Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146029.roa
File:                     AS146029.roa (raw, json)
Hash identifier:          PS+BS6Ttdmq5gB4uouiCvY9jjWQ3Y+L5hb/U/JfaMrs=
Subject key identifier:   A8:33:29:B4:AA:30:CA:96:B6:0A:46:97:0D:CC:44:1C:B7:66:2B:31
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5F6E342F19A013F8CC2F943A548EA175F8E42E91
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146029.roa
Signing time:             Fri 22 May 2026 07:24:29 +0000
ROA not before:           Fri 22 May 2026 07:19:29 +0000
ROA not after:            Fri 21 May 2027 07:24:29 +0000
asID:                     146029
IP address blocks:        240a:ad33::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6e:34:2f:19:a0:13:f8:cc:2f:94:3a:54:8e:a1:75:f8:e4:2e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:29 2026 GMT
            Not After : May 21 07:24:29 2027 GMT
        Subject: CN=A83329B4AA30CA96B60A46970DCC441CB7662B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ec:f9:97:6a:bb:a7:d7:cc:37:32:6f:44:b5:
                    9e:c5:0a:90:0a:17:a4:e8:09:0e:d2:2d:67:5f:e9:
                    5f:23:c6:78:73:5a:e8:58:38:90:8d:6f:2d:be:1e:
                    b5:72:24:bb:eb:92:18:14:22:b3:ad:b3:d3:78:a2:
                    88:2a:00:ae:27:6d:6f:2d:07:14:bd:2f:88:ff:5d:
                    7f:df:81:a1:b5:1b:a8:ee:e1:11:a9:40:15:f5:fa:
                    07:ad:1c:d9:d8:6b:93:e9:b6:ab:65:d0:9e:06:8c:
                    41:d0:7e:fc:c2:50:a6:de:d5:67:f0:ff:39:ad:0c:
                    75:1b:70:19:cb:5e:81:e5:8c:f8:f3:f3:76:27:db:
                    2a:da:fd:97:49:9d:e6:3b:20:05:54:b9:60:99:49:
                    2c:6f:d3:88:1e:24:6c:49:e0:32:ef:c2:50:ad:d5:
                    ea:06:08:51:14:46:f2:d0:9e:47:59:30:5e:ad:32:
                    c3:1c:ee:17:76:dd:4f:25:6e:b6:b4:33:3e:68:27:
                    4b:2d:5b:25:46:37:1d:33:fe:0b:bb:b0:20:e0:5a:
                    29:ca:79:94:d8:64:7c:f2:3d:15:37:ef:ce:f3:97:
                    6d:99:d9:16:1b:31:58:e4:b6:0f:fd:bf:e9:ff:48:
                    2a:d9:c6:a1:68:59:1c:92:b1:4c:a9:8b:7b:53:2e:
                    34:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:33:29:B4:AA:30:CA:96:B6:0A:46:97:0D:CC:44:1C:B7:66:2B:31
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad33::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:2c:71:c1:f8:1f:00:ff:c5:11:9c:d4:16:a1:0c:d9:81:db:
         28:40:05:86:20:3a:e1:88:6c:d7:73:7b:04:ee:51:12:17:6c:
         7f:dd:49:5f:90:aa:42:4d:e4:cb:e4:60:a2:66:65:ca:7d:aa:
         89:bd:d9:4c:30:1a:b9:82:93:e1:c7:4d:15:e4:d6:c1:8c:f2:
         36:65:b6:03:b4:6c:94:de:82:50:0b:d5:77:80:35:a7:21:0a:
         ef:8d:75:d4:11:bb:14:01:c7:5f:dc:74:36:20:2d:81:dd:47:
         c8:43:11:49:a4:99:f0:42:7e:37:91:20:ee:1d:de:45:3f:e2:
         31:60:a0:a5:90:ce:72:8e:46:77:6b:41:55:76:58:16:75:2a:
         ca:23:67:dd:04:cb:f0:07:8c:9c:4f:6f:43:82:2f:bb:13:a4:
         ab:9f:72:55:61:43:ad:69:5a:4f:e3:d0:77:19:2e:43:12:43:
         76:ad:c8:c2:13:07:b7:98:55:f0:ae:c2:5a:0a:81:c6:cb:00:
         93:cb:75:e1:63:32:f6:a5:36:a8:ee:4a:1d:12:48:1b:f2:8b:
         54:8a:ae:f6:00:83:1a:64:40:4b:fd:85:cd:fb:53:d1:93:07:
         31:c2:49:fa:3b:62:33:ea:ca:83:91:d1:28:cc:36:a0:e6:06:
         3c:89:50:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:25 2026 by rpki-client