Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146419.roa
File:                     AS146419.roa (raw, json)
Hash identifier:          9rz8RT6cVZlaZXfGtjpGEqHAg7c9RDrRX+E4EzOjC2s=
Subject key identifier:   34:97:C1:88:9C:A4:94:2F:7D:60:90:97:DD:E8:6D:71:97:F6:55:2C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2B2040042B2F556CDB5BDCC163E388AF7B5EAC1A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146419.roa
Signing time:             Mon 25 May 2026 06:28:29 +0000
ROA not before:           Mon 25 May 2026 06:23:29 +0000
ROA not after:            Mon 24 May 2027 06:28:29 +0000
asID:                     146419
IP address blocks:        240a:aeb9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:20:40:04:2b:2f:55:6c:db:5b:dc:c1:63:e3:88:af:7b:5e:ac:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:29 2026 GMT
            Not After : May 24 06:28:29 2027 GMT
        Subject: CN=3497C1889CA4942F7D609097DDE86D7197F6552C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:d4:81:14:53:93:8c:6c:70:d6:b5:7d:5c:
                    4c:fe:63:9d:9c:2b:f1:e8:1b:01:09:84:26:a2:25:
                    45:04:84:bb:28:5c:69:35:dd:69:ac:40:18:f0:02:
                    6c:55:72:89:e1:8d:a4:f0:9e:71:b7:86:8e:51:a5:
                    9b:04:58:3d:4a:6d:97:0e:72:c2:74:58:4e:8d:9b:
                    5e:8a:60:cb:e8:1b:bd:fc:aa:98:d1:a8:4b:d8:43:
                    8b:c2:1a:a1:e8:f5:24:26:a9:ba:8a:b1:74:f6:ed:
                    47:c0:f6:16:cd:0f:f1:12:ef:f8:c5:04:ce:90:2d:
                    fe:bd:20:1e:54:36:75:25:ac:70:9d:06:72:e9:e9:
                    06:cc:b0:f0:fe:52:b2:9d:4d:71:c8:98:f5:43:77:
                    48:c5:92:8a:a9:fb:92:a8:ef:59:83:f4:f3:89:21:
                    8b:ab:f3:75:42:fc:c3:d8:22:77:f9:7a:22:38:25:
                    33:3a:d9:b3:ad:5f:b4:e6:cc:7e:15:70:bd:19:cb:
                    7f:38:2b:c5:bb:5c:24:99:d8:a1:b2:b2:a5:2f:ea:
                    d3:09:b8:27:92:65:21:6f:19:62:10:23:d6:cd:e0:
                    67:3f:ff:91:2f:a2:3f:42:31:77:f1:6e:71:bd:9a:
                    e5:bb:65:20:f9:76:5b:3b:05:12:51:69:f0:5b:fa:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:97:C1:88:9C:A4:94:2F:7D:60:90:97:DD:E8:6D:71:97:F6:55:2C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146419.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aeb9::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:42:8f:14:26:7f:43:84:b3:32:ea:f5:0f:f7:2a:6e:67:64:
         02:8a:11:b1:30:77:65:08:b4:2f:cd:2b:bb:7c:2b:8f:cf:56:
         bc:47:19:b0:88:e4:fc:f2:82:83:bc:64:ae:50:8b:b0:51:d1:
         ac:30:8f:ff:9e:ed:b3:90:e0:1a:50:ac:ee:99:f2:be:19:e8:
         a8:85:1a:42:8f:f7:fa:71:56:15:c8:9d:39:e4:a4:cf:8c:2d:
         e2:1c:f6:c1:eb:02:2e:f8:4f:ca:69:56:53:fc:b6:ed:e0:11:
         69:b1:c7:ea:87:b7:f9:4b:eb:8d:fc:32:db:96:c5:0e:12:77:
         71:5f:1a:84:60:31:42:b4:ee:c5:1e:65:9a:37:d6:1a:3b:76:
         26:e1:fa:07:3b:25:64:4d:4f:df:b3:96:70:47:3f:cd:3c:60:
         63:4b:06:e9:9e:04:ce:c9:c9:f5:17:d3:16:16:10:ee:74:d1:
         26:f2:62:40:bf:91:fe:fa:ca:48:2f:d4:34:f0:4e:22:34:0f:
         21:49:77:58:70:be:97:82:fe:ad:4f:3a:f7:86:72:0d:95:e1:
         bb:68:18:65:c7:70:a1:6c:bf:9a:c5:19:2e:f6:05:74:5f:e1:
         5f:b0:b0:23:a2:8c:08:59:93:7c:3d:ed:39:a7:0e:55:0d:14:
         7f:7b:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:18 2026 by rpki-client