Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146444.roa
File:                     AS146444.roa (raw, json)
Hash identifier:          7vxFLUPrhIJ025DWbKF1p3eWZCH/xs4DK06NwmGjX1w=
Subject key identifier:   DC:FB:4F:43:61:E3:A3:3F:85:B8:5B:86:28:F3:FC:4F:4E:1A:D4:D8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6E9B5987DD60953784740F8793F46514B0C93BBC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146444.roa
Signing time:             Fri 22 May 2026 06:46:06 +0000
ROA not before:           Fri 22 May 2026 06:41:06 +0000
ROA not after:            Fri 21 May 2027 06:46:06 +0000
asID:                     146444
IP address blocks:        240a:aed2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9b:59:87:dd:60:95:37:84:74:0f:87:93:f4:65:14:b0:c9:3b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:06 2026 GMT
            Not After : May 21 06:46:06 2027 GMT
        Subject: CN=DCFB4F4361E3A33F85B85B8628F3FC4F4E1AD4D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:60:f2:ed:ae:19:5a:ee:d0:2b:eb:91:96:
                    5d:0e:17:c0:00:0b:4f:d5:8d:97:47:63:c0:30:dc:
                    3a:fa:76:eb:f0:84:12:35:cc:ce:3f:5e:82:7b:ce:
                    22:d3:dd:e6:2a:d0:f5:de:82:db:f5:8c:66:42:d0:
                    8d:a2:b5:aa:7b:40:5b:e8:3b:c0:06:af:0d:6b:6e:
                    c3:37:e8:18:80:d4:3a:8d:f5:9d:c7:ae:54:05:af:
                    ce:9b:e8:46:42:2c:66:ea:3b:0a:4b:d6:79:d2:c9:
                    3f:4c:0e:4c:35:14:6b:4e:d6:c5:e6:82:0a:2f:c3:
                    34:2c:60:69:6e:24:71:fa:49:c0:c1:b4:92:13:f0:
                    be:67:c0:06:ae:c1:8a:aa:7b:a1:f8:e8:d6:58:41:
                    8b:ea:eb:84:12:f5:1b:8d:8a:2f:15:83:3a:c5:41:
                    e5:5a:88:07:10:4a:db:19:65:92:7d:4a:8d:87:dc:
                    cc:02:67:00:ac:e9:95:7e:c3:7d:92:2b:20:d3:50:
                    a9:b9:ac:7b:57:f0:ef:e5:31:21:48:d3:96:a4:06:
                    33:d7:4d:26:84:6c:4a:b4:1c:03:62:22:73:ae:7e:
                    e7:26:0a:48:19:46:89:c6:fd:0e:d2:16:04:43:4f:
                    93:90:d3:c1:f9:89:e2:a7:ae:d9:35:5f:88:40:40:
                    4b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FB:4F:43:61:E3:A3:3F:85:B8:5B:86:28:F3:FC:4F:4E:1A:D4:D8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146444.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aed2::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:2f:2d:98:85:17:53:a0:0b:94:23:70:5d:ee:c5:3d:e8:09:
         47:c5:e3:62:6a:26:02:24:39:55:89:13:87:95:c8:d1:2a:f6:
         be:fa:41:71:19:b3:07:28:f1:d7:52:13:f3:4c:00:dd:80:5d:
         8f:7c:1c:4a:55:0b:9c:d5:b7:a2:4f:8c:36:89:fd:ee:77:c1:
         c3:27:b8:64:d5:f1:0d:89:80:ed:5b:0c:77:61:89:23:e4:d7:
         ae:b4:b5:af:12:7e:84:76:4c:b1:cc:68:b9:77:05:72:df:ea:
         f9:a8:16:53:42:9b:69:1d:25:99:94:3a:11:7f:a6:77:dc:a9:
         d7:25:4f:d6:9d:d8:2f:d5:dc:9b:fd:1b:5d:57:ed:74:27:b7:
         72:2d:50:a4:a5:ee:7d:00:3d:00:29:08:d5:06:7b:09:7f:b5:
         12:b3:8f:34:e3:f5:38:23:ab:3c:54:04:c3:c1:2a:d9:23:be:
         c1:2a:15:e8:09:ba:12:36:45:2f:71:f9:a5:e6:67:93:ec:82:
         61:fd:f6:c1:9e:46:26:b4:7b:1d:84:4d:f7:c6:c4:4c:ff:80:
         9d:f3:c8:aa:65:30:1d:cf:b3:70:c2:9a:fc:86:77:27:45:20:
         14:d2:cc:86:60:b5:ed:3a:f9:99:57:dc:37:67:e0:c6:99:22:
         07:11:e2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:41 2026 by rpki-client