Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146532.roa
File:                     AS146532.roa (raw, json)
Hash identifier:          2tCeodeK6Kc0yN9KqK4WDRg6I5EBLoFf1Yyz1B/3gOA=
Subject key identifier:   AD:25:A4:7A:65:50:6F:66:7E:08:E7:A5:3F:9F:BE:32:F8:BD:56:44
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       A778148A929847775FA3E3E050AB81B928B50A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146532.roa
Signing time:             Tue 26 May 2026 06:30:28 +0000
ROA not before:           Tue 26 May 2026 06:25:28 +0000
ROA not after:            Tue 25 May 2027 06:30:28 +0000
asID:                     146532
IP address blocks:        240a:af2a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a7:78:14:8a:92:98:47:77:5f:a3:e3:e0:50:ab:81:b9:28:b5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:28 2026 GMT
            Not After : May 25 06:30:28 2027 GMT
        Subject: CN=AD25A47A65506F667E08E7A53F9FBE32F8BD5644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:a0:dd:23:c4:16:9c:53:43:e5:8c:87:ff:
                    6a:04:5c:d5:f6:29:02:94:bb:61:ff:e9:f0:3c:a3:
                    55:57:7f:e7:70:5e:14:f4:be:e4:36:b9:d3:99:af:
                    8b:e4:10:37:c3:01:5c:88:f4:e5:19:e9:80:57:c0:
                    92:10:89:40:c9:b8:ca:6c:bd:e9:33:af:41:32:bd:
                    0c:e7:ba:07:95:28:a8:ac:65:8b:61:33:b1:1e:5b:
                    bf:d8:90:c3:5b:26:7a:0d:03:eb:5c:b0:8f:71:8e:
                    13:44:a6:3c:97:13:0d:05:d3:2b:66:08:82:a5:ce:
                    19:4f:56:b9:30:f3:04:a3:51:96:d8:0d:46:0e:f3:
                    c3:d2:77:b5:2c:00:a4:33:ab:03:f9:b6:ce:13:8a:
                    b2:2f:75:cf:a0:06:91:42:0a:02:c1:80:7b:30:6e:
                    84:9f:c1:97:3d:b7:92:d0:2f:01:8c:34:ca:51:51:
                    4b:a6:26:d6:06:49:08:cc:2b:2a:70:ca:78:ef:01:
                    3b:56:d5:c1:c7:45:22:7d:57:ce:06:d2:31:99:e5:
                    13:80:2c:b2:b7:6a:7e:e4:db:bb:ea:04:74:fb:dc:
                    63:7f:a6:85:6a:56:b0:a3:71:0f:78:bc:43:1c:56:
                    b3:4e:4f:f5:43:0b:f2:08:57:b4:26:36:f2:d8:57:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:25:A4:7A:65:50:6F:66:7E:08:E7:A5:3F:9F:BE:32:F8:BD:56:44
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af2a::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:61:78:8a:f9:11:07:06:39:2f:48:5f:9e:5c:8d:88:3e:e1:
         55:47:28:ee:e0:61:b7:72:a4:ca:ab:50:f2:2d:7f:a4:78:c6:
         47:c2:5c:57:c3:43:ec:29:ea:42:fd:ef:03:9c:b5:24:6b:cc:
         49:96:7d:5e:02:74:61:49:49:dd:a6:eb:ce:d4:4f:0d:c7:f7:
         20:5a:a4:b3:5c:98:ed:69:12:bb:89:83:8d:26:2f:7e:e6:f9:
         bf:86:dc:ba:2e:67:c0:97:bf:11:ac:a9:7c:96:8d:aa:c8:7c:
         1f:66:20:90:0d:aa:fa:ac:48:cc:da:3d:6e:6b:cd:1d:fb:fc:
         c6:5e:43:2b:f1:08:3c:23:14:02:fd:11:a6:aa:2e:f2:1e:a2:
         0c:aa:1c:f1:b7:d9:d8:58:c3:80:c5:27:b4:55:25:30:9c:c9:
         2c:88:3b:b3:d8:e6:95:9e:ee:85:5b:e6:3a:ad:eb:28:33:3f:
         59:f5:35:c5:d7:a8:4f:a5:0e:86:36:d9:f7:15:d5:83:67:49:
         de:ae:a2:55:b5:8c:69:cd:b3:1d:a7:cc:df:11:62:a9:0d:4b:
         c9:20:0e:e4:c1:1a:f2:60:a3:6c:19:f6:29:a9:06:a4:97:67:
         88:6a:c6:14:d3:0b:a5:c1:ad:2a:e4:86:5c:32:81:12:0a:93:
         48:6d:f1:a6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAKd4FIqSmEd3X6Pj4FCrgbkotQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1MjhaFw0yNzA1MjUwNjMwMjhaMDMxMTAvBgNV
BAMTKEFEMjVBNDdBNjU1MDZGNjY3RTA4RTdBNTNGOUZCRTMyRjhCRDU2NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArKDdI8QWnFND5YyH/2oEXNX2
KQKUu2H/6fA8o1VXf+dwXhT0vuQ2udOZr4vkEDfDAVyI9OUZ6YBXwJIQiUDJuMps
vekzr0EyvQznugeVKKisZYthM7EeW7/YkMNbJnoNA+tcsI9xjhNEpjyXEw0F0ytm
CIKlzhlPVrkw8wSjUZbYDUYO88PSd7UsAKQzqwP5ts4TirIvdc+gBpFCCgLBgHsw
boSfwZc9t5LQLwGMNMpRUUumJtYGSQjMKypwynjvATtW1cHHRSJ9V84G0jGZ5ROA
LLK3an7k27vqBHT73GN/poVqVrCjcQ94vEMcVrNOT/VDC/IIV7QmNvLYV6n7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUrSWkemVQb2Z+COelP5++Mvi9VkQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvKjANBgkqhkiG9w0BAQsFAAOCAQEAc2F4
ivkRBwY5L0hfnlyNiD7hVUco7uBht3KkyqtQ8i1/pHjGR8JcV8ND7CnqQv3vA5y1
JGvMSZZ9XgJ0YUlJ3abrztRPDcf3IFqks1yY7WkSu4mDjSYvfub5v4bcui5nwJe/
EaypfJaNqsh8H2YgkA2q+qxIzNo9bmvNHfv8xl5DK/EIPCMUAv0Rpqou8h6iDKoc
8bfZ2FjDgMUntFUlMJzJLIg7s9jmlZ7uhVvmOq3rKDM/WfU1xdeoT6UOhjbZ9xXV
g2dJ3q6iVbWMac2zHafM3xFiqQ1LySAO5MEa8mCjbBn2KakGpJdniGrGFNMLpcGt
KuSGXDKBEgqTSG3xpg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:49 2026 by rpki-client