Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146195.roa
File:                     AS146195.roa (raw, json)
Hash identifier:          qLQE1WxdCO4iKqW2C0MBo5VPGbB0EBaWGKl55sd4igA=
Subject key identifier:   EE:21:90:01:FA:56:15:06:5C:B1:CF:ED:09:BA:72:71:3E:23:82:8A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       030B2692F2267D1357506785CBE1B6149EA1AEF5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146195.roa
Signing time:             Fri 22 May 2026 07:32:03 +0000
ROA not before:           Fri 22 May 2026 07:27:03 +0000
ROA not after:            Fri 21 May 2027 07:32:03 +0000
asID:                     146195
IP address blocks:        240a:add9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0b:26:92:f2:26:7d:13:57:50:67:85:cb:e1:b6:14:9e:a1:ae:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:03 2026 GMT
            Not After : May 21 07:32:03 2027 GMT
        Subject: CN=EE219001FA5615065CB1CFED09BA72713E23828A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:32:14:71:de:cd:3e:fc:3a:1c:7c:1b:b4:
                    63:da:15:f1:bc:32:31:16:ec:b0:1f:8b:6b:56:28:
                    16:4c:52:14:07:27:b1:0e:31:97:9b:44:20:12:c4:
                    76:2d:d8:aa:28:5e:23:ab:b7:b9:1b:2f:a7:e7:6c:
                    89:f8:08:b0:74:29:5f:1b:6d:5a:58:73:a2:cd:1c:
                    67:e4:e4:83:9d:b6:cf:d5:53:e8:3e:5a:ee:22:61:
                    e6:9e:08:59:57:c8:fe:92:1b:c6:df:31:0d:95:b8:
                    b5:e1:e5:0b:c1:1c:c6:db:68:d6:bf:70:d0:50:b5:
                    3e:99:da:fc:2f:a6:7f:44:d8:e3:3d:bd:59:9c:51:
                    db:9c:3b:06:d6:fa:bf:36:06:a0:fa:c2:5a:68:67:
                    91:28:1a:9a:c5:ef:ff:3b:79:f8:6d:71:4e:77:7b:
                    cd:b9:76:ce:b2:f7:ee:f1:92:09:c2:f8:0a:49:4a:
                    54:c9:56:88:c8:15:4e:25:17:92:6c:1d:df:dc:40:
                    91:d9:d9:03:68:87:85:9a:76:52:1c:ea:fa:b3:35:
                    bb:e5:44:c2:00:76:ad:a4:d2:3d:9b:1a:01:b4:f5:
                    55:0c:eb:c9:00:62:01:45:13:45:4c:7f:2b:1e:e9:
                    76:6c:08:1b:03:c1:d8:8a:39:e3:ad:0d:43:27:70:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:21:90:01:FA:56:15:06:5C:B1:CF:ED:09:BA:72:71:3E:23:82:8A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146195.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:add9::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:05:28:19:e9:cc:9f:78:76:b6:e6:4b:ee:0b:c3:f5:fc:35:
         35:29:e1:3b:81:44:b0:6a:a0:a5:ff:33:95:0d:29:dd:2f:37:
         5b:b9:d2:8d:51:89:e2:78:5e:76:df:22:60:3a:b6:4b:54:b5:
         c2:bb:07:6c:bf:9b:43:90:cb:53:d4:31:46:32:fb:ad:15:4a:
         14:52:a8:30:3b:96:9d:05:a3:d3:2a:bc:ed:c5:78:c6:3f:ef:
         b6:a6:ec:b0:24:f7:57:dc:09:d7:00:69:c5:5c:29:8b:f0:63:
         db:e3:9c:69:d4:f1:e5:4f:9b:dc:07:87:1d:db:d8:b3:ba:eb:
         8b:b6:39:2a:89:34:64:55:65:0f:52:00:f3:a9:89:8f:00:b4:
         c4:d9:b6:8f:c8:bd:8e:fa:ff:56:c5:df:d2:88:c3:4a:40:20:
         2d:ec:35:76:f7:b3:a4:cc:f0:dd:29:b9:48:82:bc:37:16:7e:
         7c:01:3b:b8:05:22:7f:f7:ad:f0:8d:05:0f:61:24:fa:a6:6f:
         56:eb:48:08:eb:5a:ef:99:2b:ee:b0:69:9e:0c:10:0b:95:2f:
         19:fb:3b:e5:e9:1c:2a:89:ea:2c:4b:0b:8c:15:94:7c:fa:79:
         98:de:b9:4c:12:83:38:70:39:0a:6e:56:14:ef:71:fd:a3:44:
         d7:e0:7c:c2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAwsmkvImfRNXUGeFy+G2FJ6hrvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MDNaFw0yNzA1MjEwNzMyMDNaMDMxMTAvBgNV
BAMTKEVFMjE5MDAxRkE1NjE1MDY1Q0IxQ0ZFRDA5QkE3MjcxM0UyMzgyOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvtDIUcd7NPvw6HHwbtGPaFfG8
MjEW7LAfi2tWKBZMUhQHJ7EOMZebRCASxHYt2KooXiOrt7kbL6fnbIn4CLB0KV8b
bVpYc6LNHGfk5IOdts/VU+g+Wu4iYeaeCFlXyP6SG8bfMQ2VuLXh5QvBHMbbaNa/
cNBQtT6Z2vwvpn9E2OM9vVmcUducOwbW+r82BqD6wlpoZ5EoGprF7/87efhtcU53
e825ds6y9+7xkgnC+ApJSlTJVojIFU4lF5JsHd/cQJHZ2QNoh4WadlIc6vqzNbvl
RMIAdq2k0j2bGgG09VUM68kAYgFFE0VMfyse6XZsCBsDwdiKOeOtDUMncMvFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU7iGQAfpWFQZcsc/tCbpycT4jgoowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt2TANBgkqhkiG9w0BAQsFAAOCAQEAuAUo
GenMn3h2tuZL7gvD9fw1NSnhO4FEsGqgpf8zlQ0p3S83W7nSjVGJ4nhedt8iYDq2
S1S1wrsHbL+bQ5DLU9QxRjL7rRVKFFKoMDuWnQWj0yq87cV4xj/vtqbssCT3V9wJ
1wBpxVwpi/Bj2+OcadTx5U+b3AeHHdvYs7rri7Y5Kok0ZFVlD1IA86mJjwC0xNm2
j8i9jvr/VsXf0ojDSkAgLew1dvezpMzw3Sm5SIK8NxZ+fAE7uAUif/et8I0FD2Ek
+qZvVutICOta75kr7rBpngwQC5UvGfs75ekcKonqLEsLjBWUfPp5mN65TBKDOHA5
Cm5WFO9x/aNE1+B8wg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:28 2026 by rpki-client