Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146546.roa
File:                     AS146546.roa (raw, json)
Hash identifier:          OS+aNm9vchOMjBvSDRbHY2+oxmEh2xmy2dedJOLbSsY=
Subject key identifier:   73:31:C6:83:CD:F0:83:3C:5C:75:4E:B7:AC:EE:CA:8B:97:1B:0F:76
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       24C3120C95B498ECA9033DD3DA7700617E0E35BA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146546.roa
Signing time:             Fri 22 May 2026 02:47:56 +0000
ROA not before:           Fri 22 May 2026 02:42:56 +0000
ROA not after:            Fri 21 May 2027 02:47:56 +0000
asID:                     146546
IP address blocks:        240a:af38::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c3:12:0c:95:b4:98:ec:a9:03:3d:d3:da:77:00:61:7e:0e:35:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:56 2026 GMT
            Not After : May 21 02:47:56 2027 GMT
        Subject: CN=7331C683CDF0833C5C754EB7ACEECA8B971B0F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bb:a1:8d:0f:dd:18:2b:d6:7a:15:84:3b:d4:
                    6e:ba:dd:8e:58:37:20:78:a1:a6:7e:29:77:53:63:
                    1c:6a:2e:a1:97:8f:ab:40:ef:8d:0d:63:81:4a:63:
                    5d:55:10:8a:ad:c2:66:15:b9:71:d2:ee:8d:69:7d:
                    68:ea:3b:f2:5d:8f:7e:07:ad:86:09:08:d6:98:0b:
                    90:17:ff:c8:ed:4a:93:11:fb:c3:55:79:25:e7:24:
                    70:b1:83:10:d1:dc:ec:bb:26:d3:28:41:46:5e:58:
                    33:ce:1b:cf:b1:1e:e9:c1:68:87:01:c1:c1:c7:bd:
                    04:e3:b7:fb:fb:d6:91:4a:30:89:a7:f5:0b:64:75:
                    9a:78:ae:b7:bd:0a:a0:a1:4e:78:7d:2d:06:f1:5d:
                    1d:77:93:4e:ba:02:3d:b9:07:ba:7f:0e:c5:8b:bc:
                    8d:3d:76:33:82:e0:3f:65:54:c1:82:85:04:1a:92:
                    14:f0:80:a1:bd:ef:a3:85:c1:9e:ff:ae:8e:90:e8:
                    7b:97:d3:e7:cc:19:29:7c:55:3e:e3:a0:e1:4e:b4:
                    af:2e:e0:0e:63:9b:6f:62:62:09:eb:d0:59:d6:f4:
                    be:98:3a:4f:d0:6b:45:a5:68:eb:cb:41:12:8d:96:
                    5d:78:c4:bb:5a:3f:35:27:fa:2c:de:fb:b6:2f:5d:
                    55:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:31:C6:83:CD:F0:83:3C:5C:75:4E:B7:AC:EE:CA:8B:97:1B:0F:76
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146546.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af38::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:8c:8f:8d:4c:1e:15:c7:c1:10:75:bf:87:42:55:0b:11:85:
         3e:5c:fa:30:f1:75:d6:6d:3d:b3:ef:78:92:8c:85:11:9b:32:
         22:62:65:1e:95:31:15:51:4b:5e:6f:e8:6a:60:bd:8c:f4:e3:
         bc:91:e6:5c:d9:63:d8:b7:66:82:80:96:63:98:95:17:64:6d:
         1f:48:b7:5e:11:0b:f0:69:78:dd:1c:6c:06:81:6e:a2:c8:74:
         7c:0a:7a:b0:f8:17:d0:a0:18:a3:3c:1c:76:5f:ef:f9:9a:12:
         2d:90:2b:01:7e:5c:61:09:0f:62:93:c0:34:ab:e9:8a:14:e3:
         b1:d5:da:6a:0d:ee:2d:bd:08:6b:f2:22:2d:27:75:b8:22:0b:
         06:4c:a3:68:fb:b4:25:ee:93:af:f4:d9:4c:5f:25:7b:62:3e:
         3f:b8:fb:d6:55:ee:7d:58:c6:db:6d:e4:24:63:63:d1:1d:6e:
         25:d2:78:ce:dc:2f:f3:91:31:9c:15:dc:d5:50:4e:90:1a:78:
         f4:c9:86:b5:f4:89:1c:5c:63:82:ee:4a:70:9c:5d:11:ae:9e:
         25:e5:d6:97:08:78:c4:3a:f2:56:2f:a5:68:fb:36:7c:de:55:
         28:99:61:ba:21:8e:2b:5b:d9:95:75:b8:10:9d:b3:09:07:97:
         7d:eb:b9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:48 2026 by rpki-client