Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146565.roa
File:                     AS146565.roa (raw, json)
Hash identifier:          r266Sxe6e8522Da4pTcj/lCGRSi0XZd5X6TiyBnG/Bk=
Subject key identifier:   DB:59:2B:6F:A2:5A:30:91:B4:3D:FB:8E:1A:BD:C3:C3:AD:29:5A:51
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       21354B535BF89968DE5CC04B03AF49207A72C08E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146565.roa
Signing time:             Fri 22 May 2026 04:26:57 +0000
ROA not before:           Fri 22 May 2026 04:21:57 +0000
ROA not after:            Fri 21 May 2027 04:26:57 +0000
asID:                     146565
IP address blocks:        240a:af4b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:35:4b:53:5b:f8:99:68:de:5c:c0:4b:03:af:49:20:7a:72:c0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:57 2026 GMT
            Not After : May 21 04:26:57 2027 GMT
        Subject: CN=DB592B6FA25A3091B43DFB8E1ABDC3C3AD295A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:a7:73:25:e5:50:93:e3:f9:12:57:be:ce:
                    56:8f:30:eb:d4:da:e9:4c:6a:e3:25:2d:da:a8:7a:
                    4f:24:1f:91:ea:60:67:5b:b2:82:04:20:2b:5f:71:
                    7d:4c:9c:c4:6c:82:43:49:6d:e8:95:55:15:c5:15:
                    36:bc:2d:a4:19:51:41:5c:5e:c7:0c:fe:a1:00:59:
                    34:d3:14:8b:6c:6f:01:0c:75:34:b5:6b:b1:27:1f:
                    23:81:fc:d1:df:67:f8:fa:0f:58:71:bc:43:b1:c7:
                    db:96:9c:46:af:0e:68:21:cb:8f:05:47:85:a5:e8:
                    02:e6:6d:92:21:ec:b6:bb:17:e7:af:d5:40:ee:1e:
                    60:dd:b7:65:af:29:4b:2b:30:97:bb:cc:35:c8:0b:
                    56:d8:d5:07:b0:df:6d:9e:2e:86:2d:47:27:a6:f1:
                    dd:11:32:70:8d:59:a7:7a:7e:48:bf:8e:1e:7b:e6:
                    73:85:c2:b7:fa:4a:20:ec:03:fd:ec:8f:18:04:8c:
                    d3:6e:85:c9:dc:65:b5:d8:81:3c:f0:28:0e:ac:8a:
                    4d:6f:c1:cf:db:41:70:47:25:f6:68:8c:cf:b9:43:
                    af:6f:50:c6:1e:bf:68:75:e4:63:52:47:cf:79:a5:
                    c5:09:af:ce:ef:5c:22:c1:cd:4f:28:54:17:17:e3:
                    53:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:59:2B:6F:A2:5A:30:91:B4:3D:FB:8E:1A:BD:C3:C3:AD:29:5A:51
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146565.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af4b::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:dc:7d:46:cd:b8:f4:8d:97:4c:55:f1:41:43:75:ef:d9:ea:
         13:2b:13:78:43:eb:1b:9e:67:89:2e:2a:36:85:d4:6f:97:e1:
         81:b8:97:df:87:6b:b9:b3:78:60:6e:10:f6:86:c6:31:83:59:
         ef:1c:b9:ce:99:76:86:3e:53:1c:9b:87:2e:6e:9d:f3:42:e1:
         8f:09:23:61:f2:1f:af:b6:50:ac:98:e5:53:e2:be:c7:22:d7:
         69:3e:4c:f5:85:82:9d:b1:32:ce:2c:c6:5a:69:8d:f7:a9:39:
         54:2a:dd:33:a6:73:54:b2:f7:c3:33:12:43:e2:59:bb:8d:36:
         b9:0d:1d:79:80:d5:7d:8f:66:4f:c5:ee:a3:83:7e:89:65:32:
         a1:a7:13:bf:73:99:c5:4b:84:8a:80:d9:ee:54:38:88:46:25:
         15:ca:dc:bb:d7:ab:ad:be:bc:c9:61:71:ba:73:82:31:27:f8:
         39:2b:08:9d:5d:8b:96:02:96:38:04:52:46:d9:8d:dd:f6:d1:
         2a:fb:d0:77:42:4b:8c:4e:7b:6f:9f:81:91:3e:6b:05:42:94:
         d5:8a:8b:32:f5:7e:3f:9d:85:32:03:4c:66:74:a7:c8:de:1b:
         b5:e0:8b:0c:c2:cb:75:fa:33:8d:bd:23:fa:e8:26:6e:b9:66:
         95:82:3f:f4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUITVLU1v4mWjeXMBLA69JIHpywI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIxNTdaFw0yNzA1MjEwNDI2NTdaMDMxMTAvBgNV
BAMTKERCNTkyQjZGQTI1QTMwOTFCNDNERkI4RTFBQkRDM0MzQUQyOTVBNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbKdzJeVQk+P5Ele+zlaPMOvU
2ulMauMlLdqoek8kH5HqYGdbsoIEICtfcX1MnMRsgkNJbeiVVRXFFTa8LaQZUUFc
XscM/qEAWTTTFItsbwEMdTS1a7EnHyOB/NHfZ/j6D1hxvEOxx9uWnEavDmghy48F
R4Wl6ALmbZIh7La7F+ev1UDuHmDdt2WvKUsrMJe7zDXIC1bY1Qew322eLoYtRyem
8d0RMnCNWad6fki/jh575nOFwrf6SiDsA/3sjxgEjNNuhcncZbXYgTzwKA6sik1v
wc/bQXBHJfZojM+5Q69vUMYev2h15GNSR895pcUJr87vXCLBzU8oVBcX41NpAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU21krb6JaMJG0PfuOGr3Dw60pWlEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvSzANBgkqhkiG9w0BAQsFAAOCAQEActx9
Rs249I2XTFXxQUN179nqEysTeEPrG55niS4qNoXUb5fhgbiX34drubN4YG4Q9obG
MYNZ7xy5zpl2hj5THJuHLm6d80LhjwkjYfIfr7ZQrJjlU+K+xyLXaT5M9YWCnbEy
zizGWmmN96k5VCrdM6ZzVLL3wzMSQ+JZu402uQ0deYDVfY9mT8Xuo4N+iWUyoacT
v3OZxUuEioDZ7lQ4iEYlFcrcu9errb68yWFxunOCMSf4OSsInV2LlgKWOARSRtmN
3fbRKvvQd0JLjE57b5+BkT5rBUKU1YqLMvV+P52FMgNMZnSnyN4bteCLDMLLdfoz
jb0j+ugmbrlmlYI/9A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:22 2026 by rpki-client