Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146741.roa
File:                     AS146741.roa (raw, json)
Hash identifier:          zascVahlR+g4jEeN6zwq7FSIwumAytWzmgeZcmUfadI=
Subject key identifier:   A8:32:78:EF:69:9D:6A:5A:53:CA:32:F8:69:7A:11:16:E1:31:FF:76
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6B2C2C2B881B606B3DD67D70B0AA5028984049E3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146741.roa
Signing time:             Fri 22 May 2026 06:58:31 +0000
ROA not before:           Fri 22 May 2026 06:53:31 +0000
ROA not after:            Fri 21 May 2027 06:58:31 +0000
asID:                     146741
IP address blocks:        240a:affb::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2c:2c:2b:88:1b:60:6b:3d:d6:7d:70:b0:aa:50:28:98:40:49:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:31 2026 GMT
            Not After : May 21 06:58:31 2027 GMT
        Subject: CN=A83278EF699D6A5A53CA32F8697A1116E131FF76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:e3:1f:cd:f3:c9:7e:71:b7:41:ff:bc:a6:
                    16:fc:63:76:e1:e5:93:20:d1:ed:1a:18:66:8e:ad:
                    96:3e:09:94:c7:b9:7d:ab:01:ee:b4:89:ec:fb:6d:
                    84:6e:0c:49:94:3a:4f:15:d6:86:eb:d6:e6:55:9f:
                    6f:dd:d2:48:d4:97:c2:7f:92:1e:c8:76:a1:eb:05:
                    44:30:92:c6:9c:c0:ca:cf:b9:df:aa:ee:28:a5:de:
                    7c:5d:29:5d:a6:69:dc:48:4c:f4:5a:e5:9f:3c:89:
                    52:77:b6:d4:a4:28:cc:89:0c:f2:80:75:0a:79:76:
                    f5:7d:50:41:4f:ed:30:91:72:3a:c4:79:bb:61:f6:
                    bf:39:0e:d2:37:3f:76:36:f4:cc:7b:f3:7a:c1:e2:
                    bc:83:7d:86:43:0b:75:9b:30:6c:9f:b1:91:1d:62:
                    65:20:2a:dc:94:98:b3:56:03:77:44:20:22:98:f1:
                    47:35:7c:e8:2f:c5:dd:93:34:36:e2:ee:ff:1e:eb:
                    23:0a:16:a6:e3:24:a1:e4:df:38:68:84:8c:33:1c:
                    2b:11:5e:0f:91:a7:2b:5b:4e:eb:62:55:c7:39:aa:
                    e1:ca:f9:06:52:1d:67:e9:64:e1:a6:ea:a9:49:48:
                    fc:57:b9:95:47:01:18:53:e3:26:40:d2:51:ad:7a:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:32:78:EF:69:9D:6A:5A:53:CA:32:F8:69:7A:11:16:E1:31:FF:76
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146741.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:affb::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:50:94:0c:15:dc:d8:5f:98:09:0a:af:ee:c0:be:0f:38:3c:
         44:63:66:62:15:ad:ec:0e:e6:89:d7:4e:d9:16:a2:19:af:e1:
         89:34:ba:c2:ca:93:f4:cc:08:a1:e1:95:d3:e7:bd:0c:7f:0d:
         0a:ac:87:29:7a:1a:66:5c:88:5f:83:cf:75:55:d3:59:2c:51:
         c0:fb:62:2e:b6:20:13:09:a2:20:50:65:85:e0:a1:a8:6f:a0:
         6c:67:2f:4a:0a:39:4d:d7:56:73:a0:83:d8:22:0a:76:7c:68:
         22:44:60:9c:12:71:bd:d3:c8:9a:e7:00:05:be:74:32:6b:5f:
         18:11:42:ce:c0:d1:7b:93:90:f4:76:e7:49:eb:22:1b:19:6c:
         9f:35:15:e9:4c:7b:07:d5:34:42:8d:15:ff:33:07:38:60:3b:
         d9:9a:dd:cc:4e:72:6e:e2:37:70:83:e8:46:20:a8:ea:fd:c2:
         67:6a:1a:61:8c:50:ba:d8:11:3a:c6:36:f9:2b:f7:70:ca:2c:
         b8:24:3e:dc:9d:d8:97:88:04:16:db:90:40:d2:18:31:43:f7:
         15:f6:0c:24:95:e8:4b:23:ed:c6:f1:79:3d:5c:81:7a:b3:cb:
         0f:1c:a8:6d:1d:08:18:e7:f0:57:6a:ef:29:80:eb:b3:b6:c2:
         ec:57:8a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:33 2026 by rpki-client