Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146180.roa
File:                     AS146180.roa (raw, json)
Hash identifier:          GAZP/JhfzghH7m/xHdsQ4p8CXMsQYg7E4J8dPRKrgUo=
Subject key identifier:   19:44:9B:47:70:31:9F:AD:91:3E:53:91:7B:10:59:34:41:38:07:86
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       65E74B80C79E0F99DF4F20700AF47CEBD3D375BE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146180.roa
Signing time:             Fri 22 May 2026 07:40:59 +0000
ROA not before:           Fri 22 May 2026 07:35:59 +0000
ROA not after:            Fri 21 May 2027 07:40:59 +0000
asID:                     146180
IP address blocks:        240a:adca::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e7:4b:80:c7:9e:0f:99:df:4f:20:70:0a:f4:7c:eb:d3:d3:75:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:59 2026 GMT
            Not After : May 21 07:40:59 2027 GMT
        Subject: CN=19449B4770319FAD913E53917B10593441380786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:4a:3d:20:12:42:b8:73:ab:80:51:b2:df:
                    a7:c3:1c:12:87:84:0a:39:74:e0:0d:c6:26:9a:fa:
                    dd:f0:70:1c:0c:48:ee:18:d9:c2:5b:ab:a0:68:86:
                    66:a4:d8:95:62:06:54:75:d4:b8:23:64:30:3c:d6:
                    ad:a6:bd:53:48:9c:94:c8:d1:55:83:41:fe:80:a9:
                    9e:5e:a2:73:3b:1a:ac:8f:f6:47:63:7e:e0:fd:52:
                    74:47:81:ad:df:c0:ae:ff:06:4f:c3:04:30:19:0f:
                    c4:71:ef:82:bd:0f:d3:a3:74:9f:cc:2f:9a:76:7f:
                    b9:63:8b:35:79:d9:70:f1:5f:87:1b:c5:bc:9c:94:
                    cb:e4:00:49:85:b3:46:4c:90:49:f8:a2:26:57:9a:
                    7b:52:7f:9f:ab:55:8d:04:e2:78:cd:59:0e:30:04:
                    c1:4e:b7:95:db:53:0d:d9:f9:03:e4:eb:0b:c6:59:
                    38:ff:31:e3:4b:da:ba:c7:d7:e0:07:dd:af:70:9a:
                    0e:10:a0:d7:51:1a:e6:e6:a8:c5:0a:11:2d:e7:95:
                    3d:7e:ca:9e:9c:7e:23:27:3d:fd:99:1f:ec:0e:55:
                    46:ad:8c:96:4c:55:3c:b5:0d:92:d5:c0:5d:ab:45:
                    5a:3e:e8:3d:3f:fd:38:23:b6:54:50:4a:d5:dc:50:
                    b5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:44:9B:47:70:31:9F:AD:91:3E:53:91:7B:10:59:34:41:38:07:86
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146180.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adca::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:e4:9a:84:78:b4:86:cb:05:5a:d9:f5:fe:3f:87:a4:20:61:
         b1:a9:50:39:a8:9d:6a:a4:46:d4:83:ff:7e:d6:44:ee:25:1d:
         69:7a:46:d6:be:86:c8:79:e4:5c:33:b9:0a:c0:1c:66:83:89:
         ec:91:ee:ed:71:e0:26:2d:1c:c6:55:7d:ce:6b:52:34:4c:f5:
         22:e1:d7:78:b3:03:d2:0a:74:37:52:08:17:56:b5:59:be:d8:
         77:8c:3a:22:ef:1a:70:c8:98:f2:38:b9:eb:9d:f3:2c:d0:c7:
         bd:ba:52:d4:70:00:ce:ae:da:ff:6d:c4:f0:c7:8f:d5:c1:6f:
         5e:f1:4a:10:0c:9f:6a:8b:5e:d9:f8:cf:b6:b7:1f:78:9f:de:
         01:52:3f:e8:b7:0b:f7:76:de:ae:de:26:24:67:53:63:04:bb:
         da:b8:a3:b7:d6:b5:2f:bf:5e:e1:9f:5c:b7:9c:6b:8e:02:b3:
         e6:c1:8a:fe:34:a3:7e:7c:37:01:17:3b:0d:0a:75:b4:a0:ee:
         37:d4:3c:ca:16:46:44:8f:85:44:dd:e9:91:67:41:65:51:b9:
         3a:56:20:d6:14:f1:23:40:3b:9e:19:88:a7:1e:47:ef:bd:bc:
         f9:54:36:99:e5:35:35:c8:f2:4e:cc:bf:cd:e2:90:d2:ff:72:
         a7:cb:4b:35
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZedLgMeeD5nfTyBwCvR869PTdb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM1NTlaFw0yNzA1MjEwNzQwNTlaMDMxMTAvBgNV
BAMTKDE5NDQ5QjQ3NzAzMTlGQUQ5MTNFNTM5MTdCMTA1OTM0NDEzODA3ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXj0o9IBJCuHOrgFGy36fDHBKH
hAo5dOANxiaa+t3wcBwMSO4Y2cJbq6Bohmak2JViBlR11LgjZDA81q2mvVNInJTI
0VWDQf6AqZ5eonM7GqyP9kdjfuD9UnRHga3fwK7/Bk/DBDAZD8Rx74K9D9OjdJ/M
L5p2f7ljizV52XDxX4cbxbyclMvkAEmFs0ZMkEn4oiZXmntSf5+rVY0E4njNWQ4w
BMFOt5XbUw3Z+QPk6wvGWTj/MeNL2rrH1+AH3a9wmg4QoNdRGubmqMUKES3nlT1+
yp6cfiMnPf2ZH+wOVUatjJZMVTy1DZLVwF2rRVo+6D0//TgjtlRQStXcULWtAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUGUSbR3Axn62RPlORexBZNEE4B4YwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTgwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtyjANBgkqhkiG9w0BAQsFAAOCAQEADuSa
hHi0hssFWtn1/j+HpCBhsalQOaidaqRG1IP/ftZE7iUdaXpG1r6GyHnkXDO5CsAc
ZoOJ7JHu7XHgJi0cxlV9zmtSNEz1IuHXeLMD0gp0N1IIF1a1Wb7Yd4w6Iu8acMiY
8ji5653zLNDHvbpS1HAAzq7a/23E8MeP1cFvXvFKEAyfaote2fjPtrcfeJ/eAVI/
6LcL93bert4mJGdTYwS72rijt9a1L79e4Z9ct5xrjgKz5sGK/jSjfnw3ARc7DQp1
tKDuN9Q8yhZGRI+FRN3pkWdBZVG5OlYg1hTxI0A7nhmIpx5H7728+VQ2meU1Ncjy
Tsy/zeKQ0v9yp8tLNQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client