Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146378.roa
File:                     AS146378.roa (raw, json)
Hash identifier:          zdXw25U5+9DKkpTVe2vgTT5ENnBCvKgl0ra4tEHcj2s=
Subject key identifier:   26:54:44:05:DA:DC:F5:AD:4F:A8:7E:D8:74:5C:DD:6C:A4:01:89:F9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       58695B09EE121B3F3E6CA4BAD017A7144C5D09F1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146378.roa
Signing time:             Fri 22 May 2026 07:40:51 +0000
ROA not before:           Fri 22 May 2026 07:35:51 +0000
ROA not after:            Fri 21 May 2027 07:40:51 +0000
asID:                     146378
IP address blocks:        240a:ae90::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:69:5b:09:ee:12:1b:3f:3e:6c:a4:ba:d0:17:a7:14:4c:5d:09:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:51 2026 GMT
            Not After : May 21 07:40:51 2027 GMT
        Subject: CN=26544405DADCF5AD4FA87ED8745CDD6CA40189F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:ea:a3:86:4a:00:c6:63:d5:f7:4c:97:c6:
                    63:87:79:d1:63:10:89:e9:10:17:e0:e4:10:a5:87:
                    27:33:a7:6a:90:ca:b1:84:88:61:72:4e:d0:ca:a8:
                    5a:ec:69:5a:11:67:3c:ee:22:e2:59:5f:9e:c5:6d:
                    2d:08:9a:3e:ae:ba:03:33:7d:54:23:54:96:d8:6a:
                    7f:eb:11:09:36:80:10:07:5e:ac:c0:20:c4:c0:7e:
                    23:15:39:fe:f5:a7:87:a0:d5:6d:90:94:7d:4e:09:
                    d9:17:df:13:69:b3:db:f8:f1:ea:2f:ce:34:74:7c:
                    1f:66:e6:65:19:59:1d:6c:66:85:47:75:ab:72:95:
                    be:d0:61:15:ce:5b:62:aa:39:70:66:63:47:d8:95:
                    07:60:44:34:15:ad:d8:2e:6d:62:ef:0c:37:8a:94:
                    46:96:f0:69:36:e4:ee:4e:33:eb:ce:35:b1:18:75:
                    04:57:41:eb:d4:75:3f:6a:62:d4:42:87:94:53:df:
                    93:83:56:eb:b0:2d:9d:7d:6d:96:f2:e4:a2:00:5c:
                    20:03:10:d0:05:8e:1c:80:2a:8b:e4:e5:80:b9:f5:
                    e4:e7:5a:97:49:cf:cc:ad:c6:40:ef:9f:fd:46:c3:
                    3d:8b:ad:89:e9:5d:61:97:b2:5d:3c:3f:57:18:eb:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:54:44:05:DA:DC:F5:AD:4F:A8:7E:D8:74:5C:DD:6C:A4:01:89:F9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146378.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae90::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:5d:4a:0d:9e:2b:68:06:8c:c6:f5:8b:bc:32:20:a1:7c:
         09:4e:f8:60:3a:10:a4:97:14:c7:39:38:dd:f3:8b:7d:c0:4c:
         4f:47:f9:2b:ef:cc:ab:d4:c9:c2:6c:e6:68:51:60:12:29:2f:
         97:3f:ed:04:7b:ce:7f:e0:58:66:37:a5:56:61:f4:d1:9b:47:
         d9:cb:fa:74:2e:a5:4a:c6:e8:40:53:b4:9e:9b:2b:d5:72:17:
         2f:54:ad:ea:38:36:cc:0b:54:5e:ff:a6:05:fc:3c:8f:8f:e2:
         1f:e6:9d:5e:a9:2c:b4:f1:8f:6f:01:aa:2c:1e:f5:df:9b:86:
         97:ff:30:85:cd:39:94:d3:78:f4:8c:cc:52:ee:8f:f5:07:e9:
         ae:0b:be:53:4c:86:f9:b4:49:a6:cc:f4:a3:e5:1d:ee:d3:b2:
         d2:c7:bd:e2:81:60:c0:2b:6c:95:dc:28:0a:ee:f3:1f:e5:67:
         b4:c2:5e:8d:d7:83:23:89:a1:5b:fc:bd:35:7a:0d:12:fc:8b:
         44:d1:8c:15:cd:bf:61:dc:9c:cb:13:bb:ba:e9:17:0c:66:c7:
         09:df:3d:d2:1d:4f:e8:5a:1a:56:37:5b:50:16:77:0c:cf:b3:
         54:a9:49:ea:f0:fc:35:c2:21:18:7a:65:e2:a7:c7:bc:37:2b:
         06:7e:b2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:16 2026 by rpki-client