Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146174.roa
File:                     AS146174.roa (raw, json)
Hash identifier:          Re2KaqgyqyB8vF51LEQoRQNDIz/wERYoikHx+KLEtTk=
Subject key identifier:   78:A4:01:15:A9:7C:C4:2D:8F:D3:87:A7:D3:C0:F0:3C:86:E8:1A:5B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       13BDE995D83A453DD8836F2D660FA3AA89ED4189
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146174.roa
Signing time:             Tue 26 May 2026 03:17:15 +0000
ROA not before:           Tue 26 May 2026 03:12:15 +0000
ROA not after:            Tue 25 May 2027 03:17:15 +0000
asID:                     146174
IP address blocks:        240a:adc4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:bd:e9:95:d8:3a:45:3d:d8:83:6f:2d:66:0f:a3:aa:89:ed:41:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:15 2026 GMT
            Not After : May 25 03:17:15 2027 GMT
        Subject: CN=78A40115A97CC42D8FD387A7D3C0F03C86E81A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:ed:65:5e:8b:e8:f1:67:7c:dc:a0:45:cc:
                    e3:be:54:fd:a8:eb:3f:7d:a1:7b:27:1d:da:45:74:
                    f8:6d:e0:09:66:61:64:1c:3c:48:57:6b:bc:4c:15:
                    e5:76:08:08:6f:bd:4f:3b:c4:90:17:6e:d5:c5:e2:
                    3f:a6:94:68:c7:18:ad:19:68:7d:be:99:06:c9:ef:
                    e9:2b:16:52:12:ec:36:61:57:c5:98:fe:07:35:0f:
                    34:18:de:74:5e:84:af:ff:c2:3d:09:bc:57:28:41:
                    3e:a3:9e:70:60:65:5c:90:38:e6:46:3d:05:2a:04:
                    b1:e6:20:ee:13:fb:aa:ff:ac:57:02:9f:c1:0a:28:
                    ca:d7:35:fd:36:64:de:26:bb:b8:47:32:d4:03:c5:
                    01:a8:ad:bf:a5:26:be:29:94:d7:32:48:a8:6f:63:
                    fe:2f:5d:39:d9:18:78:24:29:0f:af:a8:42:61:2c:
                    56:39:23:83:36:16:9e:35:14:e3:1e:e3:20:4d:24:
                    f3:d5:86:68:15:06:a6:2a:ac:78:44:72:a6:e1:ce:
                    3f:fc:30:91:10:e9:d8:27:32:18:c2:6f:4b:d8:dd:
                    34:25:47:24:e3:e1:8d:c3:7d:6e:2b:d4:f6:2a:f0:
                    4f:72:0c:a1:4b:b9:11:95:dd:a3:40:37:c9:37:d9:
                    01:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A4:01:15:A9:7C:C4:2D:8F:D3:87:A7:D3:C0:F0:3C:86:E8:1A:5B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:30:fd:31:79:ed:90:d7:f9:dd:77:ab:de:bd:11:3a:c8:2b:
         94:11:95:e6:97:86:70:5c:a2:08:ab:cc:f1:5f:70:9f:f8:43:
         1e:5c:38:ec:4f:10:af:b1:9f:08:b2:48:c2:78:9d:49:fb:a4:
         d7:16:1a:e3:00:99:9f:b4:6e:7b:5d:b3:17:e9:a7:6a:d5:e4:
         6b:01:04:16:fb:cc:b8:9a:14:51:5e:2b:b1:e8:52:6b:63:5d:
         8d:e7:b5:5f:9c:05:e9:cc:13:0b:08:97:ca:21:af:4c:cc:9f:
         75:80:3c:65:89:ab:6e:0e:b1:9b:0f:75:a5:6b:d4:54:1f:39:
         cb:69:24:ac:ea:2a:9f:b4:e5:fe:33:78:4a:f8:a1:6c:9c:28:
         30:ee:6f:e8:30:32:90:e1:60:7c:b8:51:3f:d6:02:0f:87:a1:
         7a:42:d2:9b:b4:fd:de:ec:78:a2:ff:b4:08:09:02:99:44:2b:
         67:59:ab:c3:3c:ba:a2:78:0b:26:81:c3:fc:57:b5:80:57:ec:
         bf:a1:ea:dc:b4:9d:4a:1e:99:0d:9f:cf:b8:0d:64:90:7f:4f:
         21:1c:30:34:d1:56:76:85:9b:bc:de:2f:f3:a3:0d:0d:af:36:
         dc:73:1a:9d:07:29:c6:05:73:48:6c:02:83:cc:49:d2:40:4f:
         4b:8b:ba:8d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUE73pldg6RT3Yg28tZg+jqontQYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMTVaFw0yNzA1MjUwMzE3MTVaMDMxMTAvBgNV
BAMTKDc4QTQwMTE1QTk3Q0M0MkQ4RkQzODdBN0QzQzBGMDNDODZFODFBNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeCu1lXovo8Wd83KBFzOO+VP2o
6z99oXsnHdpFdPht4AlmYWQcPEhXa7xMFeV2CAhvvU87xJAXbtXF4j+mlGjHGK0Z
aH2+mQbJ7+krFlIS7DZhV8WY/gc1DzQY3nRehK//wj0JvFcoQT6jnnBgZVyQOOZG
PQUqBLHmIO4T+6r/rFcCn8EKKMrXNf02ZN4mu7hHMtQDxQGorb+lJr4plNcySKhv
Y/4vXTnZGHgkKQ+vqEJhLFY5I4M2Fp41FOMe4yBNJPPVhmgVBqYqrHhEcqbhzj/8
MJEQ6dgnMhjCb0vY3TQlRyTj4Y3DfW4r1PYq8E9yDKFLuRGV3aNAN8k32QFTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUeKQBFal8xC2P04en08DwPIboGlswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtxDANBgkqhkiG9w0BAQsFAAOCAQEAfzD9
MXntkNf53Xer3r0ROsgrlBGV5peGcFyiCKvM8V9wn/hDHlw47E8Qr7GfCLJIwnid
Sfuk1xYa4wCZn7Rue12zF+mnatXkawEEFvvMuJoUUV4rsehSa2Ndjee1X5wF6cwT
CwiXyiGvTMyfdYA8ZYmrbg6xmw91pWvUVB85y2kkrOoqn7Tl/jN4SvihbJwoMO5v
6DAykOFgfLhRP9YCD4ehekLSm7T93ux4ov+0CAkCmUQrZ1mrwzy6ongLJoHD/Fe1
gFfsv6Hq3LSdSh6ZDZ/PuA1kkH9PIRwwNNFWdoWbvN4v86MNDa823HManQcpxgVz
SGwCg8xJ0kBPS4u6jQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:37 2026 by rpki-client