Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146191.roa
File:                     AS146191.roa (raw, json)
Hash identifier:          lxWn8vLHlIQXL0gf3sMR3OoDtcQ0rNTHhO64FRqo1T0=
Subject key identifier:   2C:8B:4A:6F:87:2A:79:70:5E:A0:F3:64:34:03:87:9E:6D:0E:7E:30
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2830A811077386A165677606DAAE5CDEE114B917
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146191.roa
Signing time:             Tue 26 May 2026 06:30:33 +0000
ROA not before:           Tue 26 May 2026 06:25:33 +0000
ROA not after:            Tue 25 May 2027 06:30:33 +0000
asID:                     146191
IP address blocks:        240a:add5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:30:a8:11:07:73:86:a1:65:67:76:06:da:ae:5c:de:e1:14:b9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:33 2026 GMT
            Not After : May 25 06:30:33 2027 GMT
        Subject: CN=2C8B4A6F872A79705EA0F3643403879E6D0E7E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:9a:2d:77:51:aa:ce:44:53:93:db:79:3f:
                    b0:23:88:4a:9b:e3:df:86:df:10:21:63:84:1c:a0:
                    14:a8:e2:a7:86:c2:26:31:3f:ef:33:f3:4c:b4:5b:
                    9b:81:16:0f:d8:bf:06:6e:16:19:96:65:83:27:76:
                    a1:3d:ad:0d:9b:35:5a:71:63:f6:25:08:1a:30:30:
                    82:19:b9:27:fe:f1:bb:1f:f7:8b:f7:49:3a:46:e4:
                    8c:49:0e:41:c7:17:17:25:f0:83:65:df:83:5b:b3:
                    47:ea:5e:2c:42:ba:79:fa:fd:e0:60:16:f2:0f:49:
                    37:03:dc:a7:b2:13:c8:15:df:da:b8:4e:5f:43:c2:
                    7d:4f:51:57:75:f5:15:3c:59:a2:13:d6:88:9d:58:
                    e5:45:fd:81:65:be:dc:95:ec:a1:60:46:0c:80:b9:
                    82:8b:83:56:d6:f7:49:ef:ba:fa:c7:6c:14:24:e8:
                    3f:0b:34:c8:60:91:e9:63:58:5f:6f:68:d3:66:e6:
                    ef:68:1b:dc:f5:33:4a:1a:b1:4c:a2:3b:26:f9:c2:
                    0f:94:9e:49:71:2d:fd:66:6f:ff:6a:cf:af:52:b2:
                    e1:69:bd:5a:7c:ca:99:e8:51:b4:25:b0:65:8c:b0:
                    34:e0:29:33:99:c6:d8:5e:8d:4c:3d:c1:24:0d:d0:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8B:4A:6F:87:2A:79:70:5E:A0:F3:64:34:03:87:9E:6D:0E:7E:30
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146191.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:add5::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:73:21:34:ed:39:1b:a5:05:b2:34:42:46:78:33:e1:1d:5c:
         73:35:7d:8a:cf:c7:f5:81:fa:6a:bd:e2:52:92:21:0d:cc:50:
         3f:06:10:63:35:fd:f5:c9:a3:7a:d7:e5:aa:99:ee:a0:84:2e:
         dc:7a:d5:c6:2b:c5:b8:ad:2a:7c:6a:cc:ac:98:9e:12:b9:e8:
         a3:06:4c:78:30:0f:3a:24:f5:87:6d:85:bb:aa:02:d8:65:ab:
         d1:73:8b:22:a2:b2:fe:28:d0:0a:d0:7a:79:50:2d:cc:39:ba:
         cd:37:85:4b:52:b9:af:00:08:d9:0a:6f:c4:7c:32:db:6e:e6:
         80:fd:db:f5:d7:ad:41:ac:9e:f8:0a:33:3e:8c:8f:6d:81:b8:
         6f:e2:91:4c:90:6d:b5:42:09:e0:8a:d7:ee:b9:7e:e8:10:52:
         fd:6f:6e:4c:63:30:ac:c4:ad:0e:1f:b4:66:14:49:fe:aa:0d:
         0c:3f:f2:6a:48:3b:20:28:9b:bd:e0:34:50:10:91:53:73:a0:
         ea:31:3e:56:a5:d5:92:2f:05:a9:46:b6:5b:e4:d5:f6:db:c7:
         74:f9:3d:48:c4:cc:9e:f4:89:a6:7f:e4:20:39:29:f5:f6:e6:
         d2:b6:9b:e2:6b:ba:bb:ac:5d:5b:92:5a:62:c4:3a:75:88:b7:
         0c:38:38:55
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKDCoEQdzhqFlZ3YG2q5c3uEUuRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1MzNaFw0yNzA1MjUwNjMwMzNaMDMxMTAvBgNV
BAMTKDJDOEI0QTZGODcyQTc5NzA1RUEwRjM2NDM0MDM4NzlFNkQwRTdFMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Ipotd1GqzkRTk9t5P7AjiEqb
49+G3xAhY4QcoBSo4qeGwiYxP+8z80y0W5uBFg/YvwZuFhmWZYMndqE9rQ2bNVpx
Y/YlCBowMIIZuSf+8bsf94v3STpG5IxJDkHHFxcl8INl34Nbs0fqXixCunn6/eBg
FvIPSTcD3KeyE8gV39q4Tl9Dwn1PUVd19RU8WaIT1oidWOVF/YFlvtyV7KFgRgyA
uYKLg1bW90nvuvrHbBQk6D8LNMhgkeljWF9vaNNm5u9oG9z1M0oasUyiOyb5wg+U
nklxLf1mb/9qz69SsuFpvVp8ypnoUbQlsGWMsDTgKTOZxthejUw9wSQN0PrFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULItKb4cqeXBeoPNkNAOHnm0OfjAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTkxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt1TANBgkqhkiG9w0BAQsFAAOCAQEAVXMh
NO05G6UFsjRCRngz4R1cczV9is/H9YH6ar3iUpIhDcxQPwYQYzX99cmjetflqpnu
oIQu3HrVxivFuK0qfGrMrJieErnoowZMeDAPOiT1h22Fu6oC2GWr0XOLIqKy/ijQ
CtB6eVAtzDm6zTeFS1K5rwAI2QpvxHwy227mgP3b9detQaye+AozPoyPbYG4b+KR
TJBttUIJ4IrX7rl+6BBS/W9uTGMwrMStDh+0ZhRJ/qoNDD/yakg7ICibveA0UBCR
U3Og6jE+VqXVki8FqUa2W+TV9tvHdPk9SMTMnvSJpn/kIDkp9fbm0rab4mu6u6xd
W5JaYsQ6dYi3DDg4VQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:41 2026 by rpki-client