Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146154.roa
File:                     AS146154.roa (raw, json)
Hash identifier:          15830IkXtetFlE5TKxYBsb7rLrTJPSkP05oECLbrL0Y=
Subject key identifier:   13:8F:0A:E6:0D:0D:3D:BC:D4:6F:BA:FC:C9:27:E7:96:F2:2E:2A:F6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       61C085409B1277DA2EFBD7E245101EFC0458DF46
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146154.roa
Signing time:             Fri 22 May 2026 02:47:29 +0000
ROA not before:           Fri 22 May 2026 02:42:29 +0000
ROA not after:            Fri 21 May 2027 02:47:29 +0000
asID:                     146154
IP address blocks:        240a:adb0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c0:85:40:9b:12:77:da:2e:fb:d7:e2:45:10:1e:fc:04:58:df:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:29 2026 GMT
            Not After : May 21 02:47:29 2027 GMT
        Subject: CN=138F0AE60D0D3DBCD46FBAFCC927E796F22E2AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:1a:06:6f:a2:f5:e9:70:f6:59:15:25:1d:
                    a9:a7:b1:2c:e8:0d:4e:f1:a8:e8:8a:f8:12:6c:81:
                    bc:26:4d:7a:52:e1:0e:37:e2:20:05:28:67:dd:60:
                    22:26:1a:71:03:74:48:e3:53:ec:39:e4:66:95:83:
                    da:67:23:0e:3e:78:4f:da:db:29:31:af:2a:43:5a:
                    c8:9f:66:58:fc:4f:89:fc:41:fc:e5:cd:d9:e9:e0:
                    c5:ad:53:1e:c6:e5:e2:d3:6b:f1:89:7c:b5:e9:94:
                    3f:57:80:88:5b:ac:77:9e:ba:7f:54:f4:17:fa:c3:
                    d4:cd:94:39:c4:c2:13:bb:a3:14:b6:02:a6:57:71:
                    29:48:91:01:6b:4b:68:3b:fc:ee:e4:58:35:fc:ed:
                    40:c0:fd:df:7a:17:12:a0:fe:57:56:f6:6e:97:a4:
                    e3:50:4b:0f:48:d5:11:dd:2d:75:c9:5a:52:a0:67:
                    24:7b:59:57:71:22:e7:7a:0a:58:36:4a:1a:4e:2f:
                    99:07:ce:86:20:2d:50:93:4b:60:81:53:ba:29:43:
                    ff:cd:a5:e0:4e:a8:ad:99:a9:b8:6c:c7:cb:04:74:
                    76:d7:3b:c3:13:62:31:8e:b6:f5:54:5b:2e:69:24:
                    24:60:53:91:43:4f:49:6a:97:22:a6:14:2b:55:b0:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8F:0A:E6:0D:0D:3D:BC:D4:6F:BA:FC:C9:27:E7:96:F2:2E:2A:F6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146154.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:c4:38:5e:8e:c2:2e:ef:27:2a:8f:51:28:24:7e:1c:ac:8b:
         97:1b:69:f8:f8:34:b2:fd:44:e9:99:ac:cb:bc:9f:63:18:4b:
         4b:d8:5b:51:09:63:9a:74:92:00:b9:1b:5b:59:92:d1:cb:b5:
         3d:0f:5b:aa:2b:0a:d2:ed:bc:59:ab:6d:b7:a7:e4:5e:fd:75:
         83:49:03:e3:4c:15:42:ee:b0:75:a1:dd:5d:fe:f3:3c:9a:47:
         6f:4a:d7:32:f1:78:9e:42:c5:48:01:77:bb:ff:18:c4:b3:b8:
         e6:ba:7a:23:db:c0:10:85:2c:b8:32:9f:f3:da:4f:f8:f0:0a:
         7a:98:f9:d2:81:7f:ea:6d:bd:ef:7d:e8:3f:a4:8c:31:54:b0:
         35:2a:58:d6:79:87:5f:f1:e4:ec:26:c0:d5:d1:dd:9c:1f:55:
         4b:2a:a6:e3:0b:c4:59:cd:75:73:b7:40:c6:d5:66:05:ba:51:
         cd:76:11:17:71:82:60:05:34:68:89:0a:b0:70:1a:11:cf:d3:
         ab:ee:7e:27:0a:82:b5:51:25:66:c7:41:6c:f9:76:d3:ee:6f:
         06:a0:e7:3e:9b:d9:c7:75:c7:2a:ba:45:07:57:a0:1b:6a:53:
         f7:db:54:72:44:04:38:8f:74:c3:00:68:9e:64:3b:6a:d6:91:
         b0:c9:36:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:31 2026 by rpki-client