Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146345.roa
File:                     AS146345.roa (raw, json)
Hash identifier:          t6p/LPDT7BUu5zgtY7dSEihDiI8GfylPLS7ceCg2dAs=
Subject key identifier:   6C:F2:B4:06:C6:52:E1:9A:93:F1:21:C5:72:52:62:1C:7C:8A:BD:46
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7C17C4F39A24E9550FE26554F873AE7F85BCD275
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146345.roa
Signing time:             Fri 22 May 2026 07:32:38 +0000
ROA not before:           Fri 22 May 2026 07:27:38 +0000
ROA not after:            Fri 21 May 2027 07:32:38 +0000
asID:                     146345
IP address blocks:        240a:ae6f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:17:c4:f3:9a:24:e9:55:0f:e2:65:54:f8:73:ae:7f:85:bc:d2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:38 2026 GMT
            Not After : May 21 07:32:38 2027 GMT
        Subject: CN=6CF2B406C652E19A93F121C57252621C7C8ABD46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:40:47:46:37:c5:ce:a2:5e:26:de:1a:77:cc:
                    00:fe:7f:fd:a5:10:2d:d0:85:46:0e:8c:63:aa:73:
                    84:49:12:17:50:2e:33:02:40:59:74:6d:a2:bd:3c:
                    c7:c2:34:6b:cf:9a:ff:7e:47:49:67:cd:25:3f:09:
                    ca:98:2b:65:29:9c:57:42:e4:76:ae:75:8d:09:f3:
                    63:c0:8f:7b:bd:8c:f7:36:a8:88:5a:96:33:ad:ec:
                    24:b3:83:d9:f2:63:d2:80:45:f6:20:65:92:e5:d8:
                    93:8a:81:cf:32:f1:98:0c:fa:e0:da:d1:29:0d:f5:
                    4c:6e:2a:37:32:61:56:a7:85:1f:c7:4e:10:24:8f:
                    fd:a0:b5:72:8f:ea:dd:37:a2:53:54:6e:86:62:5b:
                    b0:84:2c:b2:18:b8:0e:0a:73:a7:f0:f6:d2:37:18:
                    f6:21:ad:71:e1:cb:26:0c:1d:ff:b5:ed:45:9d:47:
                    fc:d5:0d:ba:38:e5:b2:a0:6d:cb:07:81:a1:bc:45:
                    54:0a:c7:52:16:89:26:7e:68:20:7a:f7:e9:17:43:
                    d1:c2:85:c3:42:1d:e3:bc:9c:d0:5f:7b:ca:24:04:
                    12:62:08:c8:c8:96:dd:b9:ae:d3:b4:26:7b:1d:75:
                    e5:4f:f3:28:c0:50:31:60:00:12:6d:d4:68:df:ce:
                    e1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F2:B4:06:C6:52:E1:9A:93:F1:21:C5:72:52:62:1C:7C:8A:BD:46
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146345.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae6f::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:aa:40:d3:2c:5a:3f:5a:1b:59:58:ef:25:b7:fe:53:e9:2f:
         80:26:b9:50:40:1d:b0:91:5d:53:4f:ab:c2:e2:b6:0a:83:40:
         e1:54:37:72:fd:7d:11:9f:2f:8c:e9:c2:4f:e2:93:f5:61:ea:
         74:d0:dd:9e:d2:2b:28:78:f6:b5:79:58:1a:19:6e:8a:11:64:
         81:24:5b:aa:72:0a:4e:6f:e9:59:62:64:f5:03:29:60:ef:d9:
         fa:c8:72:37:ef:7e:a0:b6:c3:61:b6:04:26:0c:92:7f:ae:28:
         e2:83:31:78:fd:fd:72:7c:a6:97:ee:9a:93:f1:8a:14:79:f5:
         b1:05:e6:a5:28:f9:4d:6b:19:d0:6f:8b:41:a1:dd:7f:20:98:
         a7:5a:7b:87:3f:7e:85:8d:60:66:5d:54:87:5a:9f:56:d8:af:
         0d:d1:c1:8c:52:3f:48:fe:aa:88:cd:05:c7:c7:08:00:a0:b2:
         cd:52:45:a6:30:7a:c8:fb:50:4d:72:53:0c:ca:c3:99:d4:b4:
         41:e6:d3:af:a1:2c:ac:a1:9a:26:fc:8b:f9:80:f5:13:f9:31:
         a4:42:96:f6:ab:bc:75:da:66:ec:0d:1c:1e:8f:e1:e2:81:28:
         ae:30:cf:e4:5d:69:ca:fd:56:26:85:4d:ee:ac:33:4b:cf:e7:
         f3:8b:d3:0c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfBfE85ok6VUP4mVU+HOuf4W80nUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MzhaFw0yNzA1MjEwNzMyMzhaMDMxMTAvBgNV
BAMTKDZDRjJCNDA2QzY1MkUxOUE5M0YxMjFDNTcyNTI2MjFDN0M4QUJENDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgQEdGN8XOol4m3hp3zAD+f/2l
EC3QhUYOjGOqc4RJEhdQLjMCQFl0baK9PMfCNGvPmv9+R0lnzSU/CcqYK2UpnFdC
5HaudY0J82PAj3u9jPc2qIhaljOt7CSzg9nyY9KARfYgZZLl2JOKgc8y8ZgM+uDa
0SkN9UxuKjcyYVanhR/HThAkj/2gtXKP6t03olNUboZiW7CELLIYuA4Kc6fw9tI3
GPYhrXHhyyYMHf+17UWdR/zVDbo45bKgbcsHgaG8RVQKx1IWiSZ+aCB69+kXQ9HC
hcNCHeO8nNBfe8okBBJiCMjIlt25rtO0JnsddeVP8yjAUDFgABJt1GjfzuElAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbPK0BsZS4ZqT8SHFclJiHHyKvUYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqubzANBgkqhkiG9w0BAQsFAAOCAQEABqpA
0yxaP1obWVjvJbf+U+kvgCa5UEAdsJFdU0+rwuK2CoNA4VQ3cv19EZ8vjOnCT+KT
9WHqdNDdntIrKHj2tXlYGhluihFkgSRbqnIKTm/pWWJk9QMpYO/Z+shyN+9+oLbD
YbYEJgySf64o4oMxeP39cnyml+6ak/GKFHn1sQXmpSj5TWsZ0G+LQaHdfyCYp1p7
hz9+hY1gZl1Uh1qfVtivDdHBjFI/SP6qiM0Fx8cIAKCyzVJFpjB6yPtQTXJTDMrD
mdS0QebTr6EsrKGaJvyL+YD1E/kxpEKW9qu8ddpm7A0cHo/h4oEorjDP5F1pyv1W
JoVN7qwzS8/n84vTDA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:42 2026 by rpki-client