Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146159.roa
File:                     AS146159.roa (raw, json)
Hash identifier:          XB0hiscPMnpxvbZ5TeXgcyXXAgw2rwYMaS4wI7VU/h4=
Subject key identifier:   28:8C:0F:81:EF:19:59:16:0E:CA:75:64:59:C2:E0:17:B7:2F:D0:C4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7338D242515A81ADD4B369D2D4CEC6EF7233EAC3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146159.roa
Signing time:             Tue 26 May 2026 06:13:02 +0000
ROA not before:           Tue 26 May 2026 06:08:02 +0000
ROA not after:            Tue 25 May 2027 06:13:02 +0000
asID:                     146159
IP address blocks:        240a:adb5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:38:d2:42:51:5a:81:ad:d4:b3:69:d2:d4:ce:c6:ef:72:33:ea:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:08:02 2026 GMT
            Not After : May 25 06:13:02 2027 GMT
        Subject: CN=288C0F81EF1959160ECA756459C2E017B72FD0C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ce:83:8f:c7:d0:de:48:e4:d0:f1:26:09:ac:
                    44:4b:76:c8:a8:e0:04:c1:ef:b0:90:f3:1b:62:8a:
                    ea:79:16:ab:2a:31:8a:a2:03:8b:ea:09:fa:cd:d1:
                    0f:46:35:66:5f:ed:13:83:5f:4f:0d:24:0d:b7:3b:
                    75:39:8e:81:db:e7:22:32:5d:33:53:7b:5b:c9:52:
                    74:af:f0:dc:3a:b4:01:f8:a3:ba:77:1a:6c:a9:25:
                    ff:31:68:33:f3:9e:b2:b7:5d:b5:0b:1f:57:29:23:
                    6f:52:78:04:af:02:a2:04:d4:46:a7:00:27:45:b7:
                    5f:6b:5a:6f:45:02:05:8a:2c:81:d1:7d:8b:ea:78:
                    c9:80:b0:38:ac:4d:49:8c:84:97:f0:e4:19:96:86:
                    2a:3f:09:fa:f6:70:2f:8d:90:28:12:5d:a6:71:ea:
                    cc:c6:4c:81:43:35:fb:07:90:6a:77:f2:1b:74:6b:
                    e4:c3:5f:d1:0f:e9:7f:05:fb:4f:73:0d:05:59:07:
                    42:99:df:4d:10:4e:1d:db:57:51:a2:e2:aa:50:9c:
                    da:1b:76:01:9b:3d:56:95:cf:9c:33:5f:4f:95:eb:
                    1a:4d:8d:11:ef:2e:55:08:00:60:b8:fa:72:7b:b9:
                    81:1e:83:00:55:16:d7:9d:d7:93:81:2a:20:8f:a9:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8C:0F:81:EF:19:59:16:0E:CA:75:64:59:C2:E0:17:B7:2F:D0:C4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146159.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adb5::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:0e:53:fa:56:7c:14:48:27:23:0c:f6:76:f9:ea:12:b5:51:
         34:3a:cf:a6:4e:4c:76:7c:cf:30:85:9d:55:f6:9e:3e:bf:fb:
         26:da:f0:a1:69:69:c2:33:0d:7c:72:c9:7b:8f:59:0c:bb:36:
         af:e9:05:3d:a3:be:1a:2a:c0:33:1f:91:81:17:67:c3:45:88:
         48:83:2e:8f:e7:7f:cb:19:58:8c:f2:c8:c7:ae:a4:c7:84:ee:
         48:f3:84:e8:b4:b5:d2:dc:e0:0a:09:1e:14:25:9e:5c:00:76:
         3c:57:84:48:1b:3a:a6:07:d0:3d:bb:86:a3:ba:b6:c2:11:db:
         63:2a:86:61:aa:f0:03:73:9b:c5:15:bc:1b:30:cd:87:c4:1c:
         a0:f0:b4:67:32:8e:d2:ab:00:8e:38:27:08:6c:d9:ee:89:56:
         96:26:25:cf:82:2d:9d:3e:a5:d4:9d:1b:6d:2c:2f:2a:ee:79:
         c6:84:fc:f6:a6:4f:44:f0:b5:e7:16:f4:b9:d1:31:08:02:f5:
         4c:b7:30:d8:00:4f:fb:aa:ef:03:42:bf:3c:0b:a1:ac:e9:da:
         85:b2:36:36:c1:a1:f1:c9:f3:00:6d:41:a0:7f:22:7d:8d:82:
         e6:20:0b:40:82:99:25:82:60:f0:78:a3:26:a8:a4:78:74:48:
         d9:62:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:12 2026 by rpki-client