Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146326.roa
File:                     AS146326.roa (raw, json)
Hash identifier:          Ec3Sd5qHstVSv0jViKOBbPmpTg3xKDs3PpXJvnxoACY=
Subject key identifier:   F2:80:F4:03:95:9A:C1:E5:5A:61:9D:29:36:BF:89:B2:81:85:7B:63
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       65918195105BE22C8B88B2FBF4282E98F36207C0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146326.roa
Signing time:             Fri 22 May 2026 07:32:18 +0000
ROA not before:           Fri 22 May 2026 07:27:18 +0000
ROA not after:            Fri 21 May 2027 07:32:18 +0000
asID:                     146326
IP address blocks:        240a:ae5c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:91:81:95:10:5b:e2:2c:8b:88:b2:fb:f4:28:2e:98:f3:62:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:18 2026 GMT
            Not After : May 21 07:32:18 2027 GMT
        Subject: CN=F280F403959AC1E55A619D2936BF89B281857B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:29:84:31:f1:3d:15:78:17:d4:15:5d:ee:
                    53:2b:f3:3a:59:c8:6e:82:cb:90:59:4a:c2:7f:c8:
                    9a:63:1a:1c:7d:6e:10:e1:95:b1:ab:5f:ee:5e:04:
                    b1:27:ea:f5:e4:23:c5:f0:c4:83:42:62:09:7d:51:
                    7d:5b:06:15:1e:36:05:29:40:d5:34:7c:42:b4:b4:
                    fd:6e:29:ef:8e:a2:b3:03:ce:9e:6d:22:87:b9:14:
                    d5:99:5b:cf:0c:52:4f:c4:d1:c3:0f:c7:ac:11:84:
                    ae:a5:6d:fd:24:dd:c2:bf:70:8c:9e:c4:ea:bf:b4:
                    01:50:e0:82:b0:03:71:5b:ae:d1:b7:1a:a5:9e:5b:
                    92:85:bd:c1:ef:a3:44:e9:27:f5:0e:62:10:1f:19:
                    f8:81:af:d5:08:90:cc:d3:86:44:5e:58:97:2b:5d:
                    29:f6:07:72:c2:55:31:33:16:ea:d1:ea:e0:be:04:
                    a1:14:79:41:9a:c8:8e:36:46:c7:62:09:77:bc:2f:
                    d9:d1:29:fa:50:60:27:6a:aa:0f:68:30:b6:91:37:
                    53:e7:8d:16:78:a1:bd:47:ed:26:85:7e:3c:5b:8b:
                    b0:3e:c0:7d:46:05:bd:49:68:90:31:ff:7e:c0:6a:
                    67:95:bc:72:95:cd:ad:79:46:8a:64:9c:21:d2:06:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:80:F4:03:95:9A:C1:E5:5A:61:9D:29:36:BF:89:B2:81:85:7B:63
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146326.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:11:71:31:20:68:52:1b:76:46:fa:81:95:5c:85:61:72:
         2b:5b:78:2d:0f:fd:8a:8e:34:64:57:6a:e9:be:af:da:f7:35:
         12:fd:08:4c:8b:1b:4a:ee:df:96:bf:d9:d7:05:85:94:95:d4:
         36:e8:5f:7a:d2:46:d8:7f:a9:df:ed:8c:4f:bd:da:8f:3b:06:
         cf:09:9a:45:ce:e5:30:12:30:b6:c5:9c:18:e4:c5:f5:4c:8a:
         54:c9:fa:3b:5e:1f:ca:3b:7f:6b:a6:9e:3a:95:8b:83:8a:11:
         46:e8:63:0f:fe:0c:6f:03:3a:c9:3a:0d:6a:c0:ad:b5:41:15:
         d5:2f:bc:cb:0d:9f:8f:02:d7:d4:4d:f8:f6:84:f2:11:31:88:
         78:4c:79:0c:58:1b:b4:ae:58:66:30:91:e2:0a:96:76:51:33:
         a0:90:0c:63:9e:f6:e9:de:3d:b4:99:fd:04:b6:30:08:c1:bc:
         38:39:26:4c:a6:b0:bd:8b:0d:cc:f0:bd:a5:d7:04:15:60:93:
         46:1f:c9:6a:a4:8d:5a:51:98:28:82:49:4c:7e:9c:9a:0f:b9:
         36:5b:ad:e2:5c:79:fa:c6:24:91:ba:76:ae:28:27:04:a0:e8:
         01:dd:bd:a4:e3:20:66:95:57:c4:a7:86:86:82:47:8b:81:db:
         25:4e:ce:45
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZZGBlRBb4iyLiLL79CgumPNiB8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MThaFw0yNzA1MjEwNzMyMThaMDMxMTAvBgNV
BAMTKEYyODBGNDAzOTU5QUMxRTU1QTYxOUQyOTM2QkY4OUIyODE4NTdCNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAymEMfE9FXgX1BVd7lMr8zpZ
yG6Cy5BZSsJ/yJpjGhx9bhDhlbGrX+5eBLEn6vXkI8XwxINCYgl9UX1bBhUeNgUp
QNU0fEK0tP1uKe+OorMDzp5tIoe5FNWZW88MUk/E0cMPx6wRhK6lbf0k3cK/cIye
xOq/tAFQ4IKwA3FbrtG3GqWeW5KFvcHvo0TpJ/UOYhAfGfiBr9UIkMzThkReWJcr
XSn2B3LCVTEzFurR6uC+BKEUeUGayI42RsdiCXe8L9nRKfpQYCdqqg9oMLaRN1Pn
jRZ4ob1H7SaFfjxbi7A+wH1GBb1JaJAx/37AameVvHKVza15RopknCHSBk1VAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU8oD0A5WaweVaYZ0pNr+JsoGFe2MwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzI2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquXDANBgkqhkiG9w0BAQsFAAOCAQEARsUR
cTEgaFIbdkb6gZVchWFyK1t4LQ/9io40ZFdq6b6v2vc1Ev0ITIsbSu7flr/Z1wWF
lJXUNuhfetJG2H+p3+2MT73ajzsGzwmaRc7lMBIwtsWcGOTF9UyKVMn6O14fyjt/
a6aeOpWLg4oRRuhjD/4MbwM6yToNasCttUEV1S+8yw2fjwLX1E349oTyETGIeEx5
DFgbtK5YZjCR4gqWdlEzoJAMY5726d49tJn9BLYwCMG8ODkmTKawvYsNzPC9pdcE
FWCTRh/JaqSNWlGYKIJJTH6cmg+5Nlut4lx5+sYkkbp2rignBKDoAd29pOMgZpVX
xKeGhoJHi4HbJU7ORQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:04 2026 by rpki-client