Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146185.roa
File:                     AS146185.roa (raw, json)
Hash identifier:          q/2qU8JNWuwm37etland1QTOEuJob/083+Cm0aIWeXM=
Subject key identifier:   59:0B:56:0C:27:4D:70:26:00:AE:53:CF:D2:94:55:7E:3C:7D:55:B5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0802F6B6C19C00493B84AFADAB27F66C5E15893C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146185.roa
Signing time:             Fri 22 May 2026 06:27:38 +0000
ROA not before:           Fri 22 May 2026 06:22:38 +0000
ROA not after:            Fri 21 May 2027 06:27:38 +0000
asID:                     146185
IP address blocks:        240a:adcf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:02:f6:b6:c1:9c:00:49:3b:84:af:ad:ab:27:f6:6c:5e:15:89:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:38 2026 GMT
            Not After : May 21 06:27:38 2027 GMT
        Subject: CN=590B560C274D702600AE53CFD294557E3C7D55B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:18:d5:20:cc:bb:89:fd:bd:1a:9f:30:61:
                    73:9c:ac:a2:7b:d8:64:1f:a1:e4:e9:36:2f:bd:eb:
                    2c:97:06:cb:da:75:e4:2f:12:02:ce:32:4b:e6:6c:
                    27:45:0e:12:f9:8d:68:4a:54:bc:45:96:6a:00:67:
                    6b:eb:7e:6a:4a:e4:44:6f:5c:d0:ba:ed:88:31:eb:
                    65:d4:bf:07:36:2f:3c:ee:bd:c0:48:20:70:dd:b0:
                    3c:4a:72:7b:1b:e3:df:af:0b:49:b8:04:7a:84:da:
                    78:de:d4:85:18:6b:ac:90:1a:7e:91:0f:7e:f4:6b:
                    84:51:0b:18:d7:f9:c8:b4:cb:6f:fe:f2:e3:81:68:
                    92:14:43:14:78:c5:1f:18:fd:03:13:ab:b8:f0:4d:
                    26:c1:e5:95:df:e4:cf:2d:be:05:cd:8b:8b:b3:5d:
                    dd:5a:ae:f9:fb:a1:3e:e3:32:e3:e0:80:3f:92:89:
                    f6:bc:30:ab:ed:00:c2:37:9f:0d:11:99:8b:b9:19:
                    65:70:34:81:b4:05:bb:6b:32:94:66:4d:3b:c0:b6:
                    f0:32:0b:e8:8f:93:71:42:00:9a:ce:44:1f:01:3b:
                    f0:5a:ec:d4:2d:f0:12:09:a9:3c:bb:a0:30:8f:37:
                    86:bc:3c:02:5f:a4:8f:ef:2e:26:31:b3:d8:e8:c6:
                    c0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0B:56:0C:27:4D:70:26:00:AE:53:CF:D2:94:55:7E:3C:7D:55:B5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146185.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adcf::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:69:88:97:44:ba:ab:b9:fb:de:e8:8f:db:d8:ed:50:7a:90:
         01:d0:2c:db:ec:76:83:56:d7:a2:74:e2:f5:cc:9c:ce:1e:63:
         6a:ec:50:85:db:21:26:33:d9:22:48:13:69:02:72:76:c0:04:
         ac:06:ca:d7:33:20:ec:c0:9a:0e:d1:93:5b:56:a1:54:40:34:
         55:bf:f4:b7:fa:73:ac:60:24:96:05:04:6f:fb:a0:8c:c8:17:
         2c:9d:46:df:38:d7:ba:ee:b4:f3:97:e8:b6:e7:d5:9c:78:9e:
         ba:b0:a2:ad:d4:43:c2:db:53:61:f1:ab:85:6b:40:e8:2e:a3:
         cf:10:ea:59:4a:10:77:66:ed:1c:74:48:ae:c5:97:15:35:67:
         35:44:bd:29:34:75:db:ad:9f:c4:d4:d7:82:d2:61:6e:66:08:
         54:cd:1a:e6:b5:81:1f:26:b9:54:0b:8e:b1:a8:8e:0b:cd:03:
         32:8e:72:10:ff:99:27:50:63:c7:33:77:44:33:c3:ab:a5:6e:
         25:f1:de:dc:6d:54:74:99:d6:df:3b:e6:9e:a3:e2:28:91:fc:
         8b:b3:7b:06:a9:e4:f9:bc:49:26:6c:fd:bc:e1:05:98:19:f9:
         d3:a0:21:e3:3f:d6:41:23:e7:49:2e:7c:fe:1e:49:7d:bc:9c:
         45:18:b5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:18 2026 by rpki-client