Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146201.roa
File:                     AS146201.roa (raw, json)
Hash identifier:          oIXZn1GTJu/TbzZFYUJTvgAuzUo4UPEiEEp4omrShZo=
Subject key identifier:   7E:13:20:DE:FA:72:7B:70:F2:23:05:3E:9D:EE:9E:B3:BE:A5:1B:EA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5596B1AD0BE764769E5675042DA166AA3BD9062B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146201.roa
Signing time:             Mon 25 May 2026 06:48:46 +0000
ROA not before:           Mon 25 May 2026 06:43:46 +0000
ROA not after:            Mon 24 May 2027 06:48:46 +0000
asID:                     146201
IP address blocks:        240a:addf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:96:b1:ad:0b:e7:64:76:9e:56:75:04:2d:a1:66:aa:3b:d9:06:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:46 2026 GMT
            Not After : May 24 06:48:46 2027 GMT
        Subject: CN=7E1320DEFA727B70F223053E9DEE9EB3BEA51BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:51:8d:9f:9b:7c:cd:9a:23:0a:84:d4:b5:8d:
                    14:b2:60:98:50:bf:07:8c:a9:1e:aa:3f:49:4f:cb:
                    03:ea:25:30:87:64:17:9a:42:d0:fb:48:f7:e3:53:
                    3e:4f:92:22:dc:b1:b3:f1:64:2a:b8:3e:80:4e:cc:
                    50:ab:f5:f5:00:40:3d:4a:46:cc:b5:a6:23:b4:b9:
                    c8:f6:4e:85:61:2e:0f:fe:e2:6a:9b:d8:fc:1c:88:
                    15:3a:e0:5c:8f:b7:f2:0f:74:e2:59:9f:ff:99:0a:
                    72:79:97:2d:22:e7:df:75:e2:22:01:25:3d:ae:32:
                    0b:aa:0f:19:9b:dd:f8:3e:db:40:20:ff:d0:42:64:
                    ad:e1:20:07:cd:72:09:03:e8:2d:34:d7:49:9f:8e:
                    ea:2f:07:5c:c4:7b:38:cc:c9:46:3e:dd:7d:53:95:
                    a9:c2:04:66:bb:ad:ad:dc:14:2a:f9:0c:16:ac:c3:
                    a4:ef:28:ed:eb:fd:db:da:37:d4:fb:85:a3:38:1b:
                    a6:ef:85:85:bd:72:0c:11:4d:88:34:89:62:ee:cc:
                    ce:14:6e:a7:73:5b:9f:33:57:3a:e3:9d:45:e9:54:
                    cd:67:ea:38:6b:a1:cc:14:0d:fa:20:20:0f:2c:fc:
                    3a:f2:6c:3e:1a:d7:93:38:53:be:cf:03:4f:9f:6a:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:13:20:DE:FA:72:7B:70:F2:23:05:3E:9D:EE:9E:B3:BE:A5:1B:EA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146201.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:addf::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:62:a1:01:44:08:4b:53:ad:87:9f:1a:19:c5:80:07:99:ad:
         e3:90:da:d5:6a:d2:f9:03:59:5d:05:99:c5:d1:f0:0e:1b:1c:
         af:a6:5d:b1:b8:3e:82:13:7b:19:7c:f4:07:e4:5f:ec:b9:29:
         7e:59:30:05:2f:f3:3f:6c:34:64:df:3c:ca:b4:80:81:81:c5:
         68:f1:f3:41:be:c2:99:5c:e0:23:16:09:5b:3b:0d:4d:5f:b4:
         bc:9e:a1:bb:10:5f:9e:85:ef:21:e3:c8:29:04:a9:7d:41:86:
         66:f0:e7:84:71:45:94:04:e6:b3:a4:91:19:71:92:80:90:bb:
         85:2a:ee:9c:49:5a:f2:28:71:85:71:5a:9f:90:2e:aa:78:16:
         ab:0c:f3:c1:6c:4b:49:bf:64:ae:7b:55:f6:0d:16:37:dd:c2:
         75:b5:a9:f8:92:fa:8f:5d:00:76:c4:c9:e1:56:44:4f:20:55:
         a7:49:70:c5:91:79:17:a1:2c:7e:d8:8e:57:7b:cd:2a:c3:49:
         3a:10:a3:33:3a:cc:d3:54:15:36:01:2c:9d:65:e5:84:3d:1a:
         bb:aa:1a:b4:67:29:88:83:c1:3f:d8:2b:34:d0:9b:d6:f2:ff:
         71:38:41:a6:e3:02:21:05:9f:5f:97:52:74:93:33:db:af:2f:
         bb:0f:73:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:24 2026 by rpki-client