Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146028.roa
File:                     AS146028.roa (raw, json)
Hash identifier:          s2gXa62I7HpR/uOX6ERwhv02KSswzJA9BU5PmmN4xww=
Subject key identifier:   73:3F:D6:34:D3:67:7B:16:89:9D:37:6E:73:A2:61:4B:75:AA:A0:1A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5E3399D04DD17DF2814FDA07829B8FCA2D55D43A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146028.roa
Signing time:             Mon 25 May 2026 03:19:22 +0000
ROA not before:           Mon 25 May 2026 03:14:22 +0000
ROA not after:            Mon 24 May 2027 03:19:22 +0000
asID:                     146028
IP address blocks:        240a:ad32::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:33:99:d0:4d:d1:7d:f2:81:4f:da:07:82:9b:8f:ca:2d:55:d4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:22 2026 GMT
            Not After : May 24 03:19:22 2027 GMT
        Subject: CN=733FD634D3677B16899D376E73A2614B75AAA01A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f4:3c:62:60:61:ce:51:ef:45:ff:b1:b8:ad:
                    95:ad:7e:16:4f:b3:2b:a5:13:f0:6f:d1:e0:d0:e9:
                    c5:e4:a9:a6:d6:0b:b5:a7:8c:1a:a7:3f:01:b8:53:
                    69:2b:49:d8:43:b3:0f:70:a8:96:6d:c5:c6:8e:c4:
                    f3:97:51:64:d9:80:3f:50:34:ef:53:8b:f5:d4:4e:
                    0e:93:9c:4d:1b:92:6e:ab:2f:ea:4a:d8:19:ff:0f:
                    c7:bf:d4:b9:86:42:50:40:d1:84:35:2e:5f:b2:43:
                    67:0e:90:9a:cf:65:31:e5:53:25:6c:e3:a1:2d:04:
                    f2:fd:be:f0:b5:6e:ca:08:94:20:78:b4:50:3c:4f:
                    1f:c5:fb:d0:d2:85:b2:05:5d:37:96:36:ff:44:36:
                    8b:86:10:c9:7d:f7:f7:9f:23:3e:bc:fe:b6:48:95:
                    84:69:ee:bc:64:28:7e:ea:f9:ca:7c:c3:26:14:c6:
                    09:a8:13:19:39:f6:13:96:d6:11:36:34:91:0b:0b:
                    ff:50:6f:4f:5d:d5:38:66:cc:b2:c0:a3:59:23:6d:
                    f2:e3:7d:57:8a:df:1d:10:8f:dc:a4:15:d5:c6:3c:
                    c6:91:18:1d:7f:ef:08:bd:ac:ae:f5:88:3c:ba:2f:
                    16:22:95:dd:0c:6e:2a:e2:d1:8f:9c:4a:e6:6b:e7:
                    e8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3F:D6:34:D3:67:7B:16:89:9D:37:6E:73:A2:61:4B:75:AA:A0:1A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146028.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad32::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:2e:f3:08:d8:5e:0c:e4:48:bb:30:9e:9c:c4:fa:ac:92:e4:
         be:f8:c0:08:d8:9c:93:b5:71:91:0c:50:5c:47:a0:18:18:78:
         b9:03:22:1d:d5:ef:f9:ee:2c:68:e6:b3:b2:ae:76:00:3c:4d:
         18:5e:47:b4:95:29:65:e9:e5:f8:75:58:cf:e9:78:b6:c6:d0:
         b5:e6:ea:ea:53:c5:ba:fe:a4:10:17:1a:c5:c1:7d:c5:58:3c:
         61:e7:e0:3b:57:68:04:4c:14:19:55:f3:2d:74:c4:ea:ad:73:
         d7:15:d5:e0:58:83:81:f0:b3:de:53:8e:05:d5:5b:1c:dd:8e:
         a4:9b:70:79:43:ec:7d:6a:94:61:f4:ae:66:bd:4f:14:08:b0:
         37:12:a8:a0:05:8f:e9:30:ce:ee:da:2c:1f:93:65:00:8b:99:
         7e:1c:b0:22:f0:7d:5e:02:ac:0d:55:a8:ad:2f:fe:20:45:51:
         4a:22:39:84:2e:ff:c0:c0:60:79:54:45:b1:75:c1:ac:30:1b:
         e6:97:8d:25:4f:de:76:ac:b0:fc:8b:4b:06:43:4d:9d:a9:a0:
         2e:4a:6d:07:4a:11:85:7f:84:8f:a2:65:69:da:89:c8:58:03:
         10:80:2c:a5:97:b9:2c:36:5a:cf:db:31:90:61:91:5e:d6:22:
         0b:4d:7c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:31 2026 by rpki-client