Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146651.roa
File:                     AS146651.roa (raw, json)
Hash identifier:          CT1lU4eOTrrndjdi5GrCrqMFw1Zc1TYUyKUXiew9fXM=
Subject key identifier:   EC:BB:CB:8B:00:ED:84:61:70:DF:9E:5D:D0:9C:E4:B2:32:AA:C2:26
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2B8772E9554DA69638861F1EEE1FDF94FD1A962D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146651.roa
Signing time:             Fri 22 May 2026 07:24:31 +0000
ROA not before:           Fri 22 May 2026 07:19:31 +0000
ROA not after:            Fri 21 May 2027 07:24:31 +0000
asID:                     146651
IP address blocks:        240a:afa1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:87:72:e9:55:4d:a6:96:38:86:1f:1e:ee:1f:df:94:fd:1a:96:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:31 2026 GMT
            Not After : May 21 07:24:31 2027 GMT
        Subject: CN=ECBBCB8B00ED846170DF9E5DD09CE4B232AAC226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7b:df:95:77:ba:b6:68:3e:65:7e:82:ab:44:
                    bf:64:e1:b8:18:a5:ac:ab:b3:de:d3:ca:69:1a:8e:
                    4f:91:e3:b3:ba:3d:ec:fd:3c:f3:44:dc:19:bd:8b:
                    e7:a7:5a:a4:97:5e:37:24:02:3c:fb:21:33:74:cb:
                    94:75:5e:db:a9:1f:39:e3:0f:d3:25:19:ac:32:4f:
                    97:a5:54:3a:b2:53:a2:d5:6f:97:76:0d:d6:37:84:
                    60:5d:98:dc:28:2f:62:96:15:34:18:b8:64:88:8a:
                    07:5a:1b:4b:31:10:fb:6c:5f:03:8e:0f:82:b1:a5:
                    3d:42:df:51:e3:6d:3c:0b:31:f5:11:42:ec:f4:22:
                    de:cc:21:ad:db:79:e3:b2:bb:9d:71:10:2e:41:ce:
                    a9:4f:f8:4c:13:a9:03:9f:51:96:ae:e5:cd:f8:aa:
                    08:92:fc:ae:5f:7d:4f:63:65:27:94:86:53:dd:4a:
                    f1:59:c7:92:01:47:51:38:5b:b4:2b:a7:90:e6:42:
                    07:7e:0f:33:3f:78:a2:c7:6c:73:ee:50:92:6f:b9:
                    01:5c:23:24:2c:78:ae:bd:2f:54:eb:cc:c4:bd:b7:
                    52:df:bd:94:63:27:a2:61:26:ec:3a:ef:46:29:dd:
                    b3:a8:9c:56:27:d5:8a:5b:cc:1c:d7:08:bf:5b:95:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BB:CB:8B:00:ED:84:61:70:DF:9E:5D:D0:9C:E4:B2:32:AA:C2:26
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146651.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afa1::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:8b:87:10:59:a7:ca:c4:8c:8e:83:c2:fe:0b:bc:63:1a:1e:
         d8:28:2f:f1:2c:2f:14:59:6b:29:ec:8f:15:d5:dc:00:05:1e:
         ee:15:d4:66:6b:f3:81:6b:d0:08:e5:fc:67:de:78:60:7c:06:
         ae:19:75:59:24:d2:e4:7e:6f:43:66:0c:60:d8:cf:41:c2:68:
         af:1d:a9:94:fc:6e:26:1c:5f:75:b9:5c:e2:a7:6d:5c:37:22:
         34:ae:9e:7c:0b:62:2d:a0:7a:69:0c:ff:27:c5:cd:fd:ba:50:
         de:44:21:8e:86:a6:0c:cf:b9:dc:e4:5f:5d:27:c5:52:74:4b:
         bc:6c:6b:2f:45:74:5f:da:6f:ee:84:41:58:90:35:f7:a7:0f:
         4a:57:27:ce:06:a8:df:4e:b8:79:f9:ff:5f:3a:ba:23:1c:d4:
         de:5f:df:bc:60:2a:71:11:14:be:cb:9d:26:19:cb:42:b9:30:
         a5:17:73:70:0f:83:74:74:f4:27:98:71:2f:a2:67:c0:dd:79:
         ee:b0:c0:97:64:a2:9d:84:56:1d:eb:fd:b1:dd:7a:ae:74:b5:
         d2:6a:f6:5d:81:c0:9e:66:8f:b0:be:00:2b:54:d5:e1:15:e2:
         6a:51:6e:dc:a4:97:0e:32:a2:0e:48:5d:65:95:8b:28:c2:e9:
         da:dc:e5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:55 2026 by rpki-client