Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146510.roa
File:                     AS146510.roa (raw, json)
Hash identifier:          fjKHlnhyCVK+lkc2XESMtUKGkNrl4wklHiqmPvKILSc=
Subject key identifier:   D9:42:81:61:D2:88:B6:9B:3C:79:53:A6:D4:E6:9D:4D:19:4F:B0:A6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       513CF6CF2AA82B903E4B61B09E6B0105201FF20A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146510.roa
Signing time:             Fri 22 May 2026 02:47:40 +0000
ROA not before:           Fri 22 May 2026 02:42:40 +0000
ROA not after:            Fri 21 May 2027 02:47:40 +0000
asID:                     146510
IP address blocks:        240a:af14::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3c:f6:cf:2a:a8:2b:90:3e:4b:61:b0:9e:6b:01:05:20:1f:f2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:40 2026 GMT
            Not After : May 21 02:47:40 2027 GMT
        Subject: CN=D9428161D288B69B3C7953A6D4E69D4D194FB0A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:55:80:3f:5f:97:57:23:37:e6:ac:72:80:
                    12:53:f6:31:26:de:2b:0f:75:0e:c8:1f:c8:17:57:
                    86:16:c9:1c:dc:ba:c2:01:6b:8b:1c:6e:82:72:10:
                    22:29:9e:17:ca:26:50:b3:50:81:33:69:9d:45:72:
                    e6:aa:99:44:a0:eb:bc:3f:58:dd:19:34:73:d8:e9:
                    a5:43:bb:87:3e:22:da:41:c9:35:08:52:49:3d:cd:
                    41:cd:08:ff:76:29:7c:b3:7f:bc:99:68:01:f9:c0:
                    f4:5d:e8:78:b0:19:62:71:9b:4c:46:ce:d6:22:9d:
                    7d:75:dc:c2:59:b3:47:f7:c7:9d:dc:11:6f:7c:cc:
                    51:c9:70:70:ce:42:b4:6b:e4:a3:d2:91:e0:5b:aa:
                    e6:9a:a9:9c:8f:2f:c4:38:1e:31:5b:0b:0f:6f:3e:
                    c4:4a:4c:db:af:de:c7:e6:05:08:34:68:4e:59:fd:
                    82:9a:9d:35:d9:22:1f:f0:1b:57:5b:88:d0:67:85:
                    d6:cc:bd:e9:be:d4:92:38:3e:43:fc:3f:e3:10:53:
                    4c:52:2f:d0:1c:c3:1e:17:e1:d5:ef:de:6e:f2:0a:
                    5a:13:2a:9d:79:dc:b5:5d:e2:bb:ab:d6:db:6c:57:
                    4c:e6:f1:bf:da:aa:77:92:9f:f3:f3:7f:0b:ab:50:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:42:81:61:D2:88:B6:9B:3C:79:53:A6:D4:E6:9D:4D:19:4F:B0:A6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146510.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af14::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:53:61:ab:e3:c8:ea:6e:52:9f:33:e7:24:26:e6:90:0d:29:
         74:f3:5f:32:6c:4e:9f:93:6a:71:16:a8:fe:86:cd:61:0a:7a:
         62:77:6d:e0:88:45:01:17:82:f3:0f:90:bb:dd:e5:ac:84:63:
         8f:d0:ac:38:53:1f:eb:6e:8e:bc:7b:be:50:18:ed:ed:82:71:
         88:bf:6a:10:24:00:aa:0a:ae:60:97:66:53:d1:ae:5a:27:b0:
         05:66:0a:6a:a3:35:ea:7d:e5:18:ef:05:6c:62:90:fc:3d:89:
         50:79:cc:2f:b2:fb:69:68:7d:d6:2d:03:a6:84:c8:12:d3:35:
         7a:91:08:65:b7:45:3a:d9:2d:bd:59:d5:cd:ba:dc:73:c3:d7:
         d3:c9:4b:7b:3e:0d:c5:ad:f2:cc:c5:5c:c8:1d:40:8a:c8:a4:
         27:34:7e:62:f2:38:89:ea:54:75:e0:49:2e:8a:91:d7:a4:61:
         47:6e:a4:fb:5b:ad:a2:87:9c:93:18:6e:d5:31:87:7a:87:26:
         59:89:a6:64:00:69:40:eb:ca:0e:bb:86:a4:76:af:83:10:16:
         68:13:cd:f5:25:eb:da:d7:ae:60:ee:36:f7:d0:b6:a5:0e:da:
         68:85:14:46:7d:ab:0b:f7:67:f4:15:c3:08:58:19:54:18:e3:
         b5:84:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:05 2026 by rpki-client