Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146223.roa
File:                     AS146223.roa (raw, json)
Hash identifier:          x7QYeGhjzVkG1a/sHsJ0mBX1cjR41ezxXTLKXaWQBSU=
Subject key identifier:   B0:AA:ED:8B:47:63:F1:45:38:48:A0:35:FD:6D:B7:E8:02:DE:4A:D9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0BBB221E7CB92F989EC0692B18429801F3D099F9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146223.roa
Signing time:             Mon 25 May 2026 06:28:19 +0000
ROA not before:           Mon 25 May 2026 06:23:19 +0000
ROA not after:            Mon 24 May 2027 06:28:19 +0000
asID:                     146223
IP address blocks:        240a:adf5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bb:22:1e:7c:b9:2f:98:9e:c0:69:2b:18:42:98:01:f3:d0:99:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:19 2026 GMT
            Not After : May 24 06:28:19 2027 GMT
        Subject: CN=B0AAED8B4763F1453848A035FD6DB7E802DE4AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:86:76:67:f5:cd:b6:2f:b9:fd:d5:63:03:e2:
                    fe:b5:04:9c:a0:79:af:f5:76:a9:bd:22:5c:aa:8e:
                    89:46:d3:3f:fe:f6:18:57:e6:20:4e:b0:77:92:f6:
                    6e:0d:a2:6a:85:2b:ce:dd:91:3f:4e:39:65:80:25:
                    b5:fa:fe:4d:54:ce:b8:5b:f2:38:d7:2c:0c:cb:bd:
                    bf:69:19:d0:3e:c2:5e:71:fc:4b:55:00:ea:38:7e:
                    bb:2a:81:93:d1:24:7e:a9:4d:8b:bf:a9:93:4e:a6:
                    cb:01:f6:c4:98:eb:af:69:fc:7c:2d:66:74:77:70:
                    30:d4:20:be:e2:56:92:dc:4d:f7:87:40:c7:ed:19:
                    90:1c:8b:e4:5a:b2:8f:49:0f:79:38:37:75:09:45:
                    79:15:95:15:f1:99:f3:5b:53:87:4b:37:eb:9b:71:
                    98:0a:4f:ec:a6:e5:be:73:01:b7:84:6a:82:f2:de:
                    3e:e0:7f:df:1f:d0:c6:2e:e0:69:40:c1:10:d0:35:
                    4f:20:f7:e4:77:79:ae:94:50:6b:4f:0a:9d:d1:0f:
                    ad:bd:a5:4c:5e:8c:bf:f8:69:b2:14:da:76:bb:9f:
                    8a:f5:a9:d5:28:8a:e0:2a:35:4a:ab:3e:a8:3d:92:
                    d5:bf:6f:35:f0:c4:05:01:2a:a2:38:e2:4c:65:03:
                    80:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AA:ED:8B:47:63:F1:45:38:48:A0:35:FD:6D:B7:E8:02:DE:4A:D9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146223.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adf5::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:ab:15:cc:3b:13:dc:52:53:38:96:8b:9c:f9:7a:54:a8:60:
         fd:65:eb:85:79:52:d1:67:f7:a4:58:48:b9:bd:9c:ec:1b:75:
         19:d5:08:4d:52:d4:76:78:27:25:b3:41:71:dd:9e:5a:b5:b4:
         81:b3:25:b0:45:b2:15:78:e3:3c:1b:42:1b:47:f7:46:3f:56:
         f3:08:76:76:ae:d6:22:a3:d6:fb:d9:67:21:19:c6:5b:bf:4a:
         4d:fe:99:e2:3d:77:31:05:f5:c5:ec:23:52:b7:10:d6:43:01:
         ea:5c:35:9c:84:a8:e7:b9:08:e5:f2:82:39:f7:57:cd:0e:b9:
         90:df:94:35:4d:7b:3d:79:3f:d6:24:c6:8a:1a:37:91:55:0b:
         33:f4:92:35:ab:59:c3:88:14:95:15:ab:24:55:ec:8d:da:b7:
         3b:95:83:1d:13:d7:31:ac:ba:4c:65:ad:63:bb:35:14:36:db:
         e4:06:d5:ed:6e:db:2a:e8:5b:32:84:04:bb:e8:c8:93:41:10:
         8b:0c:9c:57:8b:6a:ca:39:c1:35:34:50:12:36:ab:3c:19:23:
         29:02:34:47:ac:55:60:14:9b:2b:81:2a:cf:90:42:41:6c:cc:
         50:fb:0f:69:07:29:a2:d8:b9:90:3e:5a:19:99:84:09:74:b7:
         4a:39:bb:22
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUC7siHny5L5iewGkrGEKYAfPQmfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMTlaFw0yNzA1MjQwNjI4MTlaMDMxMTAvBgNV
BAMTKEIwQUFFRDhCNDc2M0YxNDUzODQ4QTAzNUZENkRCN0U4MDJERTRBRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzhnZn9c22L7n91WMD4v61BJyg
ea/1dqm9IlyqjolG0z/+9hhX5iBOsHeS9m4NomqFK87dkT9OOWWAJbX6/k1Uzrhb
8jjXLAzLvb9pGdA+wl5x/EtVAOo4frsqgZPRJH6pTYu/qZNOpssB9sSY669p/Hwt
ZnR3cDDUIL7iVpLcTfeHQMftGZAci+Raso9JD3k4N3UJRXkVlRXxmfNbU4dLN+ub
cZgKT+ym5b5zAbeEaoLy3j7gf98f0MYu4GlAwRDQNU8g9+R3ea6UUGtPCp3RD629
pUxejL/4abIU2na7n4r1qdUoiuAqNUqrPqg9ktW/bzXwxAUBKqI44kxlA4AvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUsKrti0dj8UU4SKA1/W236ALeStkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt9TANBgkqhkiG9w0BAQsFAAOCAQEAmasV
zDsT3FJTOJaLnPl6VKhg/WXrhXlS0Wf3pFhIub2c7Bt1GdUITVLUdngnJbNBcd2e
WrW0gbMlsEWyFXjjPBtCG0f3Rj9W8wh2dq7WIqPW+9lnIRnGW79KTf6Z4j13MQX1
xewjUrcQ1kMB6lw1nISo57kI5fKCOfdXzQ65kN+UNU17PXk/1iTGiho3kVULM/SS
NatZw4gUlRWrJFXsjdq3O5WDHRPXMay6TGWtY7s1FDbb5AbV7W7bKuhbMoQEu+jI
k0EQiwycV4tqyjnBNTRQEjarPBkjKQI0R6xVYBSbK4Eqz5BCQWzMUPsPaQcpoti5
kD5aGZmECXS3Sjm7Ig==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:58 2026 by rpki-client