Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146610.roa
File:                     AS146610.roa (raw, json)
Hash identifier:          yVZprwa4Y9vRb1YxpYneZBki8uoe8t2Np1cuHvzAgZg=
Subject key identifier:   A4:A5:72:19:92:BB:F7:50:EB:A3:FA:14:8B:28:2C:26:46:C8:B1:8B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       57202F5E0332D791DDB399A93FB6C7ADDFA12CE2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146610.roa
Signing time:             Fri 22 May 2026 01:50:06 +0000
ROA not before:           Fri 22 May 2026 01:45:06 +0000
ROA not after:            Fri 21 May 2027 01:50:06 +0000
asID:                     146610
IP address blocks:        240a:af78::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:20:2f:5e:03:32:d7:91:dd:b3:99:a9:3f:b6:c7:ad:df:a1:2c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:06 2026 GMT
            Not After : May 21 01:50:06 2027 GMT
        Subject: CN=A4A5721992BBF750EBA3FA148B282C2646C8B18B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:64:f2:0f:71:c0:97:33:12:3c:d5:46:bb:
                    34:cf:18:f4:5b:9d:38:bb:b8:6f:99:a4:2c:11:eb:
                    a9:c7:0a:91:65:4c:f6:bc:d0:ca:65:f6:4a:58:4e:
                    e3:c3:4d:c6:46:18:a7:76:2d:f5:a7:9b:e9:f4:ab:
                    d0:00:78:ed:23:6a:86:d5:8f:1f:03:f1:18:7f:3c:
                    93:39:06:9d:2c:96:76:27:62:d3:58:19:40:b3:7b:
                    04:f8:ba:35:08:21:f2:67:c4:8f:39:da:f5:3b:70:
                    4c:0e:a1:07:f0:fd:ff:c7:66:3e:18:0c:3c:d6:5b:
                    68:60:5d:0d:f4:d6:65:6f:80:5d:27:83:00:c2:91:
                    e1:ba:57:cd:7f:e3:c3:77:d8:ab:65:46:9c:aa:d7:
                    b4:18:d2:0c:aa:b1:40:8e:d2:71:5b:ec:e3:30:52:
                    66:0b:27:b1:1b:e8:b0:31:09:eb:d2:47:a8:35:2b:
                    d0:f8:29:39:00:55:ba:50:68:5d:1b:b3:c4:eb:57:
                    f7:9a:09:97:c9:11:94:25:5d:30:a0:c6:31:95:3c:
                    42:94:fa:94:d0:5e:3f:7f:7f:c7:99:58:e1:28:be:
                    19:f0:ee:6f:34:f6:aa:7e:e1:37:e4:bb:14:d4:98:
                    2c:34:e2:ba:b0:a8:16:6b:99:38:8f:c7:2e:eb:4f:
                    ac:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A5:72:19:92:BB:F7:50:EB:A3:FA:14:8B:28:2C:26:46:C8:B1:8B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146610.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af78::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:81:bb:ca:f6:72:ff:4b:a6:d8:86:69:ae:ab:b1:94:52:36:
         b7:95:04:54:f0:40:e1:c2:06:e2:7b:60:12:63:cf:0a:55:e5:
         03:ab:de:45:b2:a2:49:a3:e2:24:68:32:d5:7c:d8:33:d0:87:
         1e:f9:52:a3:66:49:09:6f:40:4a:f5:c3:d8:9b:c7:6b:0e:7c:
         6d:95:b5:a2:75:7f:94:1b:19:5f:6b:f5:9b:e9:17:36:23:7b:
         aa:70:1a:61:ba:eb:63:bf:51:c5:41:04:fd:4b:6f:0e:50:41:
         1b:cf:62:25:01:34:4d:bc:97:58:75:42:1f:b4:b5:48:7a:6c:
         a0:e5:47:ce:37:ee:5e:7d:9f:bd:4c:e2:ca:57:ed:87:30:f8:
         65:71:38:cd:50:2c:7a:07:13:26:8f:a3:cf:4f:3b:fc:6c:3c:
         21:56:4e:21:72:ab:75:3f:26:81:6b:bb:cf:63:69:0c:b5:3d:
         c0:f8:2a:6b:69:2e:8b:9e:3a:56:37:3c:d9:ec:7e:df:ea:67:
         bb:b2:5d:ef:95:43:e4:fe:c2:0c:59:6a:70:5a:fb:42:9e:7e:
         c1:2c:3a:fd:68:ae:d4:7c:e3:43:a7:fc:4f:4a:f7:1c:81:4b:
         ce:66:ed:9d:09:c3:ae:de:7f:13:d1:00:1d:ce:f0:28:a8:aa:
         4b:53:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:12 2026 by rpki-client