Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146236.roa
File:                     AS146236.roa (raw, json)
Hash identifier:          tl/jCRZvv9YuDI3aht4/iqz6RV2UuNIOsqEMpfGo6wk=
Subject key identifier:   16:DC:59:AD:04:45:35:70:35:77:90:EF:E9:B7:B2:1B:07:9C:1A:F9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4DCD7F683783FFEBFB005EC0DFB67FC889EFAC16
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146236.roa
Signing time:             Tue 26 May 2026 03:16:49 +0000
ROA not before:           Tue 26 May 2026 03:11:49 +0000
ROA not after:            Tue 25 May 2027 03:16:49 +0000
asID:                     146236
IP address blocks:        240a:ae02::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:cd:7f:68:37:83:ff:eb:fb:00:5e:c0:df:b6:7f:c8:89:ef:ac:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:49 2026 GMT
            Not After : May 25 03:16:49 2027 GMT
        Subject: CN=16DC59AD04453570357790EFE9B7B21B079C1AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:41:40:76:8e:b9:39:08:07:94:83:09:e6:c2:
                    07:89:83:10:cd:a3:19:fb:b3:8d:e2:42:b1:bf:6c:
                    a8:ef:a8:2e:1b:ca:8e:90:e2:03:77:64:64:39:1b:
                    64:82:b1:41:66:d4:c9:9a:07:8d:38:b0:b2:27:de:
                    6f:49:f0:0e:b2:61:d6:03:b7:1f:cd:f2:2f:46:82:
                    64:21:b2:37:d1:0c:43:bd:f0:0c:73:48:1a:7f:d6:
                    0a:e5:05:b8:9d:73:84:c1:b2:59:15:f5:7e:cb:a0:
                    de:9d:17:ae:51:1c:be:1c:99:a0:89:6e:ec:16:5c:
                    af:55:93:93:8a:3a:44:85:6d:59:55:5b:50:a0:ff:
                    f0:01:01:58:2b:51:b8:67:d6:ac:14:89:29:28:e6:
                    a2:7c:93:e6:7d:c1:f8:ff:65:10:b8:e9:4e:5a:43:
                    af:1d:79:75:5e:52:88:01:09:7a:30:e2:e7:eb:4b:
                    f3:3d:44:ad:4b:b1:7d:74:e9:1c:db:f0:37:15:be:
                    7e:e5:85:03:ea:85:85:1f:83:41:fb:7c:c2:96:a3:
                    40:85:c9:f2:aa:a7:7d:4d:77:69:21:8f:dc:46:a7:
                    34:36:13:85:b3:2d:94:37:3a:24:bb:60:04:4e:a4:
                    6f:d9:f2:1d:1f:c7:b1:52:2b:8c:db:d4:8e:72:3d:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DC:59:AD:04:45:35:70:35:77:90:EF:E9:B7:B2:1B:07:9C:1A:F9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae02::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:ba:ab:06:26:5e:d1:bc:82:49:d4:48:66:97:ab:df:2a:11:
         1f:33:9c:d0:c7:f0:d9:a7:10:98:68:ed:41:76:71:79:48:36:
         ef:3b:8b:44:6d:ff:79:8a:5a:eb:14:2d:ef:d5:a1:10:6e:99:
         5a:f1:71:71:ac:d4:50:80:ea:22:4f:6a:70:89:dc:d5:df:be:
         9a:c0:09:58:a6:aa:8d:dd:94:0a:89:7c:77:ee:4a:19:b6:c2:
         ec:bf:5f:e9:1b:93:c5:09:0e:55:d4:3d:d5:ec:8d:8b:ee:06:
         17:09:26:ff:64:d2:dd:d4:96:18:3e:7a:e5:43:ed:d8:93:c6:
         de:24:52:bf:c0:11:9e:ec:cd:60:4e:9a:50:f4:8d:5a:d7:10:
         ca:b6:1f:83:a8:3a:37:e5:d6:d0:75:11:5c:53:fe:37:fc:f1:
         19:31:dd:2e:5c:10:b9:81:90:65:61:5e:d2:fb:c5:5b:ea:f9:
         b5:59:69:67:96:32:17:6f:f4:7b:68:19:da:66:44:d5:7c:54:
         41:be:ec:3a:cf:72:dd:86:46:84:1d:75:3c:8d:1e:cb:ae:d3:
         1f:86:15:12:74:3a:09:5a:1b:27:92:8a:d1:89:ef:37:17:13:
         93:df:e2:b1:77:01:3b:66:00:8a:36:e7:5a:3f:44:80:83:19:
         bc:21:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:33 2026 by rpki-client