Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146076.roa
File:                     AS146076.roa (raw, json)
Hash identifier:          /KHfkWJssHCH97d/afQ6OKEkjoVc2zXb9WwPFj/Bs/4=
Subject key identifier:   2D:D5:7D:29:C6:2B:6C:5C:D4:5D:C0:08:AC:98:FD:28:FC:45:D0:B9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       265E931707A5762B152BC969E2574DED64E44AAA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146076.roa
Signing time:             Fri 22 May 2026 07:09:06 +0000
ROA not before:           Fri 22 May 2026 07:04:06 +0000
ROA not after:            Fri 21 May 2027 07:09:06 +0000
asID:                     146076
IP address blocks:        240a:ad62::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5e:93:17:07:a5:76:2b:15:2b:c9:69:e2:57:4d:ed:64:e4:4a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:06 2026 GMT
            Not After : May 21 07:09:06 2027 GMT
        Subject: CN=2DD57D29C62B6C5CD45DC008AC98FD28FC45D0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:df:1b:02:0f:d8:24:e2:5e:be:f2:5d:5f:
                    75:a3:0b:d5:5d:ee:c5:2a:78:15:d5:0a:05:2b:cc:
                    e3:f0:a9:79:a5:9f:bb:11:2c:00:51:b8:10:94:0b:
                    d5:6d:09:fe:02:bb:6d:2b:2a:f5:8d:a8:15:bb:f7:
                    72:75:66:22:2c:12:e5:b1:41:80:de:a0:83:0d:96:
                    35:40:93:c4:b3:30:b3:04:e6:6a:0f:a9:9a:fb:49:
                    f6:b1:ad:a7:97:81:9b:95:40:41:77:46:5b:9f:1c:
                    31:1f:ec:7f:02:07:79:4d:48:0c:63:55:b6:ae:ec:
                    e1:c6:d1:b2:56:9a:b8:92:25:0a:6d:5d:b2:16:1a:
                    4d:fa:5c:88:56:9d:f8:14:66:e8:25:b8:4a:a5:bc:
                    db:63:54:36:28:55:aa:10:3d:d1:79:c6:6f:70:5d:
                    37:74:d2:87:05:22:a5:bf:86:46:1c:fd:f9:52:81:
                    53:2b:80:c4:3d:e4:56:34:e9:92:69:84:24:0b:23:
                    99:82:e4:d5:81:6a:d4:15:9b:f8:4e:e4:b5:10:5c:
                    54:1f:15:74:a9:79:ab:5f:ba:56:1c:bc:8a:8d:2c:
                    98:19:68:c1:7d:d9:95:67:28:e4:57:81:7f:cb:98:
                    21:40:db:18:52:c2:ba:6b:00:b0:bb:e3:99:2f:1d:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D5:7D:29:C6:2B:6C:5C:D4:5D:C0:08:AC:98:FD:28:FC:45:D0:B9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146076.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad62::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:41:5e:14:04:a0:a4:16:1f:42:8b:26:d7:29:4d:e3:fa:6d:
         b5:59:ae:cb:e0:dd:18:ee:dd:8a:58:31:96:31:b3:d2:3f:d8:
         b2:ee:80:9e:6f:a5:77:52:b8:fe:64:67:ee:20:81:a5:b1:15:
         48:73:97:45:21:dd:2b:9b:60:68:10:16:79:50:7a:2f:32:e6:
         2c:d1:b9:25:f7:d5:5b:60:d4:5d:46:82:a8:3c:06:13:1e:dd:
         a3:4e:1a:3b:b6:7f:ed:47:e5:c8:a0:67:d2:28:6d:5d:95:a7:
         fd:cc:b5:dc:3a:be:e6:9b:b8:00:a9:5e:8c:a5:b8:9e:a0:2b:
         2e:48:ce:dc:a7:6e:d0:31:c9:ef:c0:3d:8c:01:51:4d:74:d1:
         f2:6b:de:17:fc:3c:ad:ec:a0:3d:07:9f:bf:eb:27:8d:ab:82:
         8f:e5:71:75:ed:43:40:3c:d6:37:2a:ea:fb:a4:0e:f4:cb:d9:
         52:7c:bc:8d:99:c1:96:31:fa:b8:2f:e3:a4:f4:e4:98:1c:dd:
         ce:8c:73:24:45:1c:fd:46:40:2b:5e:a0:d7:f1:c1:13:58:bc:
         95:a7:5a:c4:2b:ce:28:23:7b:81:d2:f9:97:25:f0:fb:28:78:
         fd:ed:a8:67:d7:bc:ad:3a:bc:3b:f0:94:ca:f2:b5:cc:9d:52:
         22:93:a6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----