:a9:41:81:24:87:e0:
         3e:44:38:b9:2a:2a:d6:8b:56:a4:15:d1:da:6d:76:0a:4d:8c:
         d6:00:6c:02:b0:1e:7a:98:d8:48:b9:6e:ef:16:a8:24:29:9d:
         1a:70:74:53:56:60:9b:75:e4:e5:3c:c7:c2:7b:9d:0c:d8:c2:
         96:65:09:d1:47:f4:88:70:74:e7:97:e7:88:17:f8:59:dd:ed:
         4a:4c:bb:fc:29:a0:76:e4:72:d4:10:8f:51:e9:e0:f5:f8:3f:
         be:80:b5:ad:74:1b:f4:98:7e:51:58:2c:e1:27:11:3a:24:07:
         84:e9:25:64:6a:e6:5f:b3:af:56:ee:c5:8b:e2:be:f1:20:2a:
         36:b5:ac:82:10:14:f6:31:c1:23:e6:43:45:ad:bd:10:76:36:
         c8:55:e2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:40 2026 by rpki-client