Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146476.roa
File:                     AS146476.roa (raw, json)
Hash identifier:          8PuzbU2R1/3PIUHjXTgj6iUWhxjQ+AgeDl36I7Gzork=
Subject key identifier:   B3:69:DC:F9:08:53:A3:49:36:BB:37:F2:BD:C2:16:14:C9:D6:BF:72
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       267E24DE7C0CE848D9CEFE47B80A259848919234
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146476.roa
Signing time:             Fri 22 May 2026 01:50:23 +0000
ROA not before:           Fri 22 May 2026 01:45:23 +0000
ROA not after:            Fri 21 May 2027 01:50:23 +0000
asID:                     146476
IP address blocks:        240a:aef2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7e:24:de:7c:0c:e8:48:d9:ce:fe:47:b8:0a:25:98:48:91:92:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:23 2026 GMT
            Not After : May 21 01:50:23 2027 GMT
        Subject: CN=B369DCF90853A34936BB37F2BDC21614C9D6BF72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:10:f9:fc:43:c2:6a:8b:9e:72:3b:a3:5f:
                    94:43:cd:66:72:16:95:59:88:9b:b9:c5:12:33:dd:
                    14:6c:59:81:21:d9:89:2a:60:c5:19:27:1c:32:36:
                    0a:f4:ba:c6:04:f1:56:01:4b:16:62:1a:9b:3d:fc:
                    7b:fa:86:df:cf:66:46:d4:65:d9:7d:43:bf:3e:2b:
                    29:60:54:5c:7b:21:5f:28:66:eb:c1:0d:fd:17:ef:
                    20:79:7a:ac:17:28:6d:32:98:9a:ac:19:a3:dd:b9:
                    d5:94:63:89:e6:d8:10:17:a1:41:26:8e:e0:04:80:
                    84:fa:2b:8a:24:2e:f0:00:c1:34:05:98:df:54:64:
                    af:47:e2:e5:07:cd:18:aa:53:1a:9c:4f:67:26:0d:
                    4f:b9:5e:fa:52:36:2d:cf:ec:ec:7f:7d:46:54:d0:
                    2c:b4:3e:e0:0b:91:48:99:78:61:11:36:dd:f0:18:
                    e1:3a:50:a0:c4:e9:90:98:63:28:c7:9b:ec:31:39:
                    c8:65:a4:67:7f:80:e4:ff:c7:67:6a:c1:dd:28:39:
                    38:4f:4c:95:9e:f1:3f:19:1f:c3:3d:75:e0:ff:18:
                    65:a4:c5:56:c7:ff:ef:44:ac:d3:39:b2:96:d2:cf:
                    03:41:64:e5:cc:14:86:b1:1c:b1:d8:e3:8c:66:8b:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:69:DC:F9:08:53:A3:49:36:BB:37:F2:BD:C2:16:14:C9:D6:BF:72
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146476.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aef2::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:9c:7e:28:62:99:05:79:f8:2e:ba:5c:d6:5f:48:57:69:a9:
         a4:8d:df:89:14:14:6b:83:2a:7d:f9:53:6d:7a:73:71:c9:de:
         ac:88:0f:b8:2d:1e:aa:01:f6:61:dc:ea:bd:b5:d4:b8:54:32:
         a0:a0:b8:ec:69:d3:59:58:14:f9:24:06:34:5f:c0:91:9d:24:
         3b:37:a4:1a:8c:60:96:41:33:6c:23:d0:dd:5b:74:f9:6a:31:
         4f:ef:5e:62:c0:50:c7:50:c4:84:2e:f5:b8:51:e6:2f:07:94:
         16:fe:e0:ba:46:59:c2:fb:8e:43:7b:3d:46:6f:78:da:88:50:
         b4:fb:d9:54:3f:50:ee:fd:6b:23:64:72:1c:ed:d2:bb:0e:09:
         b8:da:19:a3:ba:cb:cf:c2:44:5c:5f:6b:19:17:cc:97:08:61:
         80:1c:ac:ea:bc:68:59:73:36:b0:16:b9:3c:2a:42:15:38:05:
         e2:e9:af:16:0e:7c:3f:fc:94:c5:88:90:f5:b7:5c:5d:07:51:
         a7:43:ae:54:e4:e9:e0:32:0c:0e:0c:c4:b1:5e:af:0f:04:b2:
         02:37:df:3d:5d:ef:0e:24:b0:76:a6:bd:9f:7c:0f:db:7a:44:
         d9:9a:72:c5:3d:af:3a:a5:fa:ae:30:05:31:16:7b:b2:b5:f6:
         03:7c:a0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:20 2026 by rpki-client