Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146320.roa
File:                     AS146320.roa (raw, json)
Hash identifier:          DsCyr3aP3VaCbVX4RbUI79Ch8lSnyNOUaMtPOhatS2w=
Subject key identifier:   0E:81:BF:14:6F:ED:60:C8:55:C3:0C:75:5F:B5:1B:A5:6A:54:2F:E6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4D655083D5C6E3663EAE56A40063AE2D8F0D88B9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146320.roa
Signing time:             Fri 22 May 2026 06:05:27 +0000
ROA not before:           Fri 22 May 2026 06:00:27 +0000
ROA not after:            Fri 21 May 2027 06:05:27 +0000
asID:                     146320
IP address blocks:        240a:ae56::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:65:50:83:d5:c6:e3:66:3e:ae:56:a4:00:63:ae:2d:8f:0d:88:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:27 2026 GMT
            Not After : May 21 06:05:27 2027 GMT
        Subject: CN=0E81BF146FED60C855C30C755FB51BA56A542FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:9f:74:67:c1:5e:a9:86:92:cc:0d:f0:dd:
                    34:57:98:28:94:1f:cc:4a:3f:07:3d:bc:36:7f:bd:
                    95:67:e6:b0:1c:be:c1:df:0f:65:1f:db:18:ae:8a:
                    21:e4:f9:cc:3d:38:f8:8b:7d:ce:a8:bf:00:f4:a2:
                    03:ed:d8:f2:7b:87:a9:bb:07:ad:84:2e:9e:7e:05:
                    b2:d1:f8:09:d1:b1:e7:af:ab:cc:4b:78:31:06:bb:
                    16:42:66:15:48:5a:07:eb:53:d8:70:98:2d:22:2b:
                    5c:c7:ac:cf:9f:cf:ef:67:d6:6e:40:c1:90:ea:51:
                    a8:98:8e:6e:3a:34:3b:5f:ac:14:fe:6c:41:cf:6b:
                    2e:18:33:fb:b3:90:60:a7:2a:e5:d9:a4:81:18:3d:
                    07:8b:d8:c7:c7:f0:9b:c9:f9:b7:1a:83:3f:5b:c0:
                    94:ab:69:8f:e3:a3:64:b8:49:fe:ae:c9:6c:7e:41:
                    52:b6:ea:a4:50:47:af:a2:8b:a5:ae:84:8b:dc:96:
                    60:1f:fb:a1:47:d3:ff:d5:14:6b:1d:6d:f9:7d:69:
                    7d:19:3c:1a:e7:a8:35:06:b0:72:28:bf:52:bb:6e:
                    2e:a9:9e:d5:01:0b:d6:2a:6e:fa:54:f4:e4:68:5f:
                    77:6c:cd:8b:86:51:8c:b8:55:9b:2e:eb:9e:46:07:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:81:BF:14:6F:ED:60:C8:55:C3:0C:75:5F:B5:1B:A5:6A:54:2F:E6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146320.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae56::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:42:93:35:26:82:d7:87:db:8e:81:be:19:84:2c:a7:85:22:
         73:ed:2a:6b:a2:23:a7:54:3c:6f:13:5e:df:7b:42:04:7c:e9:
         b9:9f:b7:4a:39:99:56:e6:ca:31:4d:1a:1c:97:7e:d4:d7:71:
         c0:2c:95:af:fb:b4:b4:b0:31:64:38:0f:bf:ab:74:66:c8:b7:
         fb:e5:4d:32:6d:90:b1:e3:9e:00:26:c8:5f:09:54:db:53:21:
         1c:5e:dd:d5:4c:96:d3:05:9e:97:9c:58:02:2c:32:64:d8:4d:
         1c:ec:65:d1:7e:0b:21:59:39:53:d0:e5:09:8e:69:88:7f:8f:
         9b:0a:9b:6b:63:22:0d:36:e9:d8:6a:66:db:3f:ba:23:10:8b:
         f9:69:a5:6c:df:c4:03:df:89:9c:5e:c6:38:1a:8b:84:a8:de:
         b2:82:b1:bb:ba:92:ca:69:60:df:ee:0a:96:f4:fd:a6:39:62:
         e1:bc:c3:0a:bb:f7:cc:f6:97:56:53:12:06:76:7e:a6:d0:2e:
         b9:37:02:5c:84:09:77:3b:df:88:ad:79:50:ad:f1:d3:1d:15:
         3d:bd:00:d3:5d:51:0f:54:4b:6d:3d:f5:06:4d:23:3e:dc:20:
         0a:d3:f9:e3:c7:98:b0:9e:ce:40:b8:e7:a5:d2:2f:f9:7e:51:
         5d:5d:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:30 2026 by rpki-client