Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146096.roa
File:                     AS146096.roa (raw, json)
Hash identifier:          gakL2SEYTRZpX7RhTXby21sEqkJR/NzIsiRubSgrLXI=
Subject key identifier:   0C:0B:8B:F5:DE:5D:CA:1B:7C:A2:D6:38:47:0B:42:B9:C1:E3:81:65
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       042B782C1B8173614E1FEB34980BF94C113A15C1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146096.roa
Signing time:             Fri 22 May 2026 04:08:28 +0000
ROA not before:           Fri 22 May 2026 04:03:28 +0000
ROA not after:            Fri 21 May 2027 04:08:28 +0000
asID:                     146096
IP address blocks:        240a:ad76::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2b:78:2c:1b:81:73:61:4e:1f:eb:34:98:0b:f9:4c:11:3a:15:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:28 2026 GMT
            Not After : May 21 04:08:28 2027 GMT
        Subject: CN=0C0B8BF5DE5DCA1B7CA2D638470B42B9C1E38165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:d7:d4:19:f5:f4:39:b4:c1:4a:45:ae:3c:
                    6e:11:19:38:b6:64:8b:5b:ee:4f:62:9d:7f:5a:ee:
                    07:03:d1:48:a5:b9:a8:39:87:5e:9e:f2:56:c5:59:
                    aa:70:80:a5:69:34:71:da:b1:1f:6b:7e:77:cb:fa:
                    f0:65:0e:59:00:32:ab:0d:66:85:b3:d2:e3:21:f1:
                    5c:82:81:9a:6b:e5:c4:f5:ad:a0:3d:9a:ee:02:ba:
                    0a:00:e4:13:47:ef:03:0c:07:b3:d5:d4:e0:10:e1:
                    01:05:a7:f3:c7:8b:ce:13:5d:cf:04:5a:35:e4:7f:
                    ea:de:af:98:b2:0a:1d:d1:7a:b0:60:0a:d7:76:df:
                    58:a4:fb:b1:13:5b:68:2c:ea:e8:4b:ea:98:84:4d:
                    b2:b0:c9:cd:fd:03:18:a3:f3:7e:64:84:56:92:26:
                    0d:33:4d:81:35:fb:ac:fd:45:ff:34:49:54:99:5e:
                    7c:e0:39:69:66:ba:96:88:72:9e:5e:34:35:84:7f:
                    14:ab:eb:e3:2e:da:94:34:ce:53:66:cf:7f:09:7e:
                    c6:5b:77:b4:51:e2:7a:9c:9f:34:4b:b5:94:f2:e5:
                    a2:1f:bb:a0:34:f4:c3:17:46:a2:fd:71:88:4a:87:
                    a0:f4:58:f0:5f:8a:d8:5a:22:2a:36:eb:b9:ab:83:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0B:8B:F5:DE:5D:CA:1B:7C:A2:D6:38:47:0B:42:B9:C1:E3:81:65
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146096.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad76::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:53:dd:d1:7a:1a:75:ae:1f:9d:e9:74:93:55:ab:2c:aa:66:
         b6:d4:e4:bd:f1:c0:93:3c:d4:ee:83:56:2f:e9:a1:c1:c5:20:
         91:37:4b:3a:e7:d9:78:9c:a8:96:28:98:20:c8:7e:81:c0:d7:
         bd:c7:4b:9e:72:2d:f2:f4:6f:81:c5:9c:b7:17:b6:e7:5b:eb:
         47:cf:ca:f0:68:34:25:b5:b7:61:41:bd:f6:49:fe:fa:02:f1:
         f8:f9:0e:1c:77:f8:00:82:cd:d0:4e:92:e9:13:64:79:50:1c:
         60:b6:ee:e6:2b:fb:de:65:a1:70:20:07:36:46:3a:dc:73:c2:
         b2:30:95:05:2f:d2:7c:36:88:61:75:21:1c:3f:36:fc:5d:f2:
         61:9e:97:18:9c:e2:ee:d1:ea:5b:e8:c3:31:12:31:39:bd:4a:
         1b:32:e7:d6:d4:23:34:b4:9c:71:7d:1f:4a:b3:c3:47:5c:fc:
         0e:75:56:d0:b9:da:1e:7d:6f:ae:49:85:41:85:ef:f3:ea:73:
         08:4c:35:46:0e:6e:70:28:11:1d:6a:30:33:0f:1a:c1:ec:49:
         e0:1a:45:2b:a9:93:61:5b:14:a4:dd:b7:ea:62:2b:1f:85:db:
         b1:d2:4d:e3:6a:4b:96:33:90:73:76:58:11:e6:c3:bf:96:31:
         db:fa:01:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:17 2026 by rpki-client