Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146168.roa
File:                     AS146168.roa (raw, json)
Hash identifier:          SuEFbO63w86YVMerKGGVwcomko89EhELEcwPPPKlfgs=
Subject key identifier:   EF:68:6A:67:C2:BC:57:FD:E5:20:DA:28:82:AF:D5:B4:CF:F0:79:55
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0AAAC1EAA9EDD736D1BA679ACF05B40205B1F6BE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146168.roa
Signing time:             Tue 26 May 2026 03:17:03 +0000
ROA not before:           Tue 26 May 2026 03:12:03 +0000
ROA not after:            Tue 25 May 2027 03:17:03 +0000
asID:                     146168
IP address blocks:        240a:adbe::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:aa:c1:ea:a9:ed:d7:36:d1:ba:67:9a:cf:05:b4:02:05:b1:f6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:03 2026 GMT
            Not After : May 25 03:17:03 2027 GMT
        Subject: CN=EF686A67C2BC57FDE520DA2882AFD5B4CFF07955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:c6:1e:46:93:f8:06:54:81:82:47:47:03:
                    9b:9c:64:6f:54:f1:d1:6e:f1:bc:b3:59:62:de:01:
                    0d:d1:6c:25:2f:57:b7:7d:ac:40:69:20:ad:d4:4c:
                    f0:f1:97:b6:7b:dc:a3:7e:e8:29:b0:97:72:7c:69:
                    20:ce:34:b4:9a:f1:09:e0:e1:c7:5a:52:6f:87:d9:
                    88:7c:c7:16:4e:da:df:ce:62:71:9f:9a:42:22:8e:
                    c2:94:59:fb:e7:78:41:bc:dd:e1:2d:69:8b:db:6b:
                    9f:38:cf:b9:f5:52:f7:b9:3c:4d:11:ea:1b:53:65:
                    ab:e9:e9:89:ad:4d:60:57:bd:a3:5c:3e:33:c6:c2:
                    24:56:e0:18:4e:d2:ca:8d:a7:2d:eb:6f:19:98:75:
                    82:e9:8a:48:58:cf:49:c0:9a:bc:23:ec:0c:20:73:
                    f7:81:86:ac:58:13:86:59:be:33:32:eb:0d:d0:cf:
                    f4:0c:81:f0:b9:be:6a:fb:da:89:b3:f6:33:68:f7:
                    1a:10:78:9a:dd:20:79:e8:d1:18:5c:03:4d:d2:c8:
                    61:9d:d3:c6:9d:ec:0b:8b:7f:70:3b:e5:a6:18:59:
                    c0:97:7e:ab:cb:d2:49:cc:25:a8:21:b0:a3:47:d5:
                    d7:77:72:c9:f2:f5:e8:4f:08:ee:9a:30:53:1d:11:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:68:6A:67:C2:BC:57:FD:E5:20:DA:28:82:AF:D5:B4:CF:F0:79:55
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146168.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adbe::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:37:57:cd:4a:2f:d5:25:6d:86:20:96:4e:2d:61:22:b8:92:
         29:f5:34:05:03:70:d4:38:57:8e:de:39:b5:39:a7:08:06:2f:
         dc:82:44:b0:da:33:a7:38:b2:35:6f:12:9a:1e:0b:7c:61:05:
         94:21:d7:d4:b0:4d:2e:60:1d:14:65:85:a1:33:83:92:2c:a1:
         58:07:ed:0c:c0:50:76:15:60:5e:70:7e:51:6e:b7:27:70:c9:
         01:85:e7:a6:bf:1a:43:04:1f:ce:64:65:0f:c6:58:94:6d:90:
         8d:9d:f6:2d:c9:15:b9:73:ad:15:c3:3a:d7:29:5e:3e:a9:e7:
         8a:41:fd:6a:01:46:a2:65:90:7a:04:08:ef:aa:23:4f:ed:29:
         90:d7:aa:40:84:69:92:ed:fb:66:8c:77:d7:9b:c3:aa:21:9b:
         52:fa:ad:40:73:e0:ef:08:bf:eb:4d:4b:91:f7:e1:58:67:ae:
         16:68:2c:7c:d9:90:73:d3:cd:bc:bd:54:e3:67:90:1f:df:53:
         2d:36:ce:bd:5c:b1:6d:16:64:21:e1:d8:c1:06:d0:03:af:19:
         7b:d1:7b:8f:db:64:d3:59:86:c5:ed:08:2f:1d:53:ee:4e:8a:
         b9:a3:de:66:ea:b1:2f:00:5b:50:76:07:b7:da:d6:6e:8e:a5:
         d7:1c:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:28 2026 by rpki-client