Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146022.roa
File:                     AS146022.roa (raw, json)
Hash identifier:          EFIOxyVbZ3nuwy6OpTWgFtpMH1O9XgU7uN9DXWXgp58=
Subject key identifier:   73:D1:08:00:8F:05:B6:76:54:86:6C:18:11:AC:06:E8:7A:84:F4:78
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5089DF6C0105DE00DC634923CD747059C70E3AAC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146022.roa
Signing time:             Mon 25 May 2026 03:19:28 +0000
ROA not before:           Mon 25 May 2026 03:14:28 +0000
ROA not after:            Mon 24 May 2027 03:19:28 +0000
asID:                     146022
IP address blocks:        240a:ad2c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:89:df:6c:01:05:de:00:dc:63:49:23:cd:74:70:59:c7:0e:3a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:28 2026 GMT
            Not After : May 24 03:19:28 2027 GMT
        Subject: CN=73D108008F05B67654866C1811AC06E87A84F478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:5f:44:82:ad:8e:75:00:3b:de:28:f5:b1:
                    f7:1e:4e:bd:52:13:f9:7d:9c:ea:92:ac:22:fe:1b:
                    57:94:e2:6b:e7:f7:a4:33:da:76:99:2b:b0:43:49:
                    29:94:91:0b:08:e7:fe:ea:e6:b2:20:55:24:aa:d6:
                    21:25:4d:f6:b2:c8:98:37:af:69:99:75:51:40:5d:
                    27:6f:90:47:0d:09:66:84:2b:da:fe:7d:de:05:a3:
                    42:0e:b6:e3:42:b1:09:0a:32:b5:8e:83:e4:0c:ae:
                    37:16:94:be:92:9d:05:16:ab:4d:e8:8c:36:0d:b3:
                    96:4d:97:35:b8:bf:d9:61:f5:d5:3f:20:86:1e:eb:
                    ac:54:99:70:32:33:d1:06:8a:a4:a3:49:75:6e:f8:
                    b1:09:89:c3:4c:aa:83:33:43:d3:fd:c8:09:d1:c5:
                    f3:61:96:34:59:fc:75:8d:4e:f6:a0:7d:e9:e5:d5:
                    82:fd:b1:1f:2a:51:77:45:59:ea:45:d9:17:e9:43:
                    46:ca:7e:70:02:a8:5d:ff:12:1c:21:6e:84:fd:a6:
                    28:fa:49:19:b2:8a:a5:a2:03:95:99:11:31:4d:2d:
                    13:f1:09:70:02:bd:0d:16:53:ee:fb:cf:db:7b:a9:
                    ae:36:d0:d7:4b:b1:a1:5f:46:62:e5:54:ae:4b:bb:
                    ff:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D1:08:00:8F:05:B6:76:54:86:6C:18:11:AC:06:E8:7A:84:F4:78
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146022.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:52:5f:c6:65:43:63:dd:b7:b6:84:32:5c:95:95:8c:59:0c:
         b4:26:84:f0:e7:f7:fa:bd:cd:a0:d6:14:ee:01:13:8c:29:f4:
         37:de:14:cd:17:de:9c:ce:51:7a:33:ab:56:e8:ac:56:b9:ab:
         fa:86:fd:0f:e1:f9:e4:d0:75:05:c6:d8:4a:72:d3:13:9c:d6:
         59:78:84:e4:69:32:f1:5f:21:16:3f:53:9b:24:0a:0a:70:e3:
         2c:ce:8a:73:a5:2e:e0:40:09:a5:cf:df:99:b5:47:b6:42:51:
         14:68:2c:6b:53:bb:53:e3:c5:2d:19:99:96:04:a1:85:5f:e6:
         8f:49:cb:de:f8:86:ca:f4:8b:26:49:ff:1c:a1:53:9a:8d:dd:
         d0:4f:1b:a3:0b:7f:6f:4f:77:a0:ed:9e:fb:97:91:7d:61:f2:
         37:1f:73:ed:df:ec:32:34:71:be:bb:88:c6:1f:11:9f:81:f6:
         c2:7e:78:f5:1c:11:88:76:0e:0c:93:e3:54:83:3b:c3:75:64:
         3c:53:f8:da:00:85:ab:4d:c7:89:7e:a4:32:fb:87:64:85:51:
         43:5b:f1:76:ef:94:d5:af:1c:fa:ce:18:10:29:e0:e2:7c:a4:
         75:39:69:39:dd:f1:78:11:0c:59:4f:19:41:00:a9:a0:63:78:
         0f:9a:89:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:19 2026 by rpki-client