Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146182.roa
File:                     AS146182.roa (raw, json)
Hash identifier:          pgTc+C3CPRvlzJ1yf7iLdEmQ65dxwx014zCwg/0o0TY=
Subject key identifier:   17:F5:C7:91:FE:72:F1:4B:72:60:14:12:E5:53:D8:D9:D7:02:12:33
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2C64B621591CC5251E23C8C14BDF20DB5E29CB2D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146182.roa
Signing time:             Tue 26 May 2026 06:12:37 +0000
ROA not before:           Tue 26 May 2026 06:07:37 +0000
ROA not after:            Tue 25 May 2027 06:12:37 +0000
asID:                     146182
IP address blocks:        240a:adcc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:64:b6:21:59:1c:c5:25:1e:23:c8:c1:4b:df:20:db:5e:29:cb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:37 2026 GMT
            Not After : May 25 06:12:37 2027 GMT
        Subject: CN=17F5C791FE72F14B72601412E553D8D9D7021233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:5a:f2:b3:51:d9:d5:f0:94:5e:b6:7d:ec:
                    75:f2:93:e8:18:4b:f3:6a:68:e6:94:2c:d0:ba:42:
                    60:eb:8b:0c:10:7a:d3:01:a1:de:22:b3:c9:a1:ca:
                    aa:96:a9:44:fb:8c:ba:57:59:25:96:56:52:a9:02:
                    ae:99:7d:55:44:bc:40:99:b2:72:72:e2:de:e4:09:
                    d8:14:9f:77:88:15:8f:96:18:cf:65:a2:79:4d:42:
                    42:63:43:e3:24:60:be:6e:b2:72:74:4f:32:ab:78:
                    cb:61:8c:68:fc:c7:58:eb:41:d4:24:99:3f:7f:5f:
                    8b:fc:15:e0:ef:eb:c1:bf:5b:ce:35:2f:fd:50:67:
                    03:5f:51:3c:f8:79:0a:e9:ed:0c:25:d0:20:96:2f:
                    be:1d:92:c8:fd:08:8b:43:01:98:01:12:b7:e8:12:
                    45:0b:f7:38:d3:40:23:fe:34:38:e5:12:8e:4c:72:
                    72:c8:d8:f1:7e:1e:ee:99:97:a6:ee:8b:fd:47:58:
                    2b:f3:8a:18:5a:c3:20:ea:a6:21:bf:06:f5:19:ff:
                    1c:1d:21:51:c9:5c:7c:89:87:49:d9:61:9a:cd:a1:
                    79:8b:2c:ca:1c:20:95:97:76:d4:b6:54:fa:82:cb:
                    6d:6d:b2:a5:da:92:8b:fd:91:b8:d6:8d:eb:17:db:
                    33:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F5:C7:91:FE:72:F1:4B:72:60:14:12:E5:53:D8:D9:D7:02:12:33
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146182.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:6d:4a:a0:7c:dc:12:10:05:ff:d8:9d:b8:ac:ee:cf:e6:5b:
         63:7e:06:d9:ff:0a:bc:a4:46:9d:a7:bd:0e:0d:29:2a:c1:27:
         62:ed:24:3e:46:c8:ff:cf:c7:67:06:8c:fd:37:f7:e6:97:d0:
         f3:4f:9d:11:86:7b:e5:7e:f5:37:f4:96:5c:6c:e3:39:87:92:
         72:55:59:bc:31:f3:f2:4d:35:e5:c3:2e:35:f0:62:d3:11:99:
         4f:90:ab:3b:de:2c:b9:ec:37:72:f6:0b:50:ec:69:77:cc:91:
         7e:e2:1e:33:3f:f7:84:a6:86:a5:33:70:d1:53:7f:2f:47:ef:
         55:a9:3e:ab:92:44:e7:4b:2d:0f:52:96:40:4c:cd:4e:3c:f2:
         d7:bc:92:59:bc:06:fc:66:53:9f:fa:22:26:8d:77:c9:35:5e:
         52:cd:a1:1e:bc:b3:d0:d2:54:52:25:e0:d1:38:cb:79:87:a3:
         52:00:0e:fd:ff:3a:44:21:e9:3e:c5:65:5f:8c:5c:05:d3:01:
         64:ba:cc:26:92:f0:38:ed:d0:3c:16:6e:f6:3d:5f:8a:63:7f:
         e7:10:45:10:83:e9:c3:d3:94:2e:63:23:5a:80:91:c1:26:9a:
         25:ac:c4:e6:97:b4:bf:7e:95:9b:c7:a1:ca:f7:64:59:e0:53:
         24:3d:e0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:35 2026 by rpki-client