Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146316.roa
File:                     AS146316.roa (raw, json)
Hash identifier:          TUZWj7Dl//NwIDf/eZCT0s4NG4bbmzIUWwGkEwIGUdc=
Subject key identifier:   54:13:BD:EF:CF:2D:23:E8:16:59:3D:00:3E:54:65:5E:C7:93:68:89
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3772C18E3E2E9422B1B1FAD857142B95963BE4A3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146316.roa
Signing time:             Fri 22 May 2026 07:32:34 +0000
ROA not before:           Fri 22 May 2026 07:27:34 +0000
ROA not after:            Fri 21 May 2027 07:32:34 +0000
asID:                     146316
IP address blocks:        240a:ae52::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:72:c1:8e:3e:2e:94:22:b1:b1:fa:d8:57:14:2b:95:96:3b:e4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:34 2026 GMT
            Not After : May 21 07:32:34 2027 GMT
        Subject: CN=5413BDEFCF2D23E816593D003E54655EC7936889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:10:52:8a:c1:31:1a:64:ce:6c:d2:72:f4:45:
                    bd:a5:34:0f:29:2b:b2:26:6e:79:c2:46:ef:69:3f:
                    e2:b7:94:16:37:e5:7c:d0:79:99:13:ed:46:39:bb:
                    da:c3:b7:9e:4c:fc:91:16:ca:b9:78:c8:d4:78:8c:
                    69:4f:0c:1f:ab:56:df:90:bd:ca:be:99:17:68:97:
                    3d:c1:3d:55:0b:32:f5:6c:b6:e7:3b:7c:3d:eb:e3:
                    44:7c:0f:20:96:f8:6b:11:79:41:c9:cc:0d:8e:7f:
                    9a:54:05:07:8a:90:cc:ad:d4:dc:3e:d1:25:71:9f:
                    04:89:91:a5:32:c0:ec:b1:fb:f4:74:c9:8c:d8:db:
                    99:61:a5:1d:bc:73:89:2a:c3:19:31:b7:ba:ec:dd:
                    73:d5:81:76:b6:1c:cf:23:01:13:c5:0d:41:89:5b:
                    43:85:49:75:66:1c:d6:b3:ca:62:11:8a:2b:e8:69:
                    ee:fc:94:15:95:93:2f:bf:8e:07:1e:23:8e:2a:89:
                    a4:9a:6f:38:94:95:8d:d5:7d:22:a1:93:0b:53:a3:
                    e9:51:85:d3:dc:66:43:4f:9d:76:29:b7:f0:f8:00:
                    96:a3:05:63:f7:b6:80:13:94:ba:ff:cc:a6:7e:85:
                    e1:73:11:6d:69:f3:dd:95:c5:14:de:68:0d:df:29:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:13:BD:EF:CF:2D:23:E8:16:59:3D:00:3E:54:65:5E:C7:93:68:89
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146316.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae52::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:8c:aa:ba:cd:67:80:bb:7b:11:cb:f3:41:e7:9e:d2:a9:ab:
         30:da:d9:53:a2:e4:e5:93:61:96:b6:07:bc:24:f9:ca:9d:50:
         d4:69:e6:9d:a2:18:51:5a:66:42:26:14:2c:63:08:d8:e3:15:
         62:49:12:ae:43:5b:4c:fd:7a:e1:2f:b5:03:03:58:e0:89:d2:
         00:94:59:68:34:ec:21:cf:86:96:20:ef:18:d9:d3:d7:f5:a5:
         3a:73:54:03:9a:05:06:3f:c2:1e:c5:de:41:73:c1:0d:d1:9d:
         7b:29:b6:41:83:4c:95:d4:6c:8e:8c:5d:4c:a2:a9:9a:d3:34:
         03:64:c2:6f:f4:cf:7c:9d:26:17:f1:3a:8a:d3:9b:6b:4f:af:
         19:a8:ff:a0:2b:39:60:4d:23:5c:8d:c1:f3:79:7c:9e:49:cb:
         8a:c2:2a:58:fe:05:ce:c1:28:10:e3:0c:12:ef:a3:f6:b4:2d:
         4a:f8:2e:ed:65:b3:03:86:66:83:3a:3f:7b:2a:a6:3b:38:25:
         3b:10:01:5a:8a:68:e6:c6:55:2e:f6:d1:de:57:dd:c0:39:23:
         80:3e:8c:0a:00:7f:7f:df:24:73:3a:09:24:de:69:4b:5a:18:
         79:92:a0:fb:32:b0:62:bd:7a:6a:5a:02:77:17:38:0a:ff:4c:
         e6:6c:e6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:07 2026 by rpki-client