Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146300.roa
File:                     AS146300.roa (raw, json)
Hash identifier:          ou1gOBbWnDAcabOa5cOUUDBxNlIgTuUg8INuYSWkfjQ=
Subject key identifier:   59:61:F4:49:1E:A8:BE:B4:7F:1D:97:8B:0A:B0:32:0E:FC:38:1A:45
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       701BE1293BD8BD393C06BF81E63519024B5980DF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146300.roa
Signing time:             Mon 25 May 2026 01:20:01 +0000
ROA not before:           Mon 25 May 2026 01:15:01 +0000
ROA not after:            Mon 24 May 2027 01:20:01 +0000
asID:                     146300
IP address blocks:        240a:ae42::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1b:e1:29:3b:d8:bd:39:3c:06:bf:81:e6:35:19:02:4b:59:80:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:01 2026 GMT
            Not After : May 24 01:20:01 2027 GMT
        Subject: CN=5961F4491EA8BEB47F1D978B0AB0320EFC381A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:b4:aa:c2:0d:42:e3:73:9a:15:41:df:11:
                    f8:0b:ec:4c:86:eb:fd:9f:8a:33:7e:44:7a:8c:76:
                    42:ee:67:f5:bf:d3:ec:f8:13:ab:3f:12:f9:b5:7d:
                    85:75:3b:34:33:e0:af:1a:d2:9b:8b:53:4b:ce:41:
                    15:e3:aa:66:0e:0c:ca:7c:39:b6:07:93:0c:ae:e5:
                    c7:15:fd:c6:c8:2c:87:aa:3a:5f:aa:6f:a5:11:98:
                    52:12:0b:eb:33:8f:84:d6:d9:8a:44:ef:c0:28:74:
                    5d:d9:ec:bf:2d:e8:5c:ec:da:33:db:94:c8:e3:25:
                    41:8d:96:38:f9:61:4d:b8:05:62:8e:a2:49:58:ee:
                    fe:67:8a:3d:06:19:c8:1b:2a:fb:94:b0:77:0b:62:
                    7d:4d:2f:59:da:7f:34:ff:69:c2:87:78:5f:e5:35:
                    0d:56:b3:5d:1a:0e:a8:2c:6c:bc:53:ed:85:26:f5:
                    2b:bd:12:40:89:2c:28:65:b6:94:ca:8b:77:5d:6a:
                    d5:0a:3e:e2:ae:5b:0c:fc:36:a6:58:f6:2e:ea:14:
                    66:24:9e:69:b0:27:ec:3f:41:77:bb:61:ec:fb:d7:
                    e1:ab:81:15:36:30:3d:5a:cf:f4:80:0b:72:29:e4:
                    e1:8e:e0:0b:5d:94:d1:cc:01:45:d5:40:8d:0a:92:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:61:F4:49:1E:A8:BE:B4:7F:1D:97:8B:0A:B0:32:0E:FC:38:1A:45
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146300.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae42::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:d4:93:ab:f7:01:18:b2:56:ea:9a:6d:f0:b3:f9:6e:82:45:
         cf:6c:97:fc:a6:31:31:9b:b5:23:9d:67:f0:94:3b:ea:80:04:
         f3:ec:1b:dd:17:f9:85:eb:e1:57:09:99:e7:87:e2:b9:e7:aa:
         e9:b9:70:61:d5:d1:8f:ff:36:c8:9b:21:96:df:a6:23:63:ae:
         3b:93:17:36:58:84:44:5e:15:b3:61:82:85:78:50:7d:f6:9a:
         17:91:84:11:8f:44:23:44:4c:d6:1a:8b:31:1c:97:39:2a:29:
         17:5f:4a:24:54:29:70:ac:d4:71:b2:d9:9e:47:d6:68:09:1f:
         f4:9f:e5:0c:63:3f:0c:5f:e4:0e:75:6c:d4:c7:a3:a6:1f:c4:
         60:00:89:b9:29:81:08:59:69:c5:10:99:b1:5f:d3:bf:55:97:
         2b:f6:b7:3a:a7:2a:3e:2e:ad:07:79:ad:02:a7:6a:a3:ed:c8:
         87:f0:0e:bf:19:d8:57:66:39:64:9b:2f:d2:73:09:8c:e2:69:
         5a:54:71:da:c6:99:28:58:26:6c:ca:4c:ce:98:c4:9d:22:6b:
         ad:48:57:f4:72:52:e5:3f:67:97:d6:b9:f7:e3:09:45:fc:3b:
         fc:d7:e1:27:d4:8d:d0:64:38:15:ac:7a:de:86:39:93:b2:33:
         d0:c0:2e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:50 2026 by rpki-client