Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146273.roa
File:                     AS146273.roa (raw, json)
Hash identifier:          J43NWDlEOFQojikqKx2WVYXKGs1QpMa4MCg1bSPln/U=
Subject key identifier:   58:D9:15:32:CF:3A:C5:9F:F7:7B:34:E9:48:33:BB:B7:98:E7:8F:C6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0B70B847434CF6B0332DBD55EC10E6DD916E9C5D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146273.roa
Signing time:             Mon 25 May 2026 01:38:39 +0000
ROA not before:           Mon 25 May 2026 01:33:39 +0000
ROA not after:            Mon 24 May 2027 01:38:39 +0000
asID:                     146273
IP address blocks:        240a:ae27::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:70:b8:47:43:4c:f6:b0:33:2d:bd:55:ec:10:e6:dd:91:6e:9c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:39 2026 GMT
            Not After : May 24 01:38:39 2027 GMT
        Subject: CN=58D91532CF3AC59FF77B34E94833BBB798E78FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:0f:c4:d2:35:20:ef:3b:92:70:69:7b:01:
                    21:54:63:a4:26:8e:5f:27:31:e9:0e:38:05:99:e2:
                    2e:3f:56:89:51:4a:52:93:71:56:4e:dd:de:48:8a:
                    16:4a:2b:e2:15:46:c5:46:44:c4:ac:3a:06:39:db:
                    ca:d5:4f:86:76:f2:1c:cb:2e:cd:05:37:c4:b9:dd:
                    99:21:6a:7b:3b:c3:c3:3e:a4:5a:63:32:07:00:91:
                    7b:a7:ab:3d:0d:c6:5a:ae:f4:d0:ee:4a:b8:cc:4f:
                    df:79:ff:7f:8a:c3:37:92:8a:35:8b:b9:81:6f:73:
                    2e:84:74:43:e9:e8:48:86:93:26:13:fc:fa:86:b8:
                    c8:46:64:4f:6f:97:dd:1c:6b:48:54:53:88:a5:d9:
                    c9:10:ff:72:55:88:b6:aa:f0:7a:65:c1:1b:af:3e:
                    d2:b5:5a:ca:c9:b3:99:3b:33:1e:57:56:26:45:f2:
                    84:40:78:a0:58:33:6b:6f:13:f8:6f:a9:38:96:a5:
                    25:8a:3d:f6:f8:97:1a:44:7c:a9:8b:01:64:0e:33:
                    61:41:43:57:b2:95:b2:45:31:f3:ba:0c:a5:77:27:
                    3c:b7:13:65:07:67:bf:c2:6b:33:55:3a:1a:60:19:
                    c3:7c:20:79:98:9a:44:01:d2:c6:42:fb:0b:0e:83:
                    b8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D9:15:32:CF:3A:C5:9F:F7:7B:34:E9:48:33:BB:B7:98:E7:8F:C6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146273.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae27::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:3c:c7:43:7a:2a:3c:f1:86:cf:bc:a1:89:3a:df:db:5a:0b:
         13:6c:f4:9c:08:b8:4c:42:32:bf:c6:be:63:21:57:ea:ae:38:
         32:03:59:2d:0c:40:c8:fc:ca:1d:5a:9c:a2:62:fa:8b:c5:dd:
         63:4f:96:ff:d0:25:3f:cb:57:9f:87:b8:5b:50:b2:3f:6a:9a:
         d4:7c:f7:fe:11:5d:40:79:e8:b1:e1:f7:a9:7e:55:01:06:47:
         20:11:41:4b:58:e7:ac:2e:2e:50:56:d0:29:69:00:4b:2b:60:
         5a:a7:56:2d:92:87:5b:06:da:82:25:63:98:53:4b:23:c3:0d:
         07:aa:72:de:d5:fc:3e:68:dc:d7:24:56:83:fe:31:4f:27:2f:
         eb:8e:e8:f2:a1:e4:71:ac:cc:2f:a5:f2:5d:05:32:8d:49:b3:
         8b:b7:db:14:56:12:4d:bd:6d:62:64:2b:95:ae:a2:43:e5:40:
         3d:2e:1a:4a:f7:93:aa:04:5e:17:3f:b6:a8:bf:c8:69:59:3e:
         16:88:9b:1a:a1:11:3d:db:2c:bd:e0:7f:b5:d6:3e:a4:8f:42:
         0d:d9:36:70:a2:85:e2:fb:1a:81:52:3a:3c:8d:44:bc:4a:23:
         c1:d8:f4:a6:37:b0:cc:c7:55:f3:6e:08:8e:26:9f:74:91:ca:
         1a:a2:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:16 2026 by rpki-client