Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146710.roa
File:                     AS146710.roa (raw, json)
Hash identifier:          26YPL+dJ/f2Am93heFZmZzARH+J93aFAu5FpzTuOyXQ=
Subject key identifier:   80:26:E6:7E:E9:0A:FD:F3:98:AD:60:AE:19:B2:34:9A:55:C2:7F:1C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5D9FA1BDFF6890E73DC6EC4228F4086F427A5F72
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146710.roa
Signing time:             Fri 22 May 2026 06:27:34 +0000
ROA not before:           Fri 22 May 2026 06:22:34 +0000
ROA not after:            Fri 21 May 2027 06:27:34 +0000
asID:                     146710
IP address blocks:        240a:afdc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9f:a1:bd:ff:68:90:e7:3d:c6:ec:42:28:f4:08:6f:42:7a:5f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:34 2026 GMT
            Not After : May 21 06:27:34 2027 GMT
        Subject: CN=8026E67EE90AFDF398AD60AE19B2349A55C27F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:b8:79:16:ec:9a:94:5e:e7:69:aa:68:14:
                    b1:db:a1:60:8a:f9:d5:8f:0d:32:e6:f1:eb:64:41:
                    f1:a3:c6:89:8b:f0:66:11:a7:53:31:3e:02:03:80:
                    84:fd:06:54:57:a0:0f:f0:0a:1b:58:8d:d0:02:23:
                    2e:70:94:e8:d8:bb:62:e2:a3:9f:52:1e:63:9d:6a:
                    0e:23:5c:c7:98:36:5f:32:f8:8c:1e:2c:e3:35:c2:
                    3d:8e:4f:30:51:ef:3e:36:c0:fb:e4:50:63:7f:9d:
                    be:24:9a:71:df:2b:99:24:fe:e2:a2:cb:f4:89:fc:
                    d1:36:4c:3d:2a:a1:a6:51:37:b3:db:e9:4a:fb:e3:
                    e6:3b:41:e4:0c:57:7b:76:c7:b4:22:f6:eb:78:24:
                    33:a7:1d:21:31:0f:52:20:ee:09:2d:57:83:23:95:
                    bf:00:c7:db:2e:bb:fd:dc:c1:86:11:78:d3:7c:db:
                    a8:d4:92:ed:52:b3:0b:0a:e9:01:3a:e0:af:45:37:
                    ba:02:4b:31:bd:5c:ba:74:67:c4:49:0c:f6:57:62:
                    57:e5:c8:2e:c8:db:69:e6:70:ad:5f:22:01:a8:db:
                    8a:b1:93:42:62:36:e3:54:39:e6:54:72:57:a1:93:
                    21:43:e1:74:18:10:e6:60:e9:10:46:64:04:56:61:
                    a7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:26:E6:7E:E9:0A:FD:F3:98:AD:60:AE:19:B2:34:9A:55:C2:7F:1C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146710.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:17:d0:88:af:74:9c:ec:aa:36:a4:e5:f2:80:b5:73:2e:c1:
         c4:b2:1b:f8:f6:42:09:db:fc:ef:8b:29:24:cb:6f:1a:77:d5:
         f8:f9:3a:04:b0:b4:cf:20:cb:b8:53:4c:5c:8b:47:a1:aa:cb:
         92:90:c3:51:21:0c:df:0a:48:77:98:a1:18:4e:78:77:5b:04:
         b0:06:7a:e0:59:81:5c:e1:57:ea:1b:36:a6:2f:09:cb:db:d2:
         a1:58:b2:c3:0f:d5:da:4a:b6:04:51:91:75:b2:22:13:18:c8:
         63:22:cd:c9:aa:cf:dc:ec:d9:8b:8e:2b:b7:49:b1:5e:0e:a0:
         59:25:52:30:85:86:9a:64:69:61:77:16:1b:ae:ca:98:e9:6e:
         99:55:01:3e:2e:b0:30:9f:19:22:88:e0:fd:e9:a7:0d:5d:5b:
         de:bf:31:dd:a5:18:04:f7:b6:b9:18:ed:69:2f:ce:aa:e9:c0:
         68:4a:57:b1:eb:0c:63:9f:3e:d4:6a:3a:c3:22:40:4c:32:00:
         1c:ef:b5:b4:17:c8:db:03:a5:13:09:6e:22:6e:e4:98:93:1b:
         90:00:7c:8d:48:9f:7d:e8:e4:25:a4:fb:bb:c7:08:32:da:86:
         0a:86:d5:d5:3c:00:3e:95:bc:3a:5b:ec:7e:07:e9:5e:f5:53:
         56:d4:4a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:22 2026 by rpki-client