Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146256.roa
File:                     AS146256.roa (raw, json)
Hash identifier:          C63+EiSCIuafH27iOvUeUdiGTXzKikhTCij56+49k5I=
Subject key identifier:   F9:68:11:33:27:19:F4:1D:A6:5D:39:41:49:B2:7B:4B:14:2F:29:76
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       A12F3079E19FD78DD890E60A1B5DF74CC7CEB0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146256.roa
Signing time:             Mon 25 May 2026 01:20:31 +0000
ROA not before:           Mon 25 May 2026 01:15:31 +0000
ROA not after:            Mon 24 May 2027 01:20:31 +0000
asID:                     146256
IP address blocks:        240a:ae16::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a1:2f:30:79:e1:9f:d7:8d:d8:90:e6:0a:1b:5d:f7:4c:c7:ce:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:31 2026 GMT
            Not After : May 24 01:20:31 2027 GMT
        Subject: CN=F96811332719F41DA65D394149B27B4B142F2976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:eb:aa:27:9e:41:8d:09:6e:f5:55:93:a8:
                    b9:1a:80:ae:46:95:71:86:a9:16:00:5f:23:59:8e:
                    dc:da:f0:17:82:38:a9:d8:9e:43:4b:d6:68:80:0b:
                    21:b2:13:b0:05:c9:f0:5d:b2:e7:31:70:3d:dc:ac:
                    a9:b2:72:11:6b:69:4a:cd:26:51:c2:88:05:d2:b5:
                    26:88:a1:28:f1:2c:92:8d:8b:05:ae:d3:af:f5:d9:
                    ca:70:d4:6b:36:ca:23:6a:dc:5b:e3:8f:06:d2:b7:
                    ed:d4:14:eb:d0:36:d0:df:46:eb:84:16:a2:6e:84:
                    e7:98:3e:6b:c5:02:d4:fb:de:da:3c:82:f7:d6:c5:
                    85:ee:14:b8:24:0c:a0:bd:e8:e5:8b:bf:1f:15:80:
                    9f:98:93:fd:47:b6:0d:57:ac:79:89:91:d1:3c:50:
                    0c:89:ee:e7:0b:aa:5c:7e:4f:cb:2b:0d:87:0d:10:
                    ab:86:26:3f:b3:c9:ef:42:44:97:f8:2f:03:c5:d1:
                    94:13:14:d0:07:a2:a2:c9:c9:46:8c:b1:ac:ed:fa:
                    c1:30:85:6e:1a:c4:0e:d1:30:cd:81:1a:30:60:00:
                    47:04:a9:6d:d1:47:25:7a:df:64:d7:e8:81:5a:84:
                    f3:bf:4f:2a:07:6a:5b:ae:9c:e1:02:27:65:b5:a9:
                    95:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:68:11:33:27:19:F4:1D:A6:5D:39:41:49:B2:7B:4B:14:2F:29:76
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146256.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae16::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:6e:e7:be:97:cc:3b:99:c3:29:19:04:c1:59:18:6b:a1:00:
         5b:90:7b:10:c6:56:a7:69:6a:9e:97:eb:bc:ae:9c:26:b2:45:
         76:38:84:c1:2f:41:bd:25:bb:e4:37:79:54:86:d6:d3:d9:fe:
         b7:d2:4b:21:bb:a0:07:52:a5:b3:b8:35:32:2a:06:80:9a:d6:
         82:b9:fa:ee:15:00:72:69:09:cf:11:b2:e3:77:9e:06:5d:ab:
         ef:c8:51:6f:d9:e3:66:fa:95:19:45:5d:92:76:0c:84:1e:56:
         c6:07:2a:8d:09:84:51:fe:2d:50:d5:f7:da:72:93:fe:71:cb:
         42:93:48:50:e3:b2:1b:45:27:2e:89:b8:18:79:c3:b9:44:02:
         ef:ab:bd:c3:f2:3a:a4:e4:b7:fa:ed:05:67:c4:2a:d4:c5:99:
         12:c2:fa:10:02:13:12:c2:7c:e8:e5:d3:88:34:0f:2c:82:c6:
         ed:ad:0a:b0:39:16:50:9c:f0:48:e3:34:d0:af:5b:b6:1d:3a:
         90:6f:b9:3e:21:da:14:d8:5e:3f:d6:c5:df:77:bf:d6:e1:8a:
         5a:ae:6a:97:ca:8d:a9:38:88:0b:d6:38:32:0f:ae:4c:d2:d7:
         24:0a:b9:88:4a:96:5f:d2:5e:9e:d8:59:74:c6:5a:dc:ee:6e:
         c0:66:09:86
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAKEvMHnhn9eN2JDmChtd90zHzrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MzFaFw0yNzA1MjQwMTIwMzFaMDMxMTAvBgNV
BAMTKEY5NjgxMTMzMjcxOUY0MURBNjVEMzk0MTQ5QjI3QjRCMTQyRjI5NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtauuqJ55BjQlu9VWTqLkagK5G
lXGGqRYAXyNZjtza8BeCOKnYnkNL1miACyGyE7AFyfBdsucxcD3crKmychFraUrN
JlHCiAXStSaIoSjxLJKNiwWu06/12cpw1Gs2yiNq3FvjjwbSt+3UFOvQNtDfRuuE
FqJuhOeYPmvFAtT73to8gvfWxYXuFLgkDKC96OWLvx8VgJ+Yk/1Htg1XrHmJkdE8
UAyJ7ucLqlx+T8srDYcNEKuGJj+zye9CRJf4LwPF0ZQTFNAHoqLJyUaMsazt+sEw
hW4axA7RMM2BGjBgAEcEqW3RRyV632TX6IFahPO/TyoHaluunOECJ2W1qZWnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU+WgRMycZ9B2mXTlBSbJ7SxQvKXYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquFjANBgkqhkiG9w0BAQsFAAOCAQEAim7n
vpfMO5nDKRkEwVkYa6EAW5B7EMZWp2lqnpfrvK6cJrJFdjiEwS9BvSW75Dd5VIbW
09n+t9JLIbugB1Kls7g1MioGgJrWgrn67hUAcmkJzxGy43eeBl2r78hRb9njZvqV
GUVdknYMhB5WxgcqjQmEUf4tUNX32nKT/nHLQpNIUOOyG0UnLom4GHnDuUQC76u9
w/I6pOS3+u0FZ8Qq1MWZEsL6EAITEsJ86OXTiDQPLILG7a0KsDkWUJzwSOM00K9b
th06kG+5PiHaFNheP9bF33e/1uGKWq5ql8qNqTiIC9Y4Mg+uTNLXJAq5iEqWX9Je
nthZdMZa3O5uwGYJhg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:55 2026 by rpki-client