Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146603.roa
File:                     AS146603.roa (raw, json)
Hash identifier:          Oqtg+fBLXB6wkJWppS63HqipBk6qmCKU+pcUEFMX8U8=
Subject key identifier:   F5:B3:82:DF:9C:03:C6:AF:ED:8C:50:10:D6:FC:5B:9A:BF:47:19:34
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       78F80A713DE0D0170F5F3542AF314F157764E716
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146603.roa
Signing time:             Fri 22 May 2026 02:47:27 +0000
ROA not before:           Fri 22 May 2026 02:42:27 +0000
ROA not after:            Fri 21 May 2027 02:47:27 +0000
asID:                     146603
IP address blocks:        240a:af71::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f8:0a:71:3d:e0:d0:17:0f:5f:35:42:af:31:4f:15:77:64:e7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:27 2026 GMT
            Not After : May 21 02:47:27 2027 GMT
        Subject: CN=F5B382DF9C03C6AFED8C5010D6FC5B9ABF471934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:43:f0:7b:ec:35:da:61:f1:76:70:bf:00:
                    3d:1a:b1:ee:85:f4:a4:09:b1:e8:7e:e9:18:cf:42:
                    ad:6a:73:74:08:85:dc:30:e7:40:80:a2:9b:74:f6:
                    c1:88:1d:12:62:14:08:f9:02:9a:8d:ac:2c:47:b4:
                    6c:4d:9c:4b:42:05:f4:25:63:b6:5d:e5:9e:63:3d:
                    9b:77:fb:44:da:d9:5f:b9:aa:3c:8a:5b:d4:e3:7c:
                    c2:ad:07:3b:33:2d:7c:b0:a1:b4:0a:81:4e:01:7a:
                    08:71:d6:d0:3f:9b:de:e0:32:14:0a:30:18:b7:b3:
                    26:67:bb:fa:22:c6:29:db:c0:35:50:f7:47:d0:56:
                    08:3e:f4:43:8c:98:6b:b5:21:45:ea:72:4a:e4:bd:
                    10:10:a2:f7:48:45:9b:40:a0:fe:c5:8d:fb:4b:1b:
                    46:5e:bc:6c:46:5a:e0:42:c2:19:8f:5b:5a:08:12:
                    e3:05:c2:b8:a2:91:0f:81:b1:e1:7a:27:59:3d:4b:
                    63:31:a7:d4:d5:70:35:e4:27:9b:16:9f:09:fa:ed:
                    e8:9b:0c:bf:92:57:c8:af:50:bd:b0:38:32:3a:11:
                    aa:7a:91:47:88:d6:ab:11:1b:73:df:93:e2:21:4a:
                    dc:0e:8d:fc:0b:3f:0c:ab:6d:71:7a:4b:f1:78:64:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B3:82:DF:9C:03:C6:AF:ED:8C:50:10:D6:FC:5B:9A:BF:47:19:34
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146603.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af71::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:a6:82:e7:14:ea:84:23:47:7e:ed:4b:ac:47:48:c1:df:a9:
         1e:c0:9c:0e:2a:7c:f8:45:32:4a:5a:0e:0b:87:13:bf:1e:d0:
         13:d4:cd:02:c2:e9:82:d8:00:05:e7:99:fa:20:a3:68:a2:b8:
         8b:88:73:37:ed:0d:08:0f:ab:9f:92:67:c3:d9:ff:63:d0:bd:
         e8:29:0d:d3:32:a0:38:ac:b4:3c:d6:56:52:2f:fd:9d:12:29:
         58:98:7f:4d:38:72:ca:98:df:8e:1a:7a:1f:cb:4f:71:ca:e8:
         2d:69:3f:ea:39:be:83:b7:c2:38:9a:15:e0:fb:54:af:9e:06:
         f3:11:b5:a2:28:6a:ae:29:c5:af:5b:ea:8c:99:b6:78:d7:86:
         12:ce:a1:42:d7:9b:c7:d4:d5:2b:6a:75:a1:dd:79:2f:b9:66:
         32:4c:5c:ce:c6:7b:c4:8f:f3:d0:e9:19:34:b6:6e:57:77:88:
         e4:72:fd:7f:78:e5:3e:48:8c:d2:6a:45:36:e0:5e:58:94:3a:
         6e:9d:c7:48:3b:e4:fa:c2:d4:f5:f8:e1:70:f9:11:28:c5:d5:
         29:40:77:24:a2:db:7b:81:27:3c:a4:7e:ed:e0:d6:09:f1:69:
         c0:dd:78:4e:f7:24:09:f0:07:fd:28:c0:6b:56:c8:2a:99:d9:
         e2:d9:7e:9f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUePgKcT3g0BcPXzVCrzFPFXdk5xYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMjdaFw0yNzA1MjEwMjQ3MjdaMDMxMTAvBgNV
BAMTKEY1QjM4MkRGOUMwM0M2QUZFRDhDNTAxMEQ2RkM1QjlBQkY0NzE5MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnEPwe+w12mHxdnC/AD0ase6F
9KQJseh+6RjPQq1qc3QIhdww50CAopt09sGIHRJiFAj5ApqNrCxHtGxNnEtCBfQl
Y7Zd5Z5jPZt3+0Ta2V+5qjyKW9TjfMKtBzszLXywobQKgU4Beghx1tA/m97gMhQK
MBi3syZnu/oixinbwDVQ90fQVgg+9EOMmGu1IUXqckrkvRAQovdIRZtAoP7FjftL
G0ZevGxGWuBCwhmPW1oIEuMFwriikQ+BseF6J1k9S2Mxp9TVcDXkJ5sWnwn67eib
DL+SV8ivUL2wODI6Eap6kUeI1qsRG3Pfk+IhStwOjfwLPwyrbXF6S/F4ZOpnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU9bOC35wDxq/tjFAQ1vxbmr9HGTQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjAzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvcTANBgkqhkiG9w0BAQsFAAOCAQEABqaC
5xTqhCNHfu1LrEdIwd+pHsCcDip8+EUySloOC4cTvx7QE9TNAsLpgtgABeeZ+iCj
aKK4i4hzN+0NCA+rn5Jnw9n/Y9C96CkN0zKgOKy0PNZWUi/9nRIpWJh/TThyypjf
jhp6H8tPccroLWk/6jm+g7fCOJoV4PtUr54G8xG1oihqrinFr1vqjJm2eNeGEs6h
Qtebx9TVK2p1od15L7lmMkxczsZ7xI/z0OkZNLZuV3eI5HL9f3jlPkiM0mpFNuBe
WJQ6bp3HSDvk+sLU9fjhcPkRKMXVKUB3JKLbe4EnPKR+7eDWCfFpwN14TvckCfAH
/SjAa1bIKpnZ4tl+nw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:29 2026 by rpki-client