Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146365.roa
File:                     AS146365.roa (raw, json)
Hash identifier:          kt7cI8bdBsRlG5T+TYm/xjtXFbyJaqHPrTNcC/4hC6A=
Subject key identifier:   66:AB:74:EA:98:8F:8D:EA:EE:CC:C5:09:87:B9:C5:2C:20:56:5C:EA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4893C0C75CECF1C71CE3CC115104209766F5260E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146365.roa
Signing time:             Mon 25 May 2026 01:51:13 +0000
ROA not before:           Mon 25 May 2026 01:46:13 +0000
ROA not after:            Mon 24 May 2027 01:51:13 +0000
asID:                     146365
IP address blocks:        240a:ae83::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:93:c0:c7:5c:ec:f1:c7:1c:e3:cc:11:51:04:20:97:66:f5:26:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:13 2026 GMT
            Not After : May 24 01:51:13 2027 GMT
        Subject: CN=66AB74EA988F8DEAEECCC50987B9C52C20565CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:07:3a:6b:d5:3e:06:59:e4:ad:d9:f4:6b:
                    9a:90:e3:63:9c:fa:95:1e:99:65:60:28:d3:6b:d4:
                    b0:d2:25:f7:dc:7d:d0:d8:b1:fe:45:46:55:c2:7b:
                    29:c0:00:86:6d:c3:9e:24:e8:a3:19:a1:c3:81:79:
                    39:1c:38:fc:ec:2b:21:3e:c4:51:e6:5a:a0:4c:d2:
                    d4:53:09:1b:86:26:78:29:d0:89:6b:04:be:a3:be:
                    24:86:ed:13:10:cd:06:39:72:67:b9:d5:35:9a:c7:
                    5d:e7:61:3a:60:8f:65:ca:b4:5a:04:0c:26:97:b7:
                    b2:bc:a8:d9:5d:9d:45:a7:e6:1c:32:db:50:3d:e6:
                    a9:ab:8a:4d:84:29:73:dc:64:89:64:11:e1:2b:9c:
                    8a:e3:ee:41:a7:06:08:cc:09:e7:b8:0f:50:4a:c9:
                    f2:48:9e:d9:36:19:ab:5c:09:c8:d4:75:6a:5e:bd:
                    1f:a3:25:a1:f9:02:0c:4f:2a:b9:74:8b:64:79:10:
                    13:d9:b6:af:75:8c:56:09:f1:ab:bd:1e:ac:66:1f:
                    06:3e:eb:0a:11:cb:a1:63:b7:fd:30:17:fb:07:8e:
                    ed:c0:95:24:c4:ed:00:2f:fa:08:d6:e7:a6:bb:8a:
                    9d:77:c5:6c:51:42:ee:38:ca:5a:39:1e:7d:b1:2e:
                    fe:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AB:74:EA:98:8F:8D:EA:EE:CC:C5:09:87:B9:C5:2C:20:56:5C:EA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146365.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae83::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:2b:69:c9:bb:74:b4:a7:d7:97:9e:28:14:1e:f3:f7:63:2f:
         78:1d:c1:75:3f:78:02:66:a3:2d:76:c5:d9:22:62:63:54:1b:
         7f:47:7b:1f:d3:38:85:57:73:92:61:d6:c5:0e:9e:74:d6:68:
         f0:c4:9b:b8:f2:5a:2a:8a:d3:10:05:b2:96:a0:7c:a1:38:64:
         83:31:82:32:dc:84:cb:96:f3:6d:98:01:b3:76:9b:46:a4:b9:
         20:46:b7:70:92:25:dd:0a:28:5f:35:b4:1d:86:48:ba:00:0a:
         59:1e:05:8f:5b:cf:4d:58:11:01:9d:43:d5:d4:36:01:9e:80:
         88:40:de:6d:1a:e8:8f:f2:e1:79:64:84:5b:9c:56:6b:59:cd:
         a7:b3:70:71:0d:b3:3b:5d:1f:eb:dc:43:89:52:5f:93:ba:22:
         e9:eb:21:d9:63:e4:01:93:3e:e1:b3:c4:6b:0d:61:ed:53:3b:
         60:41:d5:d4:df:05:00:4f:11:f3:45:6b:03:9a:d5:0b:9f:ff:
         7a:4c:95:4f:45:ef:4c:f6:32:e4:23:c8:bf:da:96:dd:13:07:
         f9:75:67:2d:c1:90:0e:f7:cf:4b:37:a5:5b:87:21:ee:db:45:
         46:e3:4e:1a:62:b5:00:d7:41:93:f6:28:be:9c:6a:00:b5:f0:
         bf:7b:95:f3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSJPAx1zs8ccc48wRUQQgl2b1Jg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MTNaFw0yNzA1MjQwMTUxMTNaMDMxMTAvBgNV
BAMTKDY2QUI3NEVBOTg4RjhERUFFRUNDQzUwOTg3QjlDNTJDMjA1NjVDRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Zwc6a9U+Blnkrdn0a5qQ42Oc
+pUemWVgKNNr1LDSJffcfdDYsf5FRlXCeynAAIZtw54k6KMZocOBeTkcOPzsKyE+
xFHmWqBM0tRTCRuGJngp0IlrBL6jviSG7RMQzQY5cme51TWax13nYTpgj2XKtFoE
DCaXt7K8qNldnUWn5hwy21A95qmrik2EKXPcZIlkEeErnIrj7kGnBgjMCee4D1BK
yfJIntk2GatcCcjUdWpevR+jJaH5AgxPKrl0i2R5EBPZtq91jFYJ8au9HqxmHwY+
6woRy6Fjt/0wF/sHju3AlSTE7QAv+gjW56a7ip13xWxRQu44ylo5Hn2xLv4xAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUZqt06piPjeruzMUJh7nFLCBWXOowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqugzANBgkqhkiG9w0BAQsFAAOCAQEABytp
ybt0tKfXl54oFB7z92MveB3BdT94AmajLXbF2SJiY1Qbf0d7H9M4hVdzkmHWxQ6e
dNZo8MSbuPJaKorTEAWylqB8oThkgzGCMtyEy5bzbZgBs3abRqS5IEa3cJIl3Qoo
XzW0HYZIugAKWR4Fj1vPTVgRAZ1D1dQ2AZ6AiEDebRroj/LheWSEW5xWa1nNp7Nw
cQ2zO10f69xDiVJfk7oi6esh2WPkAZM+4bPEaw1h7VM7YEHV1N8FAE8R80VrA5rV
C5//ekyVT0XvTPYy5CPIv9qW3RMH+XVnLcGQDvfPSzelW4ch7ttFRuNOGmK1ANdB
k/YovpxqALXwv3uV8w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:02 2026 by rpki-client