Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146292.roa
File:                     AS146292.roa (raw, json)
Hash identifier:          jBxGsq+MWIIb2nnnGGz/BicFm6+e7RbEfzUeLbgGCbg=
Subject key identifier:   0A:E4:49:E1:50:3A:A7:5B:86:71:AB:AE:DE:DA:E2:D1:D3:AD:9E:C7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       385F88FAF9CE1F0B9FB978838FE324F3E34D95DF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146292.roa
Signing time:             Mon 25 May 2026 01:20:07 +0000
ROA not before:           Mon 25 May 2026 01:15:07 +0000
ROA not after:            Mon 24 May 2027 01:20:07 +0000
asID:                     146292
IP address blocks:        240a:ae3a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5f:88:fa:f9:ce:1f:0b:9f:b9:78:83:8f:e3:24:f3:e3:4d:95:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:07 2026 GMT
            Not After : May 24 01:20:07 2027 GMT
        Subject: CN=0AE449E1503AA75B8671ABAEDEDAE2D1D3AD9EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c0:7d:19:6b:05:f9:61:11:9c:02:cd:ba:0c:
                    eb:af:ba:45:48:2f:8c:33:65:4a:1d:cb:54:04:97:
                    0a:04:cc:9d:8d:13:bc:14:d5:18:c2:fd:96:5a:a3:
                    be:8e:2e:9e:38:94:e0:db:d4:c9:fe:a3:ef:0c:32:
                    19:0a:e8:64:d0:38:19:b1:58:38:3b:76:fd:e0:ef:
                    0c:5a:8c:70:91:8c:78:98:1e:d5:7f:22:57:1b:1d:
                    de:7b:99:ee:be:3b:ff:59:aa:74:4f:43:c3:4c:12:
                    15:9b:65:70:1f:5b:73:b8:cb:51:9d:c2:a5:92:8a:
                    f9:33:da:f5:e1:53:ca:6a:87:d2:00:78:df:52:9d:
                    eb:98:3b:50:22:b7:1a:a9:10:cb:b4:b4:f9:be:1c:
                    28:46:07:db:b7:92:87:67:58:60:e7:88:f8:fd:30:
                    07:dc:50:6f:e5:b1:4c:d6:ae:32:6b:78:5e:7e:76:
                    e1:14:0d:75:c8:d0:5e:ac:bb:d5:06:f8:6d:38:c2:
                    61:ed:08:d1:28:75:50:eb:5b:15:78:de:f7:c9:e8:
                    24:e4:9b:44:43:40:0c:5a:41:17:79:f4:d4:06:78:
                    a1:fd:a5:96:23:88:bc:ff:01:9a:bb:d4:88:e9:12:
                    72:f8:3d:c0:3e:a7:69:0b:5a:59:3a:a3:15:7e:9d:
                    e6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E4:49:E1:50:3A:A7:5B:86:71:AB:AE:DE:DA:E2:D1:D3:AD:9E:C7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146292.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae3a::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:d0:07:66:8b:57:e0:8b:0b:a1:d0:22:f4:59:c2:59:f1:75:
         11:cd:ae:65:02:c0:e5:a3:1f:95:fd:49:f6:8b:1d:92:c2:f2:
         a3:3c:25:5f:dd:28:27:b5:82:5b:46:14:d4:8a:04:00:ff:45:
         af:e0:15:cc:71:d4:98:71:33:67:9c:3f:88:33:d4:9a:34:70:
         75:21:50:9e:2b:b7:6d:6d:9b:38:8f:85:b4:18:91:d4:f7:7a:
         aa:59:c7:e1:42:82:d7:bb:e3:b0:38:0e:12:82:45:18:57:96:
         58:27:bb:00:f1:44:88:41:cf:6a:26:83:3f:96:7e:ac:15:b8:
         ca:80:92:3f:ac:5e:8e:ba:16:7c:6f:33:2a:f0:52:3e:5a:1f:
         d6:cb:30:d3:72:98:d3:64:bd:c7:46:96:bb:74:13:8a:81:59:
         95:ab:9d:58:29:34:a2:ab:a1:cf:23:f9:e8:fc:e3:de:3a:43:
         78:16:47:ad:21:d6:46:b1:c8:93:5d:0d:cd:8c:34:a9:41:e1:
         87:c2:f2:6e:ef:8a:7c:b4:3a:9d:27:03:df:f2:c4:d4:ec:60:
         f3:c4:fa:66:a2:29:49:fb:bf:3a:3a:b0:6c:3a:df:17:3a:a4:
         95:23:be:3c:de:22:8e:55:fd:91:0e:ed:2f:f2:8d:b4:0e:67:
         59:45:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:32 2026 by rpki-client