Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146713.roa
File:                     AS146713.roa (raw, json)
Hash identifier:          QxOBGydprMz5NBaIzyE9lQzemFrymLJ4Qf9yo0T/MaA=
Subject key identifier:   F7:D9:2E:BF:4D:AB:0A:01:CA:57:49:17:D8:6B:BD:AD:1D:88:B0:16
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4354B953C76035C2BECD7DA85DAE79294367F0F5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146713.roa
Signing time:             Tue 26 May 2026 03:17:21 +0000
ROA not before:           Tue 26 May 2026 03:12:21 +0000
ROA not after:            Tue 25 May 2027 03:17:21 +0000
asID:                     146713
IP address blocks:        240a:afdf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:54:b9:53:c7:60:35:c2:be:cd:7d:a8:5d:ae:79:29:43:67:f0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:21 2026 GMT
            Not After : May 25 03:17:21 2027 GMT
        Subject: CN=F7D92EBF4DAB0A01CA574917D86BBDAD1D88B016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:cd:b6:75:a5:bb:9b:f8:f0:83:11:9e:eb:
                    e3:dc:86:7a:1d:70:4b:5f:8f:96:4e:1e:3f:1c:f3:
                    4a:19:54:82:c9:c3:f9:5a:15:7c:22:a0:58:44:5c:
                    13:8f:48:b0:9a:4a:fe:3b:3d:5b:0e:25:41:ad:0f:
                    81:0c:07:73:83:da:84:3c:a3:49:56:18:5d:99:5e:
                    3f:03:6c:b5:7b:60:cb:ee:9f:2e:93:62:66:a4:98:
                    47:e1:e5:01:15:ff:e5:25:c6:b9:60:dd:e2:16:d8:
                    4f:6e:fb:82:4f:78:db:f5:a6:8c:92:4c:08:9f:03:
                    79:61:f8:d6:14:df:a4:05:4f:79:d3:9a:ad:4d:cd:
                    d4:36:a4:cf:f6:39:5c:69:38:75:76:02:5c:6d:c7:
                    7f:ad:35:e4:4c:fb:fc:ef:00:71:74:ac:f8:d5:22:
                    8b:a9:1b:56:22:87:c7:6e:65:bd:c5:6c:df:e1:4d:
                    4c:6e:c2:16:62:21:76:b0:5d:cd:53:9d:53:a6:32:
                    6b:cf:64:e4:40:32:94:7b:07:cf:95:0d:76:ea:6d:
                    b3:67:9e:59:98:2d:2e:39:1e:8a:b4:82:29:3b:89:
                    cc:26:ee:48:e8:c1:61:19:37:e2:84:45:cb:6a:38:
                    0f:6d:3f:1f:12:f4:30:41:8c:74:c9:79:14:74:15:
                    51:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D9:2E:BF:4D:AB:0A:01:CA:57:49:17:D8:6B:BD:AD:1D:88:B0:16
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146713.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afdf::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:b3:f1:a3:ae:e1:01:9a:54:0b:8d:cd:57:b4:94:c1:44:75:
         94:79:eb:18:fe:55:57:e7:b3:eb:ac:40:fe:70:10:0b:36:30:
         2c:56:3e:18:1f:d4:14:1c:fc:08:57:94:7a:a0:d4:4d:92:81:
         54:89:9c:d4:11:8f:f9:c2:5b:fa:ff:d5:e2:2b:cd:a6:19:93:
         63:82:88:80:4f:9f:b6:07:db:71:e0:8a:b6:b4:d4:a9:18:98:
         b4:26:fb:09:95:44:c2:15:6e:29:0f:b8:b2:e8:28:0c:0a:d1:
         a2:cc:88:50:c4:32:05:dc:d0:fa:78:f6:52:aa:d5:60:0a:82:
         f3:cd:79:ed:4c:76:09:90:e1:c9:7c:6a:78:e9:52:69:dc:be:
         ff:c9:78:9b:fa:bc:48:fd:20:ad:b0:51:44:35:af:74:ee:5e:
         02:13:58:5d:58:89:88:0d:e4:7b:95:e5:b5:22:36:fb:41:b9:
         dc:c5:9c:48:56:31:cc:99:d2:0e:52:07:38:bc:09:ba:7f:15:
         52:02:e7:a1:7b:ff:62:e0:e6:ed:71:b4:87:d1:40:e1:97:c7:
         ba:22:4b:a5:99:4c:02:ac:13:ba:ec:e3:b5:ed:03:6d:f6:b2:
         ef:b6:b8:f3:e8:ae:56:08:2b:9d:2a:e9:90:7c:f9:50:4d:1b:
         22:b3:67:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client