Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146092.roa
File:                     AS146092.roa (raw, json)
Hash identifier:          Fa9FCJ/0lMlkJMEB6flUVkUFUMoJPM+5A4W1G5pMhHw=
Subject key identifier:   D0:71:37:34:93:2D:16:AA:31:AD:A3:1E:42:76:E9:F6:E7:CA:D5:61
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4E5B862380D477D8118E1E6D7D1333F7B8DEB113
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146092.roa
Signing time:             Fri 22 May 2026 07:24:24 +0000
ROA not before:           Fri 22 May 2026 07:19:24 +0000
ROA not after:            Fri 21 May 2027 07:24:24 +0000
asID:                     146092
IP address blocks:        240a:ad72::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5b:86:23:80:d4:77:d8:11:8e:1e:6d:7d:13:33:f7:b8:de:b1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:24 2026 GMT
            Not After : May 21 07:24:24 2027 GMT
        Subject: CN=D0713734932D16AA31ADA31E4276E9F6E7CAD561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9f:22:fe:9d:1c:83:8d:5f:d8:d4:05:67:2f:
                    b4:84:5d:c3:5d:d7:c7:56:4d:7a:b3:6e:5c:5f:26:
                    53:e8:51:23:c8:09:9d:1e:84:f3:52:bf:66:60:9d:
                    8f:e6:0c:3e:66:cf:27:14:a8:f2:e0:87:87:6c:a8:
                    5c:f3:9e:27:c7:6d:fd:3a:3c:74:a1:5a:f1:d4:73:
                    52:48:15:8f:2a:6f:1e:5d:e5:7d:fc:f1:ea:a7:24:
                    5f:a0:8b:ad:fb:be:9d:27:fe:c4:56:4d:68:3e:90:
                    2b:b3:5f:21:05:9f:e5:c7:49:79:33:4a:8e:64:a3:
                    cc:3d:ae:67:4a:b0:ad:85:07:84:f0:6b:4a:2e:d7:
                    3b:22:aa:ae:ff:4f:51:aa:35:99:ea:1a:43:d9:75:
                    5b:5d:e8:85:5a:41:39:ce:7f:24:5c:16:e5:27:76:
                    c8:1e:9b:3f:3b:58:da:89:9a:4a:35:1b:0e:d6:e9:
                    a8:af:83:ea:bf:29:e7:07:09:b6:f8:c5:4a:52:8d:
                    12:44:af:2d:e7:e8:e1:cb:fb:f1:f5:21:38:aa:76:
                    30:fd:81:a4:64:51:27:58:f0:fb:78:32:b6:8f:16:
                    aa:01:e2:02:2a:6c:57:5e:a8:59:2a:70:c8:62:e2:
                    c6:92:cd:b2:73:3b:b4:65:67:86:80:f7:78:fc:64:
                    8b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:71:37:34:93:2D:16:AA:31:AD:A3:1E:42:76:E9:F6:E7:CA:D5:61
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad72::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:5a:9e:ce:ae:ef:37:d2:9e:0c:03:b1:f7:0a:42:83:3c:cd:
         a5:b1:a2:34:24:b6:25:b3:25:5a:14:7a:47:12:09:3b:db:67:
         e3:50:18:bd:b2:39:4c:1f:b1:80:e2:f2:d1:6e:ad:e3:c0:66:
         0a:4a:07:42:7b:f8:50:95:14:39:58:91:1d:d8:f3:80:b1:74:
         24:1a:5d:b1:77:79:3b:8e:2c:0d:71:55:3c:cd:18:d6:00:63:
         a6:62:c8:d7:79:74:03:08:56:79:68:b4:8c:5a:52:55:d6:c3:
         7f:21:7c:bb:64:2f:25:ef:36:85:25:11:fb:ea:32:92:6d:92:
         c4:42:f2:fc:48:d7:cd:cc:1f:8f:d8:a1:42:47:4b:a4:50:2e:
         5c:a5:a4:0c:29:d6:3d:26:27:40:59:e9:e0:d7:03:c6:e5:9b:
         ad:af:14:84:79:47:dc:3b:d9:88:29:6f:cb:ea:07:86:7e:73:
         e8:a3:40:19:e7:53:4f:4a:5a:af:a4:ca:6e:b6:06:a5:96:4c:
         17:fa:91:9f:87:b8:cf:43:29:4b:ab:d8:9e:3f:66:2f:7e:a0:
         41:0b:d5:d6:df:27:ac:e4:16:27:38:e6:5a:d6:10:bc:bd:0c:
         6f:06:bf:58:af:2f:a0:e7:49:fe:d4:65:4c:00:35:6e:8e:88:
         5b:f9:fb:a2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTluGI4DUd9gRjh5tfRMz97jesRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5MjRaFw0yNzA1MjEwNzI0MjRaMDMxMTAvBgNV
BAMTKEQwNzEzNzM0OTMyRDE2QUEzMUFEQTMxRTQyNzZFOUY2RTdDQUQ1NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWnyL+nRyDjV/Y1AVnL7SEXcNd
18dWTXqzblxfJlPoUSPICZ0ehPNSv2ZgnY/mDD5mzycUqPLgh4dsqFzznifHbf06
PHShWvHUc1JIFY8qbx5d5X388eqnJF+gi637vp0n/sRWTWg+kCuzXyEFn+XHSXkz
So5ko8w9rmdKsK2FB4Twa0ou1zsiqq7/T1GqNZnqGkPZdVtd6IVaQTnOfyRcFuUn
dsgemz87WNqJmko1Gw7W6aivg+q/KecHCbb4xUpSjRJEry3n6OHL+/H1ITiqdjD9
gaRkUSdY8Pt4MraPFqoB4gIqbFdeqFkqcMhi4saSzbJzO7RlZ4aA93j8ZIs7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU0HE3NJMtFqoxraMeQnbp9ufK1WEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MDkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtcjANBgkqhkiG9w0BAQsFAAOCAQEAYVqe
zq7vN9KeDAOx9wpCgzzNpbGiNCS2JbMlWhR6RxIJO9tn41AYvbI5TB+xgOLy0W6t
48BmCkoHQnv4UJUUOViRHdjzgLF0JBpdsXd5O44sDXFVPM0Y1gBjpmLI13l0AwhW
eWi0jFpSVdbDfyF8u2QvJe82hSUR++oykm2SxELy/EjXzcwfj9ihQkdLpFAuXKWk
DCnWPSYnQFnp4NcDxuWbra8UhHlH3DvZiClvy+oHhn5z6KNAGedTT0par6TKbrYG
pZZMF/qRn4e4z0MpS6vYnj9mL36gQQvV1t8nrOQWJzjmWtYQvL0Mbwa/WK8voOdJ
/tRlTAA1bo6IW/n7og==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:28 2026 by rpki-client