Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146142.roa
File:                     AS146142.roa (raw, json)
Hash identifier:          gE+nFrFfAdpjrNFzm/MPD4ClFf95/s9MN0SoZJ2EIlg=
Subject key identifier:   31:55:28:7B:42:CE:2B:E9:13:2E:A7:79:19:E6:32:42:1B:15:84:A7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4FFD5F357074D5EC134A1451D5FD59BC2FD513EA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146142.roa
Signing time:             Fri 22 May 2026 07:25:04 +0000
ROA not before:           Fri 22 May 2026 07:20:04 +0000
ROA not after:            Fri 21 May 2027 07:25:04 +0000
asID:                     146142
IP address blocks:        240a:ada4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fd:5f:35:70:74:d5:ec:13:4a:14:51:d5:fd:59:bc:2f:d5:13:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:20:04 2026 GMT
            Not After : May 21 07:25:04 2027 GMT
        Subject: CN=3155287B42CE2BE9132EA77919E632421B1584A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:71:f0:99:71:1d:ff:8e:e4:1a:48:f5:cc:
                    42:a2:79:9e:88:14:98:a8:c4:ed:ba:87:74:80:e9:
                    58:64:5d:3d:8b:a7:25:90:4e:fe:9b:4d:64:5c:72:
                    8f:18:aa:d6:cb:b3:f9:9e:77:8a:02:78:a8:13:9b:
                    6f:3d:0e:fe:d3:ad:3a:73:01:e4:a7:b0:e9:16:a7:
                    9f:d9:dc:fb:e7:aa:2e:47:0d:ab:2c:ff:58:88:0b:
                    38:63:29:f5:91:e0:72:e3:70:4e:ad:73:02:9d:d6:
                    a9:b3:40:7f:e2:f5:e6:5f:7d:77:57:58:b5:ab:e1:
                    3a:b5:64:de:52:95:2a:9d:c7:66:64:48:d6:9d:0d:
                    4e:a7:7c:c2:d4:b7:27:73:70:1e:51:11:c4:45:77:
                    a4:94:25:b9:63:4a:df:9c:b8:92:bd:4b:fe:0a:8d:
                    57:c1:49:aa:f0:f4:8c:59:c0:2c:95:c5:ba:03:88:
                    dc:02:52:5c:3a:fd:ee:e3:a5:40:7b:21:18:7c:3b:
                    ca:f2:de:d7:0f:ec:d6:6d:ea:21:09:38:bc:be:83:
                    1b:51:22:9b:b7:75:43:75:a7:85:8b:12:a9:56:74:
                    fd:07:c3:4c:6e:c7:5e:14:f7:dc:3f:4b:83:c5:6b:
                    2e:71:34:84:86:48:2b:24:75:dc:ea:b9:61:90:bf:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:55:28:7B:42:CE:2B:E9:13:2E:A7:79:19:E6:32:42:1B:15:84:A7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146142.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ada4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:62:e6:0f:b5:f2:08:c8:89:24:d6:6a:ab:02:f8:01:7f:87:
         44:f1:4a:fd:a1:4f:2b:23:1f:d4:a2:30:b8:2f:f5:b3:8c:ac:
         14:22:b0:c8:9e:cf:87:ac:86:3f:0a:91:c6:b5:71:f9:e1:32:
         df:55:94:8f:e5:d7:7e:13:bc:18:7e:f5:ab:66:58:6b:72:80:
         ff:d4:df:95:23:5c:8b:6f:5c:85:d9:21:55:4b:db:39:2d:07:
         11:5b:05:72:5b:d0:87:b4:d2:38:f9:30:a7:0d:9f:f2:dd:d9:
         4c:04:3c:19:03:35:f2:ac:3b:86:b1:70:c4:a0:39:fe:d4:b4:
         06:75:ee:9b:44:97:90:20:54:ee:a1:a8:91:a6:2c:1d:e3:ed:
         5c:98:f0:c1:7d:65:5f:cf:72:79:e8:14:76:ef:61:6a:67:7a:
         c6:66:b6:11:87:b4:5e:7b:0c:6a:78:57:65:b3:bd:b2:2f:cc:
         b1:3e:35:7a:51:7b:44:36:a3:73:02:a5:db:2a:11:be:49:32:
         33:8c:2a:c1:61:c5:47:bd:b8:91:e7:33:ac:34:83:75:f1:18:
         c4:6b:19:b6:6a:67:6d:34:f4:2c:25:c4:6e:73:0d:b5:83:04:
         e6:81:d1:92:93:69:ba:11:0d:68:df:4b:dd:ff:ac:43:b1:67:
         e9:fc:eb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:11 2026 by rpki-client