Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146276.roa
File:                     AS146276.roa (raw, json)
Hash identifier:          1Z9pPtFe4sZkJeJm3KBRq2AZgWmETMFAiGM2jA8oIzM=
Subject key identifier:   CC:57:EC:8F:EF:4E:34:3A:DE:EC:22:3A:72:DF:B7:D4:8D:04:7D:3F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5A0B565FA1E7691E7D22C6FFE3BA60602EE9471C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146276.roa
Signing time:             Mon 25 May 2026 01:51:04 +0000
ROA not before:           Mon 25 May 2026 01:46:04 +0000
ROA not after:            Mon 24 May 2027 01:51:04 +0000
asID:                     146276
IP address blocks:        240a:ae2a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0b:56:5f:a1:e7:69:1e:7d:22:c6:ff:e3:ba:60:60:2e:e9:47:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:04 2026 GMT
            Not After : May 24 01:51:04 2027 GMT
        Subject: CN=CC57EC8FEF4E343ADEEC223A72DFB7D48D047D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:5d:06:c7:d7:73:4a:a2:e4:82:c4:5f:71:
                    be:a7:a1:b5:7a:92:fc:85:b1:f2:0a:c0:e0:c6:84:
                    f6:90:14:65:8c:e4:4c:7f:f5:98:f0:71:dc:e9:12:
                    3c:e3:13:ad:ed:8b:e7:5c:0e:2b:60:cb:35:0d:21:
                    61:d4:1b:3d:fb:38:05:ab:4b:88:8b:f8:b2:eb:16:
                    88:f6:fd:c6:c3:70:e7:4a:63:d5:4c:4f:1c:8c:1e:
                    1b:b5:74:86:d9:25:0c:c1:6a:62:05:c4:ef:cf:79:
                    3a:d1:64:95:3d:f5:3b:94:08:3f:13:fd:c2:ea:1e:
                    32:bd:ef:87:f9:41:db:4d:21:eb:1f:c3:51:55:a4:
                    bd:01:df:67:e0:30:69:d0:e0:c1:d3:7e:cc:6a:d4:
                    70:4f:9b:af:33:ba:97:f4:67:1b:31:5e:75:aa:f5:
                    b0:bf:16:bd:e9:12:07:1d:10:bf:67:58:90:81:cf:
                    3f:97:a5:7f:7b:c4:fe:e4:86:55:bd:53:30:3e:c9:
                    54:be:a9:c0:95:3b:00:22:74:e1:20:4a:9f:9a:82:
                    99:52:52:34:55:59:34:55:ec:1b:6b:ca:2a:77:0e:
                    9e:a7:03:13:26:8a:5e:ed:9d:33:67:ca:13:79:b2:
                    57:88:62:16:f5:d4:7e:0b:0f:d9:94:6f:90:72:3b:
                    d1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:57:EC:8F:EF:4E:34:3A:DE:EC:22:3A:72:DF:B7:D4:8D:04:7D:3F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae2a::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:1f:f5:86:3b:02:ad:3d:ee:f4:da:f4:74:ba:7a:b0:c6:d5:
         b3:51:f2:c7:24:69:32:d9:19:d2:02:0c:1f:71:38:74:77:e3:
         8d:ac:7a:83:d6:8c:8f:a8:1b:e7:77:96:20:47:b8:1d:a4:b6:
         9c:fa:29:ef:db:0b:3e:b1:14:76:f0:71:55:1a:51:f5:eb:61:
         07:e0:12:d7:55:9d:0a:b5:18:8d:ee:1d:90:87:7e:4e:55:27:
         c8:39:21:d7:1c:6a:00:29:56:3b:c8:bf:d7:e3:1e:3d:ab:2a:
         2c:2f:cb:6f:91:9b:6e:f8:d7:72:7b:91:2d:66:a5:b2:91:05:
         f4:a8:6d:8a:b9:3d:74:54:ec:68:13:c3:30:e6:ad:18:bf:b2:
         21:32:53:1a:d1:89:08:74:be:4f:5b:ce:bf:b7:89:cd:91:51:
         ed:a5:22:53:09:94:68:a3:d1:61:33:ff:28:26:d0:6b:bc:cc:
         ab:44:16:fb:4b:18:7d:90:5e:c3:8b:53:47:42:80:6f:bc:2c:
         a0:5c:37:49:d3:d0:a1:f3:24:24:da:58:7c:3a:7f:13:ce:93:
         2a:e7:ab:14:13:d6:91:1c:85:26:d6:38:f1:c7:e6:5f:b6:e4:
         cc:17:d4:82:84:13:7a:7b:95:a6:21:e9:9f:50:9b:a1:eb:a7:
         b3:ad:68:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:44 2026 by rpki-client