Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146219.roa
File:                     AS146219.roa (raw, json)
Hash identifier:          g+gcs+2jMIWIh9a9XT9BOnUY9vUxtpZKYsVY2s0SNGA=
Subject key identifier:   E8:75:36:C2:BF:60:DE:D0:20:A6:87:52:2C:1F:9A:5E:62:DB:E0:9C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0F727862EB042FC43AAD60E748DA6C3C3DB7F968
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146219.roa
Signing time:             Fri 22 May 2026 04:26:49 +0000
ROA not before:           Fri 22 May 2026 04:21:49 +0000
ROA not after:            Fri 21 May 2027 04:26:49 +0000
asID:                     146219
IP address blocks:        240a:adf1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:72:78:62:eb:04:2f:c4:3a:ad:60:e7:48:da:6c:3c:3d:b7:f9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:49 2026 GMT
            Not After : May 21 04:26:49 2027 GMT
        Subject: CN=E87536C2BF60DED020A687522C1F9A5E62DBE09C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d4:d2:b4:3c:bf:9e:c4:54:98:9d:a8:15:09:
                    3b:af:19:f8:fa:7f:94:cc:02:1a:d6:8e:43:a6:01:
                    f4:41:e1:cd:4c:da:ce:3f:03:4b:df:3d:41:6f:cb:
                    96:8e:0f:9b:ea:bf:ad:29:4e:de:5d:32:95:82:45:
                    bf:4b:b2:f6:b5:46:c1:1b:09:2c:05:c1:db:74:80:
                    12:32:69:2f:8c:be:bf:17:c5:42:25:e9:84:fe:0e:
                    55:e3:b5:0d:23:6c:d1:71:13:6d:30:57:25:eb:f3:
                    7b:eb:df:ea:1d:a7:ed:b6:7c:38:19:19:05:8e:66:
                    95:ed:4a:84:38:23:ae:0b:b2:db:6a:c9:8e:1b:f5:
                    98:6d:ee:7e:73:ed:d5:f1:dd:7a:59:90:ee:ea:4c:
                    78:0d:52:34:97:5f:0b:55:ce:e9:37:43:2e:d0:cf:
                    d7:19:34:2c:ac:c9:c7:2e:76:be:23:5c:be:8f:0f:
                    39:fd:0d:32:f3:3a:28:86:10:fc:84:98:50:3c:69:
                    80:b9:94:05:8c:4c:d0:28:06:df:4c:5c:9b:31:36:
                    29:60:41:b2:93:6d:b1:f6:7d:62:79:7f:cf:38:1a:
                    aa:6e:76:2a:ec:f7:85:84:15:5c:9d:07:1d:97:08:
                    0d:d1:73:cc:70:b8:06:3f:78:72:ec:16:f6:20:cf:
                    80:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:75:36:C2:BF:60:DE:D0:20:A6:87:52:2C:1F:9A:5E:62:DB:E0:9C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146219.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adf1::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:20:ba:44:94:fc:98:a7:d5:df:d1:1c:71:e1:51:a3:6b:b3:
         3f:d6:dc:0d:c3:57:65:34:c9:2c:41:23:1d:46:f8:cd:5e:02:
         39:a2:95:3a:cc:7a:52:9b:67:13:1b:7d:c0:d8:9e:67:bc:ef:
         4f:3d:ad:1f:db:eb:b7:28:39:1d:69:f5:fc:e2:f1:60:1e:bd:
         44:1e:50:e3:ea:26:4a:fe:ec:17:7e:81:86:e6:63:3f:bd:be:
         7b:78:d6:56:37:c3:2a:a9:c8:65:63:46:73:be:c7:d2:2e:20:
         e7:0e:ec:30:67:c7:d1:65:69:39:4a:52:3a:e9:58:6d:f6:51:
         fc:07:0a:17:48:fd:5a:90:d2:de:10:4d:86:52:b4:3a:3f:b7:
         ae:4a:51:18:e0:64:ca:cf:ab:a5:21:6c:ec:e7:49:51:a6:94:
         46:2c:4b:f6:73:89:8b:9f:29:d3:8b:9a:31:bb:07:2e:32:0c:
         a0:f9:8a:7b:f2:39:4b:13:7a:a9:4f:bf:43:83:d4:f7:c8:65:
         eb:49:af:d6:fe:8a:d1:cd:75:be:6a:e1:a5:a3:20:52:4c:d2:
         13:d0:e3:fc:eb:d2:7b:93:21:69:45:d4:ba:a6:b5:5c:ae:70:
         e2:d2:33:b0:a7:ee:8b:70:35:b9:4c:eb:62:07:89:61:d9:fe:
         ae:62:7e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:01 2026 by rpki-client