Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146562.roa
File:                     AS146562.roa (raw, json)
Hash identifier:          4zq7hJN2Njcv3DyE73ND6PBx5yHnmGKG8QkVHn6qRGY=
Subject key identifier:   EC:F7:DD:8A:73:87:5D:92:F3:30:FE:17:C3:4B:59:DF:42:04:1E:0F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2403D69F9183C4AF4EB550A4D3AD0E8C352A5A0D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146562.roa
Signing time:             Tue 26 May 2026 06:12:58 +0000
ROA not before:           Tue 26 May 2026 06:07:58 +0000
ROA not after:            Tue 25 May 2027 06:12:58 +0000
asID:                     146562
IP address blocks:        240a:af48::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:03:d6:9f:91:83:c4:af:4e:b5:50:a4:d3:ad:0e:8c:35:2a:5a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:58 2026 GMT
            Not After : May 25 06:12:58 2027 GMT
        Subject: CN=ECF7DD8A73875D92F330FE17C34B59DF42041E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:dd:e9:15:e8:3f:0a:31:04:cd:fd:15:df:
                    25:e2:85:25:09:76:ca:f3:7f:96:75:11:86:81:2d:
                    66:a0:c5:8d:bc:f0:4b:15:5f:ea:32:f5:ab:89:06:
                    54:89:60:d7:41:a9:6b:5c:c6:df:f5:6d:a0:20:52:
                    71:eb:3c:11:45:c7:b9:7e:70:94:fb:88:35:a9:a9:
                    dc:28:8e:f4:59:ab:f8:20:08:fe:15:80:fd:8c:ff:
                    82:fd:b4:8d:74:68:57:c3:f6:00:71:0d:7b:2c:d8:
                    41:aa:2e:92:5d:fe:12:46:31:aa:99:02:16:a9:77:
                    4f:e9:5e:30:6b:2b:f6:d8:42:6f:d1:17:6a:35:41:
                    c1:48:0f:81:c3:36:87:3b:72:97:41:97:83:f1:b5:
                    1f:cf:d0:82:ac:f1:d2:3b:74:df:13:92:b7:ac:c5:
                    63:fa:57:fa:cb:e3:43:df:98:f3:cc:a7:03:24:ff:
                    90:76:e8:c3:6c:8b:bd:1d:5f:35:ef:04:a1:d7:e4:
                    b1:12:ac:10:9d:e0:50:9b:9a:2d:25:86:aa:08:4c:
                    2f:02:f9:aa:76:14:0f:24:0a:5d:81:2a:2a:ce:03:
                    1e:a8:85:fc:15:4a:dc:ae:76:7d:12:8c:7a:ab:62:
                    c7:41:fb:17:62:53:13:28:be:64:8e:b9:aa:e0:d7:
                    89:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F7:DD:8A:73:87:5D:92:F3:30:FE:17:C3:4B:59:DF:42:04:1E:0F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146562.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af48::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:09:34:3b:4e:aa:d2:c8:bd:25:a5:ea:27:51:86:3e:89:
         ee:8f:41:20:79:4d:ca:16:af:71:fe:0d:74:a5:76:5a:fa:f2:
         d4:3b:10:26:e7:47:3d:db:b3:8b:52:0b:4a:d9:0a:d4:dd:22:
         e6:96:60:a0:d0:e4:a6:f0:56:26:e9:1d:5b:ad:05:3d:b8:68:
         4d:f5:ba:31:8c:8e:05:8c:c3:21:28:6c:56:24:43:2c:7e:ca:
         b9:31:b8:d6:14:b0:a5:b9:99:66:a8:66:5d:80:a6:c5:30:19:
         ca:91:52:b1:1f:35:1c:9e:3e:92:8e:02:d8:5b:84:6e:db:95:
         96:52:04:07:2a:46:5c:a3:5b:d4:28:a9:ae:bf:0b:44:3f:ca:
         8c:cd:f3:9e:ea:62:8b:8d:88:24:72:f2:c1:94:6b:c9:54:a0:
         60:87:59:73:80:7d:36:e8:15:76:66:ca:8c:ba:e7:69:eb:d2:
         a6:39:a6:b6:37:b9:e4:3b:e3:8a:ad:c8:a6:0d:06:90:5f:01:
         f9:0a:fa:1f:a8:31:3c:74:96:8c:0f:65:68:07:74:18:23:71:
         1a:36:d5:7f:e2:c4:6e:ef:5d:de:9f:cc:41:11:f9:51:ff:75:
         92:95:eb:3e:dd:0a:d0:fc:ab:0b:eb:09:b2:f1:1e:d2:1d:f5:
         ee:aa:6d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:13 2026 by rpki-client