Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146269.roa
File:                     AS146269.roa (raw, json)
Hash identifier:          EgRh8o8iyvGxRbOpxh/IA+PdfOWBYXRNp7KMvr//Ffw=
Subject key identifier:   16:AF:2C:4D:C5:85:C3:3E:2A:41:23:22:13:6D:E5:2F:7D:6F:2A:06
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       17A42D8EE59671F3B80E45F5E26724ACB054F810
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146269.roa
Signing time:             Tue 26 May 2026 06:12:25 +0000
ROA not before:           Tue 26 May 2026 06:07:25 +0000
ROA not after:            Tue 25 May 2027 06:12:25 +0000
asID:                     146269
IP address blocks:        240a:ae23::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a4:2d:8e:e5:96:71:f3:b8:0e:45:f5:e2:67:24:ac:b0:54:f8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:25 2026 GMT
            Not After : May 25 06:12:25 2027 GMT
        Subject: CN=16AF2C4DC585C33E2A412322136DE52F7D6F2A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:c1:d9:67:4d:f2:a0:cd:da:d0:d4:e5:cc:
                    2e:db:a4:16:b4:f0:af:33:9f:b0:67:5e:6b:d2:a5:
                    92:b4:7a:c1:47:2a:c1:60:9e:c9:d6:aa:ce:3b:10:
                    de:a9:3b:14:bd:ab:83:c4:74:0e:ad:cb:61:32:64:
                    4a:b5:26:6a:16:d0:f4:64:8c:7e:54:f4:77:77:39:
                    d5:c8:23:cb:2f:43:c0:33:25:a4:e4:98:ed:83:2d:
                    cc:dc:3c:08:92:2a:ab:2c:27:41:8e:c5:bf:fc:f9:
                    98:6c:da:e6:a8:a9:c8:cc:e0:3b:50:f3:ad:e7:f0:
                    e1:5c:fa:33:3d:9b:27:28:f0:77:73:c8:1c:d7:d3:
                    d6:4d:ef:c9:1f:ba:22:7c:f1:f4:ee:cf:33:4f:1d:
                    98:81:ff:ea:4d:e6:a6:e7:f0:c3:92:cd:12:e6:bf:
                    43:bd:39:fa:12:87:6d:4e:88:bd:73:6d:47:38:1e:
                    24:5f:55:41:69:7b:c6:26:e1:8c:fc:ad:bb:bd:65:
                    81:44:4c:4a:bc:14:4b:79:b5:a4:76:c5:00:d8:2e:
                    fb:e6:8d:53:14:79:9b:f7:0c:0b:f8:30:8a:79:0a:
                    73:ed:81:c7:1d:49:5a:b0:3e:1d:c9:04:fb:2b:fc:
                    93:18:72:d0:a4:78:80:22:7c:bd:6a:78:37:c4:67:
                    99:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AF:2C:4D:C5:85:C3:3E:2A:41:23:22:13:6D:E5:2F:7D:6F:2A:06
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146269.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae23::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:6c:25:5f:20:4a:da:71:ef:3b:e1:a1:c2:24:84:1c:5b:c0:
         da:41:49:77:ec:87:91:52:49:21:cf:15:d0:94:2f:e0:b6:17:
         ec:6c:49:2c:cd:ff:50:65:49:c4:af:38:56:a9:79:d5:ef:4e:
         cf:5e:92:db:c2:a5:14:26:12:12:42:27:32:20:0e:d3:4e:ef:
         e6:cd:3e:2b:f7:ae:3f:93:40:1e:27:a3:2c:1c:0a:36:36:0a:
         74:d1:71:93:76:eb:aa:0e:d7:87:a0:c9:66:c6:04:07:bc:b3:
         18:1a:59:ce:ca:d6:7c:66:c8:7c:8b:09:fb:13:3f:f9:96:59:
         00:19:06:09:4d:55:9d:2a:aa:d3:2b:60:2a:aa:1c:40:a7:6c:
         c8:17:7b:54:21:79:9a:d0:59:d8:fb:76:04:67:dd:af:44:d7:
         03:71:ce:8f:d4:00:c6:56:d7:41:6f:f8:60:bf:34:bd:cc:2e:
         1c:af:fb:53:cd:7a:27:09:5e:5d:b6:ca:4e:b4:78:a6:af:48:
         f5:1b:3b:5f:2a:80:85:5c:80:f0:8e:2b:c7:bc:52:36:c4:a1:
         19:08:cd:79:38:98:17:27:d4:44:10:22:0d:7e:cf:93:c5:5c:
         fc:11:73:b4:77:89:95:3e:fe:5c:c2:d0:30:00:c0:05:52:b2:
         dd:9f:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:08 2026 by rpki-client