Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146078.roa
File:                     AS146078.roa (raw, json)
Hash identifier:          Q4F23wVumg90FnT2z3slPF7KcELdFXMVsAgkrgtCXSU=
Subject key identifier:   1F:21:61:07:52:6C:86:E6:1F:93:DB:15:0B:99:7C:EE:5C:B6:DB:11
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       32995E462DEB610C2F617785F755D383AE1BBE93
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146078.roa
Signing time:             Mon 25 May 2026 01:51:25 +0000
ROA not before:           Mon 25 May 2026 01:46:25 +0000
ROA not after:            Mon 24 May 2027 01:51:25 +0000
asID:                     146078
IP address blocks:        240a:ad64::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:99:5e:46:2d:eb:61:0c:2f:61:77:85:f7:55:d3:83:ae:1b:be:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:25 2026 GMT
            Not After : May 24 01:51:25 2027 GMT
        Subject: CN=1F216107526C86E61F93DB150B997CEE5CB6DB11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:fe:42:7e:d7:af:57:21:f6:99:a8:07:3d:
                    dd:e6:51:6b:13:93:09:3f:84:d1:06:94:b1:00:8c:
                    4a:37:83:da:c8:12:62:fe:e7:1e:f0:ff:00:d7:6f:
                    63:ff:74:07:7b:e5:07:8f:49:b7:ef:b2:ff:11:87:
                    53:f8:fa:3f:93:ab:39:a8:e5:28:ca:22:d7:57:0a:
                    6c:8e:94:34:d0:8d:28:36:49:e6:92:7c:63:a5:9b:
                    13:50:35:f0:df:1a:3e:6f:aa:52:83:8a:74:cb:bf:
                    53:5b:28:20:e6:15:2e:03:4b:d0:b3:51:77:50:a0:
                    3f:1f:ad:37:b3:df:58:db:8e:86:b1:34:8a:82:31:
                    41:80:31:6f:69:5f:70:a8:45:b8:11:74:68:51:ee:
                    01:ce:bd:8a:30:51:30:11:a2:92:19:d7:e2:29:33:
                    7f:49:6e:68:a4:cf:14:e0:ad:c7:a4:46:2f:1c:03:
                    b9:6b:10:5d:a7:da:d7:d6:ba:ae:69:63:56:78:45:
                    60:c8:54:70:15:45:98:d4:3f:c2:aa:92:c5:93:1a:
                    55:3e:e5:3d:99:7b:37:a5:6b:53:b5:f2:34:c7:fe:
                    47:48:bc:b8:db:7b:51:94:b8:4e:47:f0:a9:8f:0c:
                    a8:20:73:70:f0:5f:91:37:e9:05:19:07:23:d8:82:
                    69:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:21:61:07:52:6C:86:E6:1F:93:DB:15:0B:99:7C:EE:5C:B6:DB:11
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146078.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad64::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:90:7e:f9:14:a8:ca:99:18:db:6d:46:b6:7f:51:6f:4e:40:
         23:a2:aa:ba:44:c2:9f:31:93:ea:3e:49:04:af:f2:61:6b:22:
         59:fc:d9:da:ca:fa:1d:67:50:f1:cf:e1:a1:af:a0:6a:10:ed:
         07:2a:44:0e:d8:b4:80:48:e4:15:18:9d:8a:da:f8:bd:18:c9:
         57:a0:27:f8:d0:c3:3a:2f:33:9e:23:e5:16:cc:53:24:b7:22:
         3d:35:a2:85:9f:85:8a:a8:28:a0:b9:a7:8c:7d:cf:91:d5:df:
         10:7a:24:45:7c:88:0c:0a:59:cf:57:a6:25:21:b8:8a:55:9d:
         09:0a:01:ff:2f:a2:ed:9d:03:d8:3d:bd:c6:a9:0b:15:f5:c3:
         73:21:5e:e6:2e:68:a6:5f:85:48:84:18:d6:a8:c5:68:84:94:
         14:65:1b:54:5d:c8:0e:f3:c0:bb:e9:43:42:77:5f:50:c0:c6:
         fb:fa:93:79:20:f9:f2:61:e8:ac:7f:dc:d8:68:f8:69:c5:a6:
         a6:38:64:df:ec:b3:05:7c:b3:d3:db:0c:4e:0c:e0:be:fa:07:
         6f:26:ef:f7:2a:65:0b:44:d4:be:37:41:43:9a:c5:86:f1:f0:
         ca:b9:f8:d3:a0:41:00:bd:da:fd:31:80:6d:2a:0f:95:fa:d0:
         a6:18:2c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:02 2026 by rpki-client