Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146442.roa
File:                     AS146442.roa (raw, json)
Hash identifier:          kC/s3cm0QDTa1oK6DLkP4mkTMWV7TCdQ8ys1it7sWl0=
Subject key identifier:   36:C1:F6:85:88:D0:DD:74:6C:E8:9B:2E:F1:72:D3:85:A8:9F:10:FA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       48C4593C08147A2A22916EB86EC400B861C2D8F0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146442.roa
Signing time:             Fri 22 May 2026 06:46:05 +0000
ROA not before:           Fri 22 May 2026 06:41:05 +0000
ROA not after:            Fri 21 May 2027 06:46:05 +0000
asID:                     146442
IP address blocks:        240a:aed0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c4:59:3c:08:14:7a:2a:22:91:6e:b8:6e:c4:00:b8:61:c2:d8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:05 2026 GMT
            Not After : May 21 06:46:05 2027 GMT
        Subject: CN=36C1F68588D0DD746CE89B2EF172D385A89F10FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:b3:55:af:36:37:06:34:b9:14:be:a9:f5:
                    b9:09:7a:95:05:eb:3a:da:29:8f:7d:79:fb:22:a7:
                    96:8a:78:df:42:27:7f:ad:55:d5:53:41:e4:25:05:
                    be:f6:39:c3:8c:51:a3:44:93:53:d3:d5:b7:d2:8a:
                    2d:ca:7a:cc:32:b2:bb:79:31:83:3c:48:08:45:17:
                    97:2d:b0:8f:de:d8:d5:c1:0d:04:e2:4a:f8:82:79:
                    e8:9e:0c:f7:97:aa:1f:ff:57:c5:5c:26:26:36:97:
                    22:6a:f2:4c:07:bf:08:96:9c:f7:f0:d6:4b:bd:1b:
                    b7:7d:58:17:41:e5:26:41:be:c7:b9:99:cf:8b:15:
                    91:94:b0:f4:2f:1b:b6:c1:de:6b:fa:69:8d:17:1d:
                    d1:9d:b7:c3:40:79:34:00:b9:1a:96:fc:a5:5d:f2:
                    a1:e8:64:4d:4f:b4:1a:dd:a1:92:a2:5a:53:71:e8:
                    64:19:80:97:4c:d6:0d:e5:9f:00:3f:fa:9e:78:83:
                    a6:0b:cb:32:a5:68:dc:fc:22:09:53:fe:24:c1:08:
                    18:b5:67:bd:7f:e0:be:c3:e6:7f:b5:a3:df:f8:7a:
                    e3:10:3b:02:54:00:b3:3f:2c:bb:b5:ea:9e:35:9a:
                    d3:4c:57:e6:25:65:73:6f:af:5c:62:9c:3a:ad:90:
                    54:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C1:F6:85:88:D0:DD:74:6C:E8:9B:2E:F1:72:D3:85:A8:9F:10:FA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146442.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:eb:14:fd:db:e5:01:d7:c3:c8:c8:7c:67:df:ab:35:ff:c9:
         11:f6:52:2a:de:9d:05:36:f6:83:d3:d0:27:f2:13:d8:bb:00:
         c0:7b:e1:54:5a:85:d4:4c:c8:c6:3e:81:63:1c:27:05:24:f3:
         d3:df:f6:f6:9a:d1:2e:39:b5:21:78:60:6b:0c:0d:b8:45:ca:
         be:16:5e:84:f0:8d:7f:95:c3:6f:a3:38:e7:12:b5:de:38:11:
         93:09:3d:17:04:07:98:a9:59:40:31:ca:f9:5f:f1:aa:41:d6:
         2e:77:33:34:b3:60:e9:59:cf:45:2a:2c:ea:4b:bb:05:bd:17:
         f9:55:83:50:c9:77:55:f9:5b:20:72:5f:26:45:fe:11:0d:1f:
         63:0d:70:08:7e:2c:bb:1c:df:a9:ad:00:82:60:be:0e:62:32:
         48:9f:b4:3f:14:43:21:0d:0b:29:5f:fd:32:b9:be:c7:0f:13:
         f9:4b:f1:9b:d5:f0:47:81:e2:8c:85:7a:ff:1c:a6:6e:ce:7f:
         f7:08:d4:bf:b2:d9:65:03:6a:7b:c6:7d:4f:e3:e4:83:c8:d7:
         bf:18:24:87:86:5d:c7:35:5d:52:ba:af:88:c0:b8:a0:10:c7:
         91:9d:81:27:f0:f8:f1:57:93:7f:c9:1b:9b:18:59:90:6e:df:
         16:de:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:32 2026 by rpki-client