Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146527.roa
File:                     AS146527.roa (raw, json)
Hash identifier:          6pShmxja60+n+6bJtcv8zbzv5cXsNGh6FM4hcn/yR6A=
Subject key identifier:   7E:73:CB:79:D4:6D:53:CF:80:43:09:DF:CD:74:60:5A:93:3C:0F:BA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3647A772E3DEB044603FA8947D186FF26634FAF1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146527.roa
Signing time:             Tue 26 May 2026 06:12:51 +0000
ROA not before:           Tue 26 May 2026 06:07:51 +0000
ROA not after:            Tue 25 May 2027 06:12:51 +0000
asID:                     146527
IP address blocks:        240a:af25::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:47:a7:72:e3:de:b0:44:60:3f:a8:94:7d:18:6f:f2:66:34:fa:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:51 2026 GMT
            Not After : May 25 06:12:51 2027 GMT
        Subject: CN=7E73CB79D46D53CF804309DFCD74605A933C0FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:de:9f:71:86:90:9f:21:e6:29:de:53:8f:
                    59:01:99:ee:be:2a:35:98:de:e5:41:55:b2:7a:19:
                    e8:83:ed:18:47:b0:a5:e2:0b:e3:9a:fa:17:f2:88:
                    35:21:58:35:61:ed:6f:84:1f:55:34:45:20:33:a7:
                    1c:45:ba:18:03:fd:8c:88:7a:15:b2:b5:df:e9:99:
                    09:4b:4e:6b:a7:82:c1:fe:8e:ba:74:3b:46:89:28:
                    54:d1:80:aa:c6:bf:dc:1e:94:5c:9b:02:ac:18:ec:
                    40:60:c8:ef:f2:69:6b:04:da:60:63:2e:fd:b8:85:
                    19:41:d5:2b:26:b0:ba:2b:fc:44:ce:ef:f0:9d:f7:
                    38:6d:07:ec:2b:44:81:bf:14:96:8d:d5:e1:ca:de:
                    62:b6:64:45:bc:71:cd:3b:96:d8:8b:40:86:05:43:
                    0f:f4:32:75:41:ab:9d:63:d1:9b:bf:e4:1a:7c:36:
                    15:26:4b:bc:54:cd:10:26:58:b7:c8:f3:2f:7e:0f:
                    87:5e:4f:9b:75:0b:8b:7a:72:9a:55:96:91:fd:3d:
                    79:d8:96:ad:22:5a:d7:0c:e7:93:0b:1a:d5:71:2d:
                    1e:3f:83:54:13:20:fb:fe:47:1f:f7:6d:34:53:89:
                    ef:04:9c:6e:1d:ce:c6:81:f1:55:ac:63:e7:0b:6d:
                    66:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:73:CB:79:D4:6D:53:CF:80:43:09:DF:CD:74:60:5A:93:3C:0F:BA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146527.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af25::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:6d:cb:24:82:d3:ae:fb:5c:0f:10:75:25:2a:5e:5d:bb:7e:
         ab:a2:d0:0f:c9:14:6a:f7:31:07:18:b6:3a:9e:42:f1:ef:a3:
         b7:6c:51:48:1c:6f:40:17:33:c4:86:7b:ca:0c:d1:02:ea:08:
         e9:b8:d5:38:c1:00:d6:73:0a:df:99:89:36:1a:30:f3:4d:6b:
         30:b4:e3:d5:e9:bc:74:b4:da:3d:3d:f9:e8:fd:a7:62:39:8a:
         01:b7:e8:e3:7b:08:0b:8a:cb:be:a1:6a:ee:ca:48:d6:00:06:
         3c:5a:a0:dd:bf:ca:b6:a3:ab:d4:d7:91:85:ce:13:8a:a6:5a:
         1c:c2:83:77:f3:db:c9:21:c6:a9:11:91:50:1e:f8:83:58:08:
         b7:f7:d7:4e:63:1f:8d:73:b9:e1:7d:f2:f4:c4:03:32:0a:3a:
         3d:8b:8c:a6:ef:24:2f:8e:1c:60:85:6a:e7:0b:45:a8:65:a8:
         7e:1b:99:4b:1d:b8:f4:7b:b2:ca:72:de:c8:2a:31:09:bb:99:
         c5:48:89:53:df:f6:79:b5:51:95:5e:f8:88:dd:84:54:06:84:
         23:c1:cf:ec:1d:0a:7d:8d:b3:b1:6b:ef:f4:a5:49:91:3c:5c:
         e7:f1:98:80:4b:b1:46:53:a9:9d:b3:69:fc:90:c7:11:a9:64:
         13:4a:7e:60
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNkencuPesERgP6iUfRhv8mY0+vEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3NTFaFw0yNzA1MjUwNjEyNTFaMDMxMTAvBgNV
BAMTKDdFNzNDQjc5RDQ2RDUzQ0Y4MDQzMDlERkNENzQ2MDVBOTMzQzBGQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg896fcYaQnyHmKd5Tj1kBme6+
KjWY3uVBVbJ6GeiD7RhHsKXiC+Oa+hfyiDUhWDVh7W+EH1U0RSAzpxxFuhgD/YyI
ehWytd/pmQlLTmungsH+jrp0O0aJKFTRgKrGv9welFybAqwY7EBgyO/yaWsE2mBj
Lv24hRlB1SsmsLor/ETO7/Cd9zhtB+wrRIG/FJaN1eHK3mK2ZEW8cc07ltiLQIYF
Qw/0MnVBq51j0Zu/5Bp8NhUmS7xUzRAmWLfI8y9+D4deT5t1C4t6cppVlpH9PXnY
lq0iWtcM55MLGtVxLR4/g1QTIPv+Rx/3bTRTie8EnG4dzsaB8VWsY+cLbWajAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUfnPLedRtU8+AQwnfzXRgWpM8D7owHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvJTANBgkqhkiG9w0BAQsFAAOCAQEAWW3L
JILTrvtcDxB1JSpeXbt+q6LQD8kUavcxBxi2Op5C8e+jt2xRSBxvQBczxIZ7ygzR
AuoI6bjVOMEA1nMK35mJNhow801rMLTj1em8dLTaPT356P2nYjmKAbfo43sIC4rL
vqFq7spI1gAGPFqg3b/KtqOr1NeRhc4TiqZaHMKDd/PbySHGqRGRUB74g1gIt/fX
TmMfjXO54X3y9MQDMgo6PYuMpu8kL44cYIVq5wtFqGWofhuZSx249HuyynLeyCox
CbuZxUiJU9/2ebVRlV74iN2EVAaEI8HP7B0KfY2zsWvv9KVJkTxc5/GYgEuxRlOp
nbNp/JDHEalkE0p+YA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:31 2026 by rpki-client