Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146145.roa
File:                     AS146145.roa (raw, json)
Hash identifier:          p7UnEYEhoYl7BltNLBk3swrd8sclhIuRx95ysB0MdN4=
Subject key identifier:   39:10:E0:B1:BA:11:BB:9D:B1:79:5A:FB:BF:20:D6:1A:C6:B8:33:FD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       166F61DB265681E059CB6DCAAC0A2E260121F6E9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146145.roa
Signing time:             Fri 22 May 2026 01:50:10 +0000
ROA not before:           Fri 22 May 2026 01:45:10 +0000
ROA not after:            Fri 21 May 2027 01:50:10 +0000
asID:                     146145
IP address blocks:        240a:ada7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6f:61:db:26:56:81:e0:59:cb:6d:ca:ac:0a:2e:26:01:21:f6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:10 2026 GMT
            Not After : May 21 01:50:10 2027 GMT
        Subject: CN=3910E0B1BA11BB9DB1795AFBBF20D61AC6B833FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bc:cd:a2:8e:82:84:b2:6b:26:6f:f6:2a:73:
                    78:81:bd:9e:d0:a8:52:88:9f:0a:fb:e8:10:a6:e3:
                    33:b2:b9:1f:a0:bb:f2:f8:70:89:7d:07:0f:87:25:
                    26:96:eb:77:26:4d:c5:94:fd:08:2f:f9:d6:f2:1d:
                    11:eb:48:c9:f6:33:89:e8:1f:88:9a:d5:c0:ff:61:
                    d0:e1:ca:a8:49:60:01:0a:6c:55:ef:7c:b4:4b:3d:
                    ee:19:0d:0b:e2:8d:0f:65:12:1c:ba:66:fc:d1:7b:
                    ba:24:dd:0d:e1:84:3b:c7:2d:df:a7:15:bb:3a:97:
                    c2:3f:93:c9:b0:6f:6f:d3:b7:51:b5:d7:83:f5:3e:
                    a5:ec:0b:e6:36:f4:a5:80:78:ca:54:81:5c:2e:bc:
                    45:a6:07:b5:83:26:09:b7:ba:90:87:05:37:76:17:
                    0c:78:e7:a2:d6:9c:3d:2d:c4:24:d0:cc:d8:da:72:
                    f4:88:2c:c7:7e:21:d3:41:e0:95:e8:90:a2:40:7d:
                    f0:a7:d7:3b:67:57:f5:1a:e4:c7:c2:3f:e2:bd:60:
                    7e:82:e2:b0:ee:59:2b:4a:35:23:8f:39:72:19:0a:
                    8c:e0:54:1d:5c:22:11:6b:01:f3:4a:79:26:0b:60:
                    e3:39:11:2f:d1:df:92:73:d0:4d:f9:4d:63:f1:42:
                    77:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:10:E0:B1:BA:11:BB:9D:B1:79:5A:FB:BF:20:D6:1A:C6:B8:33:FD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146145.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ada7::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:69:ce:07:d7:05:09:0a:41:61:91:31:c4:ea:65:ee:28:94:
         66:3e:3e:5a:6e:04:c0:20:bc:3b:96:e9:8e:fd:b6:a0:fc:a9:
         35:de:03:24:d5:b0:7b:fb:0d:ee:37:fb:a3:01:ce:5a:54:e4:
         9d:76:7f:d6:6a:3a:40:0a:0f:d8:0a:1b:65:4b:92:ca:00:91:
         ce:ad:1e:e9:78:22:55:67:2e:50:33:fc:01:c2:b7:b3:a7:65:
         7b:79:6e:a2:4b:9a:5a:8c:35:31:78:7e:86:6a:a2:03:97:28:
         3d:3d:3f:83:2c:97:6f:31:d6:00:93:68:3d:79:31:6e:c7:e9:
         de:20:e9:bf:7c:bd:53:b6:b7:59:c0:85:a5:49:c9:b7:9e:14:
         24:72:aa:26:3b:e5:85:ab:12:3b:7e:34:68:4c:cc:9a:15:38:
         0a:d5:7f:6a:60:1f:9b:39:82:c5:4e:c8:f2:d9:ad:82:13:f5:
         eb:b5:10:7c:7f:26:5d:0d:e3:69:2a:6e:af:16:da:a0:8e:e3:
         6f:8e:ad:a7:ba:16:ce:b6:77:02:78:48:cc:c7:38:2e:d4:70:
         d8:52:86:ff:df:56:00:f7:e6:4b:bb:37:5d:d9:34:e0:96:ba:
         5c:a9:2d:1c:36:c7:75:a5:f3:8e:68:aa:da:48:a8:60:69:ee:
         99:e6:66:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:44 2026 by rpki-client