Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146681.roa
File:                     AS146681.roa (raw, json)
Hash identifier:          68j3DlCueTKeIxfQGxrkv55EO555joccqr3ZXFY8mtA=
Subject key identifier:   2F:DE:C3:7C:67:71:17:5E:EC:C9:94:B8:CE:BD:F4:20:82:A2:49:28
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       08625905E7992705D30CDAEBF32C8CF553277354
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146681.roa
Signing time:             Tue 26 May 2026 02:35:15 +0000
ROA not before:           Tue 26 May 2026 02:30:15 +0000
ROA not after:            Tue 25 May 2027 02:35:15 +0000
asID:                     146681
IP address blocks:        240a:afbf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:62:59:05:e7:99:27:05:d3:0c:da:eb:f3:2c:8c:f5:53:27:73:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:15 2026 GMT
            Not After : May 25 02:35:15 2027 GMT
        Subject: CN=2FDEC37C6771175EECC994B8CEBDF42082A24928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:db:b2:20:fa:74:f7:b6:b7:8c:d8:a5:44:
                    d7:6e:6c:dc:3b:53:a2:d5:2f:7b:bd:25:9c:a4:29:
                    1f:e1:e2:e8:43:38:03:79:78:72:c7:38:69:d1:41:
                    57:14:e1:0c:7f:c0:1f:e2:46:a6:f8:a4:cc:cc:27:
                    5d:58:d0:e7:73:8c:e8:66:d5:9e:8f:e3:d6:0a:15:
                    05:97:4a:f6:0e:2c:07:3f:49:cd:78:8d:a2:62:4e:
                    fa:40:01:0a:0b:31:48:6f:56:02:32:84:6e:a3:13:
                    dc:12:19:de:b5:05:3f:70:fa:b7:8f:c5:24:2b:2a:
                    5e:5d:4c:57:0d:50:29:e5:d3:64:c9:1f:13:08:0e:
                    55:68:ff:67:a4:67:f1:f5:a4:ba:83:d8:8e:38:c6:
                    28:42:be:5a:9e:0c:ec:2a:b3:6f:f7:22:ce:c7:73:
                    66:cf:86:78:56:87:e8:77:5b:33:51:d7:f5:50:6d:
                    63:db:f3:29:e1:6e:58:a5:c2:85:58:1c:36:ec:e0:
                    46:4e:1e:1c:9a:cf:72:4d:c1:df:3f:ca:94:4e:a5:
                    64:94:98:0e:35:0e:d0:fb:08:5b:ff:a3:d0:3f:93:
                    f9:c5:d7:d7:cc:c2:58:95:26:f8:a1:8a:3e:bd:ee:
                    ca:fd:f6:0f:1d:cb:b6:c6:62:b0:1e:67:74:16:ae:
                    71:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DE:C3:7C:67:71:17:5E:EC:C9:94:B8:CE:BD:F4:20:82:A2:49:28
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146681.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afbf::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:54:06:6c:f6:bc:9f:eb:57:45:ff:ec:36:4a:60:eb:fa:05:
         4a:a1:88:7d:52:df:05:5f:b0:19:a9:20:d1:42:33:92:14:06:
         c9:40:7d:03:04:4a:1c:9a:d3:aa:1e:3d:be:41:7d:e2:ca:c4:
         ab:c0:23:ce:08:38:26:06:28:64:e9:31:f6:1e:ab:8c:bd:99:
         87:99:d8:e1:0a:48:4b:b0:f1:e9:ca:16:0c:35:15:2b:7f:63:
         e7:32:7c:77:f9:08:6e:84:d5:c1:c6:a0:98:9b:46:ba:e9:bf:
         07:0f:67:99:19:bd:0b:97:5d:da:33:b0:c4:b8:26:3c:9e:e2:
         48:2d:69:b9:5c:73:5b:a1:02:33:83:8b:81:c3:68:34:b0:2f:
         b0:c4:26:76:dd:cb:06:b4:ee:71:2c:61:1a:4d:8c:a6:2c:0f:
         fa:46:23:1c:56:75:99:43:7d:16:02:75:08:6d:7f:ea:77:99:
         0e:cc:af:56:30:15:da:3f:c0:dc:4d:df:04:d1:97:66:9d:d5:
         c4:d8:93:6c:f8:6a:a6:dc:d7:30:d6:60:fc:37:83:df:cc:6b:
         39:40:27:5c:d4:e6:cf:37:16:fb:62:5a:07:3e:98:19:fd:38:
         85:9b:76:30:96:e2:83:b7:35:b8:19:18:1d:c9:bc:1c:73:dd:
         bb:3d:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:59 2026 by rpki-client