Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146207.roa
File:                     AS146207.roa (raw, json)
Hash identifier:          DF10VKdRkkczwJ4NQOxoa5V0YPKP6LOjWyMBqdCP/L8=
Subject key identifier:   95:C6:C4:6B:07:B5:5E:EE:9C:E3:06:D5:75:0A:F2:DF:A0:DB:94:22
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       FA51B9EDD46C10A71057B5E947F2B622319110
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146207.roa
Signing time:             Tue 26 May 2026 06:30:55 +0000
ROA not before:           Tue 26 May 2026 06:25:55 +0000
ROA not after:            Tue 25 May 2027 06:30:55 +0000
asID:                     146207
IP address blocks:        240a:ade5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fa:51:b9:ed:d4:6c:10:a7:10:57:b5:e9:47:f2:b6:22:31:91:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:55 2026 GMT
            Not After : May 25 06:30:55 2027 GMT
        Subject: CN=95C6C46B07B55EEE9CE306D5750AF2DFA0DB9422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:05:2e:60:ce:9d:58:e7:6c:9b:3a:32:b7:
                    f2:86:14:1e:1d:89:dd:58:ea:30:7c:b7:c9:eb:26:
                    7c:69:ba:43:a3:56:7f:5a:6c:c9:cf:c4:b1:35:90:
                    34:2a:d9:52:07:6d:bb:84:cd:69:af:63:06:57:3c:
                    7d:01:36:5a:cf:49:5e:85:0e:70:4e:38:35:ef:c2:
                    20:74:66:8f:51:7a:e8:9e:73:57:ce:74:bb:2e:da:
                    04:bb:13:f0:9f:9e:34:19:87:33:ae:46:e1:9c:46:
                    fe:bb:fb:ff:4a:44:df:30:01:ff:3a:1b:79:f6:97:
                    53:c9:f7:e5:b5:dc:e5:5e:78:ae:32:2d:95:a3:a3:
                    31:4d:92:ee:1c:40:3d:00:92:42:12:29:ad:ae:23:
                    7f:4a:4f:99:eb:8d:7d:f5:7b:bf:1a:07:f9:4f:8a:
                    db:4d:11:31:9c:8b:f3:f4:22:85:25:e5:95:80:94:
                    d7:91:1c:6f:46:89:73:9b:d5:77:a6:96:df:45:be:
                    7c:6b:c6:48:11:be:ce:49:72:e3:d2:f4:39:30:b8:
                    54:58:1a:93:a0:e6:66:8f:e8:fb:9b:8b:14:37:60:
                    0d:cf:42:b5:dc:17:f9:1f:e2:bb:7d:b3:5d:0d:ce:
                    fa:20:03:87:d7:52:f3:6b:7c:84:46:93:d3:06:8d:
                    48:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C6:C4:6B:07:B5:5E:EE:9C:E3:06:D5:75:0A:F2:DF:A0:DB:94:22
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146207.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ade5::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:6a:a4:cd:1d:0a:fd:fd:e6:cf:17:48:37:34:55:30:43:da:
         2a:3c:5a:91:ef:3c:09:0b:2a:69:25:81:8f:b9:b3:52:d4:54:
         86:44:61:dd:8b:e0:62:58:73:8a:86:4d:8d:22:90:5e:39:42:
         3e:49:fb:d0:b6:b1:f6:71:2c:36:8d:b1:6d:ea:d5:4d:a5:b3:
         d0:b5:da:79:cb:ac:c1:f1:34:22:51:67:91:99:6a:ed:bb:60:
         b3:a3:57:8f:66:6d:52:3a:a4:c1:3b:35:c6:c2:ab:6d:a9:03:
         e1:e2:66:e1:c9:8e:a7:0a:55:a3:7f:ba:f7:6c:b2:e5:51:59:
         d9:eb:ca:12:96:6f:a5:fb:ca:e1:f3:31:8b:7f:05:89:0c:d0:
         3b:c2:4f:0e:b9:23:fc:6c:a7:b1:33:b3:6c:49:3a:86:64:ef:
         a3:0c:9b:a5:95:a6:bc:26:b5:55:f7:2c:b9:e7:23:f8:ef:db:
         8e:68:8a:19:64:d4:f3:c9:21:dc:a8:4c:54:10:15:e3:b5:5e:
         11:8f:12:76:70:24:cf:59:5b:35:39:15:fb:b6:d6:a1:12:ba:
         96:88:ff:0a:7f:5d:1b:1c:2b:ca:99:ea:f1:5a:8b:54:56:4a:
         c3:ac:a2:40:49:eb:f5:b4:87:89:af:4b:74:da:0f:e6:11:92:
         23:ce:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:19 2026 by rpki-client