Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146099.roa
File:                     AS146099.roa (raw, json)
Hash identifier:          1FqPp4kJWkbRW94m3fWrTrJuCAyGG8PrppjSK7mUgnA=
Subject key identifier:   F4:5F:12:DB:FF:4D:D0:75:D6:56:85:93:53:17:47:2B:5C:1C:EB:C7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       208E8D4176EB30358995A3F780182906504E4669
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146099.roa
Signing time:             Fri 22 May 2026 06:58:41 +0000
ROA not before:           Fri 22 May 2026 06:53:41 +0000
ROA not after:            Fri 21 May 2027 06:58:41 +0000
asID:                     146099
IP address blocks:        240a:ad79::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8e:8d:41:76:eb:30:35:89:95:a3:f7:80:18:29:06:50:4e:46:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:41 2026 GMT
            Not After : May 21 06:58:41 2027 GMT
        Subject: CN=F45F12DBFF4DD075D65685935317472B5C1CEBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:a7:6a:c4:fb:15:b5:31:42:61:f6:ef:68:
                    6b:b2:21:4f:c7:99:77:df:d7:a5:22:7d:8e:bb:49:
                    1d:14:20:e2:fe:79:fa:71:c4:b5:39:e4:ad:31:72:
                    15:31:00:0e:af:69:43:3b:49:e8:b6:b1:7f:dc:04:
                    b0:29:47:04:aa:7a:24:65:d7:1b:e1:cd:a0:ba:be:
                    53:76:3a:dd:ac:b7:c3:51:1b:81:66:66:db:47:76:
                    87:ea:57:af:31:b0:8e:37:14:1f:48:98:4c:67:f6:
                    b9:15:62:c6:00:51:d2:ca:89:3e:7d:18:c8:0d:22:
                    27:da:10:90:ee:5d:99:98:d9:75:d1:6d:6e:93:bd:
                    18:d3:e2:7e:7c:e6:10:3d:05:9d:4b:52:c2:91:fc:
                    66:e1:a1:f6:72:86:f2:ba:d7:9c:41:e0:da:c2:65:
                    ef:4b:bb:4f:b7:4f:ba:10:0e:d0:31:5c:af:5a:9a:
                    a9:a8:d2:b5:c9:79:4c:5c:ca:c1:20:23:9a:15:14:
                    ed:3f:5e:ad:4c:0c:42:3d:35:f5:3a:f1:1a:31:35:
                    44:48:10:9d:ab:a4:c3:97:5f:2e:1c:47:36:d8:e2:
                    d1:7e:0e:e8:0f:dd:7c:b9:c5:9f:25:86:77:2d:23:
                    4d:42:8c:47:d3:db:13:e4:f7:b9:58:11:37:26:18:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5F:12:DB:FF:4D:D0:75:D6:56:85:93:53:17:47:2B:5C:1C:EB:C7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146099.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad79::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:b7:08:b0:65:28:e4:1b:45:60:d7:98:81:8f:b8:46:6f:c2:
         a6:7c:61:09:6a:7f:79:56:99:4a:2c:06:b0:56:e8:a9:13:c3:
         28:bf:25:7b:38:ca:23:34:4e:65:97:83:40:19:93:a6:8f:15:
         68:5a:61:cc:00:77:20:32:92:8b:2c:a9:e7:aa:7d:fc:68:0e:
         bc:ae:af:ff:a1:52:d8:4a:f3:c6:b0:e2:41:2b:b6:00:70:f5:
         43:b6:c3:e3:49:e3:68:7c:86:c2:d0:74:1d:43:b6:17:3f:1a:
         c2:37:f3:7c:20:5f:6c:19:6f:20:da:71:43:ef:0b:bb:1e:28:
         c0:b6:00:f9:12:1a:6e:25:c6:e5:ed:a4:db:dc:c3:00:af:4e:
         47:8f:a5:ba:90:05:e6:ec:8e:9c:2f:c2:38:ef:f6:ca:c8:f1:
         3b:b7:00:64:ca:b1:70:ee:1d:cf:00:76:6d:22:f4:d4:68:84:
         fb:f7:68:a3:17:a3:3b:82:cc:9a:56:2f:a8:bb:24:23:90:19:
         65:91:61:dc:c2:08:39:cd:db:9a:fc:66:64:1d:ad:79:4d:d8:
         b4:d5:b2:bd:25:b0:63:d1:b8:20:86:14:e3:85:e4:6c:a7:09:
         86:94:33:a5:47:4f:c6:74:b3:06:25:22:12:37:d3:aa:ea:69:
         e5:54:0d:45
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUII6NQXbrMDWJlaP3gBgpBlBORmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzNDFaFw0yNzA1MjEwNjU4NDFaMDMxMTAvBgNV
BAMTKEY0NUYxMkRCRkY0REQwNzVENjU2ODU5MzUzMTc0NzJCNUMxQ0VCQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChgqdqxPsVtTFCYfbvaGuyIU/H
mXff16UifY67SR0UIOL+efpxxLU55K0xchUxAA6vaUM7Sei2sX/cBLApRwSqeiRl
1xvhzaC6vlN2Ot2st8NRG4FmZttHdofqV68xsI43FB9ImExn9rkVYsYAUdLKiT59
GMgNIifaEJDuXZmY2XXRbW6TvRjT4n585hA9BZ1LUsKR/GbhofZyhvK615xB4NrC
Ze9Lu0+3T7oQDtAxXK9amqmo0rXJeUxcysEgI5oVFO0/Xq1MDEI9NfU68RoxNURI
EJ2rpMOXXy4cRzbY4tF+DugP3Xy5xZ8lhnctI01CjEfT2xPk97lYETcmGPrFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU9F8S2/9N0HXWVoWTUxdHK1wc68cwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MDk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqteTANBgkqhkiG9w0BAQsFAAOCAQEAmrcI
sGUo5BtFYNeYgY+4Rm/CpnxhCWp/eVaZSiwGsFboqRPDKL8lezjKIzROZZeDQBmT
po8VaFphzAB3IDKSiyyp56p9/GgOvK6v/6FS2ErzxrDiQSu2AHD1Q7bD40njaHyG
wtB0HUO2Fz8awjfzfCBfbBlvINpxQ+8Lux4owLYA+RIabiXG5e2k29zDAK9OR4+l
upAF5uyOnC/COO/2ysjxO7cAZMqxcO4dzwB2bSL01GiE+/dooxejO4LMmlYvqLsk
I5AZZZFh3MIIOc3bmvxmZB2teU3YtNWyvSWwY9G4IIYU44XkbKcJhpQzpUdPxnSz
BiUiEjfTqupp5VQNRQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:53 2026 by rpki-client