Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146368.roa
File:                     AS146368.roa (raw, json)
Hash identifier:          1KfUI4/FHLeWn7j30QwL5YUdSorwl01LiaZ8kPt4tHI=
Subject key identifier:   6F:17:AC:BB:96:31:3F:03:66:F6:05:7C:A3:28:13:89:0F:C4:DF:A5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       10618EC8A7CCDD2007E67447CAF4F9C4F78715FB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146368.roa
Signing time:             Mon 25 May 2026 06:49:09 +0000
ROA not before:           Mon 25 May 2026 06:44:09 +0000
ROA not after:            Mon 24 May 2027 06:49:09 +0000
asID:                     146368
IP address blocks:        240a:ae86::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:61:8e:c8:a7:cc:dd:20:07:e6:74:47:ca:f4:f9:c4:f7:87:15:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:09 2026 GMT
            Not After : May 24 06:49:09 2027 GMT
        Subject: CN=6F17ACBB96313F0366F6057CA32813890FC4DFA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ec:46:17:77:85:04:d5:bf:e8:6e:5e:e4:2d:
                    ed:b2:97:83:c4:f0:d6:ad:c1:89:08:44:71:24:9b:
                    cf:54:5c:1a:80:b4:16:d0:bb:45:b6:8c:4a:90:78:
                    7a:e0:25:79:71:8c:53:e5:e5:79:d6:46:a6:f8:d5:
                    07:d9:75:52:1d:ce:d1:13:04:e8:43:e5:b8:93:b5:
                    e8:d4:33:44:e4:5b:7e:fe:88:43:0f:12:cf:26:41:
                    21:a1:f9:a2:65:dc:c3:3e:6f:a4:18:88:0c:41:63:
                    4d:0e:97:4e:32:29:36:1f:2e:db:5b:ef:a2:bc:0f:
                    4b:eb:00:ab:09:86:05:a2:24:24:53:9c:71:c2:36:
                    a5:b8:73:de:8c:23:4b:f7:9f:e4:6c:79:25:2f:d4:
                    d9:b2:e7:57:0d:85:0a:87:e7:90:22:20:ce:75:4c:
                    3a:e1:7b:43:b6:36:00:c1:69:ba:b7:53:e9:75:6f:
                    e7:4d:11:02:07:e1:26:e2:80:ae:bf:2f:1b:3d:35:
                    58:26:a7:e9:1a:bd:24:c1:2e:46:31:23:a2:99:42:
                    ca:58:f9:b1:cd:6b:6c:91:47:5e:8c:93:5c:5a:ae:
                    65:c7:b5:4e:b9:57:3c:14:cd:db:38:26:1c:95:8d:
                    58:18:b5:53:76:3f:cd:a5:cf:15:6e:06:49:e3:66:
                    0d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:17:AC:BB:96:31:3F:03:66:F6:05:7C:A3:28:13:89:0F:C4:DF:A5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146368.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae86::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:cb:f2:0b:69:1a:ee:2b:38:f9:0e:62:ec:a6:c3:8c:ef:
         53:ca:7f:e7:25:c3:89:d9:eb:cb:3e:b4:f7:bf:46:48:76:03:
         90:0d:13:60:2d:70:5d:d7:d9:2b:80:f4:b5:df:2c:aa:c0:dc:
         c6:08:6b:09:a0:59:a5:5f:9d:57:0a:49:d0:0f:0a:8e:2d:0b:
         01:73:79:65:c7:a8:8f:6f:43:51:28:af:f7:33:50:30:73:76:
         27:80:06:82:12:88:c8:d8:3e:5e:eb:bd:6a:d3:19:33:5d:66:
         93:da:4b:92:ce:dd:d8:b8:d5:e9:3d:3e:ad:bc:cc:2e:59:bf:
         78:28:39:9b:a2:a8:da:c5:7b:d2:6e:4b:58:04:82:f1:17:54:
         19:7f:12:51:f7:c4:d6:e2:c4:35:a3:bb:39:07:b5:75:33:3d:
         a1:58:40:25:fb:72:b9:74:af:ed:de:e2:14:46:38:81:52:60:
         14:69:96:d4:1b:c2:fc:69:bf:18:e5:6c:a5:4c:b8:e1:1c:c6:
         0a:03:38:73:7a:f6:28:c1:b3:a4:f7:02:81:8f:ff:83:f9:5c:
         7b:a7:7a:64:4b:97:a8:97:f6:4d:dc:25:ae:21:c8:97:47:2a:
         c7:e6:43:80:88:4f:fc:ed:c0:df:54:b0:b1:8a:e8:5e:8b:1b:
         ea:6d:21:e2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUEGGOyKfM3SAH5nRHyvT5xPeHFfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQ0MDlaFw0yNzA1MjQwNjQ5MDlaMDMxMTAvBgNV
BAMTKDZGMTdBQ0JCOTYzMTNGMDM2NkY2MDU3Q0EzMjgxMzg5MEZDNERGQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC77EYXd4UE1b/obl7kLe2yl4PE
8NatwYkIRHEkm89UXBqAtBbQu0W2jEqQeHrgJXlxjFPl5XnWRqb41QfZdVIdztET
BOhD5biTtejUM0TkW37+iEMPEs8mQSGh+aJl3MM+b6QYiAxBY00Ol04yKTYfLttb
76K8D0vrAKsJhgWiJCRTnHHCNqW4c96MI0v3n+RseSUv1Nmy51cNhQqH55AiIM51
TDrhe0O2NgDBabq3U+l1b+dNEQIH4SbigK6/Lxs9NVgmp+kavSTBLkYxI6KZQspY
+bHNa2yRR16Mk1xarmXHtU65VzwUzds4JhyVjVgYtVN2P82lzxVuBknjZg2pAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbxesu5YxPwNm9gV8oygTiQ/E36UwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquhjANBgkqhkiG9w0BAQsFAAOCAQEAXNfL
8gtpGu4rOPkOYuymw4zvU8p/5yXDidnryz60979GSHYDkA0TYC1wXdfZK4D0td8s
qsDcxghrCaBZpV+dVwpJ0A8Kji0LAXN5Zceoj29DUSiv9zNQMHN2J4AGghKIyNg+
Xuu9atMZM11mk9pLks7d2LjV6T0+rbzMLlm/eCg5m6Ko2sV70m5LWASC8RdUGX8S
UffE1uLENaO7OQe1dTM9oVhAJftyuXSv7d7iFEY4gVJgFGmW1BvC/Gm/GOVspUy4
4RzGCgM4c3r2KMGzpPcCgY//g/lce6d6ZEuXqJf2TdwlriHIl0cqx+ZDgIhP/O3A
31SwsYroXosb6m0h4g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:34 2026 by rpki-client