Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146408.roa
File:                     AS146408.roa (raw, json)
Hash identifier:          x8C2skvDGx/CP/dGvWIwZpFNznnLuiCYWngE2rY6XG0=
Subject key identifier:   05:A9:20:42:9B:8D:12:34:D4:BB:A4:C0:78:B5:E3:EA:69:76:A0:FC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       52CEB0169951CF36F4F80F14E6A06E17C387A29F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146408.roa
Signing time:             Fri 22 May 2026 02:47:51 +0000
ROA not before:           Fri 22 May 2026 02:42:51 +0000
ROA not after:            Fri 21 May 2027 02:47:51 +0000
asID:                     146408
IP address blocks:        240a:aeae::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ce:b0:16:99:51:cf:36:f4:f8:0f:14:e6:a0:6e:17:c3:87:a2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:51 2026 GMT
            Not After : May 21 02:47:51 2027 GMT
        Subject: CN=05A920429B8D1234D4BBA4C078B5E3EA6976A0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:29:71:41:2d:ae:8c:9d:5a:6d:48:09:52:
                    3c:b5:f3:4e:11:cd:20:37:02:8f:55:27:e4:21:13:
                    98:62:ee:b6:ea:39:30:c9:75:34:12:3a:e3:62:29:
                    4b:ec:e7:42:74:8b:3b:b4:a5:14:34:79:ca:bd:22:
                    b9:eb:2a:9f:dc:99:46:3b:91:53:24:d1:04:6c:06:
                    ee:96:f1:12:c4:b2:3f:0c:9c:45:3d:9b:b0:3f:e8:
                    6f:b2:6b:99:08:07:b3:e4:3c:ed:f4:15:55:32:6b:
                    01:06:c4:d0:c4:1c:84:bd:54:49:49:ca:53:47:fd:
                    eb:bf:db:2f:77:49:e9:cd:0c:ef:1c:75:b5:f9:60:
                    ec:c2:27:c0:f6:39:86:43:41:c5:8c:f2:c8:bc:ba:
                    63:d6:6b:6b:81:23:b8:ca:7b:d8:75:58:65:6d:9d:
                    d7:7d:95:1e:1a:4d:af:ee:dc:37:82:aa:cd:86:a4:
                    75:5e:07:29:42:b5:59:87:53:ed:e5:c4:58:99:48:
                    4f:f7:f8:c5:39:9b:ef:c4:ae:36:6e:ef:0a:7e:c2:
                    a7:85:17:49:37:2f:e5:46:28:24:dc:90:4b:ba:7f:
                    8a:33:c8:34:e8:19:0f:35:54:30:4a:2b:23:93:b9:
                    7f:00:c1:f6:ac:a1:a9:52:87:eb:2c:ce:b7:e2:79:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A9:20:42:9B:8D:12:34:D4:BB:A4:C0:78:B5:E3:EA:69:76:A0:FC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146408.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aeae::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:c8:a9:80:f7:86:ee:a0:b0:ce:1d:ed:21:71:a7:f8:ea:43:
         c9:13:34:4f:b5:76:06:76:3a:3a:63:90:02:da:22:1e:f2:d7:
         8f:45:95:fa:29:66:74:61:1a:fe:d4:d6:28:8f:01:62:67:7f:
         b5:91:69:92:b6:0b:59:77:2d:83:72:6f:0d:05:c1:74:a0:ac:
         27:9c:38:32:44:fa:21:24:8a:ee:3a:ad:5b:21:85:a3:92:3f:
         ca:8a:38:02:8a:4a:70:cf:8a:7d:48:ee:96:72:14:71:cd:53:
         4b:71:6e:fc:c6:c4:79:4f:b7:ed:ee:b9:d2:f5:62:ea:1e:b5:
         b1:f2:3b:30:e2:19:63:2b:fb:83:74:e2:75:35:5f:99:7c:a8:
         bb:5b:02:f6:09:16:99:fb:b1:fa:c6:2b:be:c5:72:24:66:59:
         ad:43:a9:9e:15:31:e6:d7:fe:2b:0a:d6:c6:44:ce:c3:9a:b1:
         f5:07:5c:6d:a4:7a:73:35:9f:93:ef:3e:e7:85:76:47:74:ed:
         67:0f:89:58:5c:2f:75:65:b2:36:ae:e2:f2:4e:79:de:fb:65:
         a7:dd:d1:8c:6e:b6:88:7a:db:b2:d7:6c:7d:4b:45:d5:4d:3c:
         76:c2:8d:72:60:47:ff:71:3c:f1:60:fe:ac:da:4e:35:e1:93:
         8a:46:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:10 2026 by rpki-client