Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146637.roa
File:                     AS146637.roa (raw, json)
Hash identifier:          ObaXm1Jqeyok9i/M0QsrJDJmEivQcjWKxiilB2BJ9HI=
Subject key identifier:   0B:9E:A5:40:13:76:6D:02:21:4D:0A:BA:92:08:6C:7D:C9:7E:AD:BD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       780EC0FAE52D4E0F94F1A93719C35A5F3828B30A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146637.roa
Signing time:             Tue 26 May 2026 06:12:57 +0000
ROA not before:           Tue 26 May 2026 06:07:57 +0000
ROA not after:            Tue 25 May 2027 06:12:57 +0000
asID:                     146637
IP address blocks:        240a:af93::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0e:c0:fa:e5:2d:4e:0f:94:f1:a9:37:19:c3:5a:5f:38:28:b3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:57 2026 GMT
            Not After : May 25 06:12:57 2027 GMT
        Subject: CN=0B9EA54013766D02214D0ABA92086C7DC97EADBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ec:64:19:1f:7f:d8:f9:88:90:b8:6b:9d:cb:
                    1f:cd:c0:dc:75:4b:2d:ec:ee:20:80:c5:2a:13:c5:
                    50:44:a4:2f:1a:20:2a:01:19:2a:70:f4:2b:4e:1a:
                    46:31:70:5a:37:0d:ca:95:93:11:68:8f:f4:39:f9:
                    3d:dc:f6:fc:b3:ba:02:e6:e9:6b:3f:a5:73:4a:a3:
                    52:2e:c1:fc:de:bd:6c:47:75:31:a0:e8:83:32:b4:
                    2c:b0:fc:96:eb:26:41:f2:c1:43:8f:8d:78:43:09:
                    56:94:29:46:dc:03:37:a2:52:c2:aa:c5:e0:0c:19:
                    73:41:34:7f:4b:fc:a4:24:97:1d:6f:46:6f:26:5a:
                    01:c1:64:fe:a6:7e:5b:6e:9e:a6:60:63:7b:b9:0d:
                    b4:52:c0:61:c3:fe:07:e2:79:6a:6a:8b:1c:8b:73:
                    5c:70:d4:c5:3d:b1:76:ec:26:33:92:99:e7:d9:33:
                    88:fc:b8:a9:16:4d:f7:65:e7:2d:a6:68:fb:16:76:
                    30:25:b8:92:9b:ea:7d:7b:01:83:29:5f:ad:d0:59:
                    75:50:56:bb:41:13:b2:1e:2a:61:c8:3e:e6:58:62:
                    28:59:d5:e9:63:a2:fe:9f:f5:56:12:ae:76:06:ae:
                    4c:9b:41:1c:4c:60:eb:fe:ac:e8:7f:b7:0d:8f:18:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9E:A5:40:13:76:6D:02:21:4D:0A:BA:92:08:6C:7D:C9:7E:AD:BD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af93::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:da:1f:36:42:7a:9b:cf:07:1c:51:11:8c:b0:20:23:4c:e9:
         59:84:85:ba:75:0d:33:fd:c4:56:d5:76:61:cd:a6:86:44:5f:
         a5:22:09:64:fb:76:df:34:c1:3d:f0:a7:81:92:59:f1:9d:b7:
         98:bc:01:3c:76:75:f3:1d:be:00:30:f4:bc:91:f2:c8:10:f2:
         0e:13:cb:ff:0b:10:b8:96:49:e1:37:37:f0:6e:54:e2:37:bd:
         26:4a:ec:c9:a5:52:d3:a8:80:28:f1:cf:23:92:1e:c9:cb:9e:
         ac:89:40:cc:8a:51:38:48:9f:d5:59:7f:69:6e:c4:5a:eb:2c:
         22:a3:1b:96:c7:f8:6b:39:ab:da:3f:29:52:47:df:19:94:b7:
         bc:d5:69:64:f2:ea:60:a3:02:51:6f:64:23:82:27:49:f9:47:
         b6:81:c7:15:84:ff:0f:03:7f:7a:c9:a3:7e:56:76:87:08:1b:
         b6:12:b7:7d:19:e6:d2:71:1a:6d:9c:af:2b:b2:44:90:4b:a4:
         28:f9:bf:3c:32:48:91:88:c3:7e:2a:93:77:50:80:99:a5:22:
         0b:04:5c:9c:c8:43:4c:4c:78:71:b0:0b:2e:f2:e5:08:3c:2f:
         50:f1:f2:9d:31:c4:b3:6b:4e:65:d3:f9:46:01:be:8a:e3:c3:
         d5:f4:81:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:33 2026 by rpki-client