Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146120.roa
File:                     AS146120.roa (raw, json)
Hash identifier:          QuIcSvgsJFB757cZ1FSNZkSwk0lqlYMMheACnqMIZLM=
Subject key identifier:   E1:60:8E:7F:4E:9A:FB:4C:05:B8:CD:62:2F:38:27:36:A1:78:33:4C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       49196D2171C2719488DA386D1DFBAC2B246C5C16
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146120.roa
Signing time:             Tue 26 May 2026 03:16:59 +0000
ROA not before:           Tue 26 May 2026 03:11:59 +0000
ROA not after:            Tue 25 May 2027 03:16:59 +0000
asID:                     146120
IP address blocks:        240a:ad8e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:19:6d:21:71:c2:71:94:88:da:38:6d:1d:fb:ac:2b:24:6c:5c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:59 2026 GMT
            Not After : May 25 03:16:59 2027 GMT
        Subject: CN=E1608E7F4E9AFB4C05B8CD622F382736A178334C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7a:74:72:5a:5f:5f:f5:5a:8b:b3:0c:93:20:
                    b0:f2:4a:a1:66:14:81:d7:1d:ca:80:b6:01:02:05:
                    6c:eb:71:1a:60:f1:70:41:5f:68:3c:f8:98:39:27:
                    43:ea:82:73:51:5e:5f:e1:12:11:b9:97:ac:61:97:
                    36:d2:b9:a5:81:c9:a4:95:b1:c1:90:fa:d2:4c:b6:
                    bf:9f:7e:30:62:a8:b1:29:a7:8f:fa:d1:e9:d2:22:
                    52:9e:b0:ad:9b:24:4e:52:ee:7d:e1:d7:39:9c:e5:
                    f7:c1:a4:53:5b:1b:1c:b3:77:cc:ef:22:30:55:93:
                    da:cb:af:09:a8:cc:d5:d0:a1:c2:b3:4e:e2:34:01:
                    b4:50:16:b7:1e:e1:b3:55:f1:cf:14:39:07:d6:80:
                    d8:79:a1:95:47:e9:1f:03:6a:33:40:28:b3:48:cf:
                    ab:ff:79:ee:b2:a0:be:ce:44:6e:4d:04:4f:dc:79:
                    45:39:ee:af:b0:44:23:af:5e:b3:49:82:e8:f3:98:
                    ac:bf:7b:e1:1c:f3:0f:c0:fe:9b:e5:0f:c6:c8:0c:
                    5e:fa:43:62:87:c7:eb:42:ea:12:6b:a6:f0:89:0d:
                    aa:a4:18:f4:c6:bf:aa:1c:51:c2:8a:c6:a8:a6:a3:
                    4a:69:98:e2:61:bf:c0:c9:ed:06:d2:25:6e:39:88:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:60:8E:7F:4E:9A:FB:4C:05:B8:CD:62:2F:38:27:36:A1:78:33:4C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146120.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad8e::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:78:91:ee:86:fd:6a:76:f5:b6:a8:49:17:6a:f2:f5:ef:
         8c:4d:19:b5:8b:f4:c2:84:46:19:3f:5b:40:62:44:88:04:fc:
         d9:77:64:14:15:e9:ad:df:ca:25:9c:4e:29:51:46:31:fc:96:
         97:a6:50:bb:e1:3f:29:15:93:f7:e4:0b:f9:47:2d:73:ac:e2:
         3b:6b:85:b6:38:2f:fd:2d:18:45:0b:11:62:73:0b:46:23:6d:
         fc:1e:1b:0d:de:ae:5a:28:37:41:2e:ca:16:8b:3b:ab:bb:19:
         dd:02:b0:44:f3:66:c2:94:10:fb:a6:6c:e8:61:35:4a:bd:0e:
         46:f1:81:28:84:8c:4b:23:aa:d7:c5:f3:8c:86:1c:dc:a4:4c:
         08:36:27:19:15:e8:bb:f4:40:13:7c:fa:08:39:67:8d:82:f5:
         f0:7f:29:24:11:7f:fb:6b:f2:be:8b:de:28:6c:9f:72:5d:91:
         21:cb:02:6b:6e:b5:9b:db:e3:02:42:e2:38:f5:a0:51:05:b0:
         1e:51:35:21:a8:15:36:c6:95:ab:0e:58:aa:33:16:28:9b:78:
         3f:cc:46:7d:0a:48:18:b5:74:42:20:b1:34:e2:f3:52:16:6e:
         df:92:7a:8f:5e:ac:21:20:f0:a6:f7:1c:90:df:95:f3:2a:53:
         19:21:13:af
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSRltIXHCcZSI2jhtHfusKyRsXBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNTlaFw0yNzA1MjUwMzE2NTlaMDMxMTAvBgNV
BAMTKEUxNjA4RTdGNEU5QUZCNEMwNUI4Q0Q2MjJGMzgyNzM2QTE3ODMzNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZenRyWl9f9VqLswyTILDySqFm
FIHXHcqAtgECBWzrcRpg8XBBX2g8+Jg5J0PqgnNRXl/hEhG5l6xhlzbSuaWByaSV
scGQ+tJMtr+ffjBiqLEpp4/60enSIlKesK2bJE5S7n3h1zmc5ffBpFNbGxyzd8zv
IjBVk9rLrwmozNXQocKzTuI0AbRQFrce4bNV8c8UOQfWgNh5oZVH6R8DajNAKLNI
z6v/ee6yoL7ORG5NBE/ceUU57q+wRCOvXrNJgujzmKy/e+Ec8w/A/pvlD8bIDF76
Q2KHx+tC6hJrpvCJDaqkGPTGv6ocUcKKxqimo0ppmOJhv8DJ7QbSJW45iKM7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU4WCOf06a+0wFuM1iLzgnNqF4M0wwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtjjANBgkqhkiG9w0BAQsFAAOCAQEAIh94
ke6G/Wp29baoSRdq8vXvjE0ZtYv0woRGGT9bQGJEiAT82XdkFBXprd/KJZxOKVFG
MfyWl6ZQu+E/KRWT9+QL+Uctc6ziO2uFtjgv/S0YRQsRYnMLRiNt/B4bDd6uWig3
QS7KFos7q7sZ3QKwRPNmwpQQ+6Zs6GE1Sr0ORvGBKISMSyOq18XzjIYc3KRMCDYn
GRXou/RAE3z6CDlnjYL18H8pJBF/+2vyvoveKGyfcl2RIcsCa261m9vjAkLiOPWg
UQWwHlE1IagVNsaVqw5YqjMWKJt4P8xGfQpIGLV0QiCxNOLzUhZu35J6j16sISDw
pvcckN+V8ypTGSETrw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:03 2026 by rpki-client