Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146466.roa
File:                     AS146466.roa (raw, json)
Hash identifier:          ECSJbVnUMCDWR9jK1mFPyVqEJbTTfEnkI43TELZUR6c=
Subject key identifier:   03:BE:9D:AF:47:5D:5A:72:2A:4B:FB:4C:28:DD:FF:2F:E9:F8:C7:17
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1B5739E0CBB94E8AAFE67BD0A9D9CDB177AB8B68
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146466.roa
Signing time:             Fri 22 May 2026 04:26:47 +0000
ROA not before:           Fri 22 May 2026 04:21:47 +0000
ROA not after:            Fri 21 May 2027 04:26:47 +0000
asID:                     146466
IP address blocks:        240a:aee8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:57:39:e0:cb:b9:4e:8a:af:e6:7b:d0:a9:d9:cd:b1:77:ab:8b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:47 2026 GMT
            Not After : May 21 04:26:47 2027 GMT
        Subject: CN=03BE9DAF475D5A722A4BFB4C28DDFF2FE9F8C717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:43:17:ac:1d:f7:91:64:4e:c8:38:58:c4:
                    c8:73:e1:f4:57:7f:5f:7b:be:3a:18:83:ee:e7:7f:
                    12:56:8e:b7:9d:47:54:e3:6b:3d:5c:86:67:7d:32:
                    f7:70:d4:de:2e:f0:da:98:8a:e9:6a:48:bc:d2:50:
                    2b:ea:db:76:45:1e:f4:31:8c:48:25:ae:95:02:49:
                    84:b1:cc:fa:16:cc:c8:3b:81:0c:af:06:5b:74:04:
                    69:59:e3:ad:29:87:5b:9b:97:b8:9e:df:21:c2:d9:
                    19:ce:12:9d:87:e9:d5:7e:67:fd:56:08:b9:4d:7f:
                    b6:d5:6d:34:a8:4c:2d:35:ab:9c:82:a0:a7:b0:cc:
                    74:bb:2a:d9:1d:f4:9c:40:de:19:35:2c:a4:db:36:
                    e0:6c:41:01:11:9b:da:98:07:99:f7:9b:ad:56:2d:
                    cd:79:75:e4:b2:44:58:f6:ea:2c:8f:9a:c2:79:c4:
                    63:83:44:17:a7:f3:da:69:4e:d9:94:9a:67:56:57:
                    d4:08:38:17:88:2a:6c:55:f9:32:0e:c6:b6:e5:1b:
                    41:c0:4c:9e:e6:70:1b:08:71:4f:fd:b9:95:c1:95:
                    5f:3b:1c:5a:56:ad:c8:11:f0:9c:95:c4:49:ea:75:
                    13:02:cf:5e:6f:8b:7d:eb:ff:8b:7a:eb:43:bd:11:
                    bd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BE:9D:AF:47:5D:5A:72:2A:4B:FB:4C:28:DD:FF:2F:E9:F8:C7:17
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aee8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:f2:61:9c:c4:8d:0b:4b:6c:f8:d6:58:1c:a3:cb:09:4a:5e:
         21:a4:8c:82:b8:00:01:88:14:86:8f:61:e9:93:27:f5:46:8a:
         77:e5:ce:38:f1:0b:5f:e1:28:b4:ee:b2:75:a9:0a:f4:df:bd:
         1f:c2:70:a9:a3:9a:91:ae:86:de:01:fa:1f:97:3d:df:29:ea:
         d2:c5:f2:4f:60:fc:cf:78:08:b9:f4:91:c3:dc:3c:7e:99:48:
         2a:af:d1:f8:32:59:bf:4a:33:96:59:aa:74:44:03:70:ee:15:
         91:9e:c1:11:23:a5:8e:fe:a7:46:22:2d:0b:0b:89:e8:d4:d6:
         88:58:3f:9c:ef:6c:36:6a:3b:ca:b6:0e:bc:73:65:5e:25:f6:
         c6:58:ca:02:9e:e9:e5:d5:4f:38:27:47:a4:4e:fe:9e:3d:8f:
         9a:2c:bc:bc:ca:f8:9b:2f:31:a5:26:c4:51:7f:a0:f5:52:bf:
         cc:8c:49:91:66:4e:e8:62:1d:f9:f7:f7:36:63:48:9c:77:d1:
         8b:5d:4b:35:95:e9:fa:b9:a8:92:ea:e5:56:6b:5e:5a:26:54:
         02:58:84:c2:ae:5d:83:06:f2:13:32:cd:b8:3e:29:02:98:96:
         f5:db:7c:74:51:b0:16:15:d9:35:92:0c:6a:2e:10:f5:1d:cd:
         e0:3b:f5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:53 2026 by rpki-client