Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146285.roa
File:                     AS146285.roa (raw, json)
Hash identifier:          SaOXLzm+0zATT1UNoAodmDwFWGcDSBpYgLTseFdHOxo=
Subject key identifier:   77:3D:6C:65:A7:11:90:85:0A:59:D5:BD:8D:0D:3D:ED:10:EA:F3:CC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4264A4F70D4B705F4C6F817DDF8BB37EE8D0E4AB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146285.roa
Signing time:             Tue 26 May 2026 03:17:15 +0000
ROA not before:           Tue 26 May 2026 03:12:15 +0000
ROA not after:            Tue 25 May 2027 03:17:15 +0000
asID:                     146285
IP address blocks:        240a:ae33::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:64:a4:f7:0d:4b:70:5f:4c:6f:81:7d:df:8b:b3:7e:e8:d0:e4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:15 2026 GMT
            Not After : May 25 03:17:15 2027 GMT
        Subject: CN=773D6C65A71190850A59D5BD8D0D3DED10EAF3CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:72:f7:c3:99:69:b9:c8:33:0d:54:42:55:
                    d4:ee:23:5e:9a:a1:bc:09:ba:6e:7e:4c:3a:5b:6d:
                    1f:3a:cb:3c:f5:24:fd:28:76:30:0e:0e:1a:60:59:
                    cf:04:1d:17:25:38:2e:07:0a:1a:2e:d1:d4:ed:ce:
                    35:0a:de:f8:8f:23:c8:bd:fc:ea:c8:9f:cb:55:92:
                    88:b1:58:de:e7:91:3c:70:3e:09:be:3d:65:03:90:
                    d7:13:93:fd:02:21:84:ea:79:f4:a0:43:70:1d:69:
                    55:75:e6:37:94:6e:59:27:e7:2c:2b:8a:0c:7e:d9:
                    95:45:86:19:c5:e6:f4:38:a5:6c:dd:2e:02:80:31:
                    6d:4d:22:1a:1d:4c:02:9f:54:35:1a:53:5a:ac:63:
                    20:b4:1e:b9:d1:b1:70:98:9c:bb:68:a5:65:25:56:
                    69:dd:1c:69:3d:34:21:59:54:94:11:13:eb:ac:82:
                    02:0e:89:16:73:8d:55:dd:c7:26:d8:94:10:d2:60:
                    00:95:c8:d9:3b:eb:75:86:0f:a8:9b:17:61:d3:fe:
                    e9:ac:82:84:9c:e9:f5:7b:dd:a3:e0:cd:54:f0:ff:
                    3c:3a:b0:00:8a:fa:85:bf:cd:e7:30:f7:b4:23:b2:
                    b4:58:ed:fe:ab:a0:a3:68:5c:7e:79:58:83:4b:b4:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3D:6C:65:A7:11:90:85:0A:59:D5:BD:8D:0D:3D:ED:10:EA:F3:CC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146285.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae33::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:44:c5:ce:08:f4:bf:8d:a1:9d:b2:c3:e3:a4:63:0f:c9:91:
         e4:05:6b:f8:d4:6f:40:79:8a:0c:95:99:56:80:a4:da:1c:e1:
         e3:27:59:09:1c:61:78:42:2d:83:25:24:53:d2:f9:cd:b2:a5:
         f1:2d:0e:c0:60:be:46:16:22:e2:e2:9f:5a:5d:91:4c:6b:b8:
         93:c1:dc:53:ad:3c:35:8a:24:ea:df:54:64:c6:70:fa:9f:7d:
         9e:64:7b:c3:5a:fc:0a:50:05:b9:02:7e:04:05:c0:51:86:1a:
         a6:e7:ac:74:cf:b7:37:de:0b:a0:2a:47:07:22:e3:bb:c9:a6:
         77:3d:ed:2a:73:47:c0:2f:41:88:b5:13:12:8a:05:f8:cd:2f:
         d0:95:1f:a0:c1:89:f0:47:02:61:3a:a3:e5:1b:a0:87:60:55:
         ca:02:29:7b:e1:41:a0:08:fc:30:ff:70:fe:5b:5b:d5:02:b3:
         e9:7d:de:c0:8c:a7:9c:23:83:cb:ea:2a:06:fe:b7:29:ab:48:
         f3:df:44:1c:b3:58:8e:99:88:93:be:7c:bf:8c:0c:f6:49:b5:
         62:27:4e:43:4c:34:25:42:c8:44:5d:8a:16:94:a7:9b:6b:37:
         5c:6f:07:17:9b:5a:13:d0:8a:e1:83:ef:9b:65:69:38:a3:e2:
         fc:e4:09:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:30 2026 by rpki-client