Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146609.roa
File:                     AS146609.roa (raw, json)
Hash identifier:          bdJhA9a1Gi/8Tmw/pv4OaN82TG2ny77ERMBITumfanc=
Subject key identifier:   10:5F:2E:42:A1:90:3B:E4:AF:7C:0C:8E:DA:E4:AD:C7:A5:A6:66:2E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       343D65EAF0D2A2F2AE9D85DE27D7242226C28688
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146609.roa
Signing time:             Fri 22 May 2026 06:58:41 +0000
ROA not before:           Fri 22 May 2026 06:53:41 +0000
ROA not after:            Fri 21 May 2027 06:58:41 +0000
asID:                     146609
IP address blocks:        240a:af77::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3d:65:ea:f0:d2:a2:f2:ae:9d:85:de:27:d7:24:22:26:c2:86:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:41 2026 GMT
            Not After : May 21 06:58:41 2027 GMT
        Subject: CN=105F2E42A1903BE4AF7C0C8EDAE4ADC7A5A6662E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:3d:78:28:d6:e2:e7:06:1a:4c:9a:3d:80:
                    3f:fd:06:3a:7d:21:df:30:62:af:16:ca:14:15:80:
                    df:ef:fe:05:5e:b7:30:12:1b:14:eb:5d:fb:c1:80:
                    c1:86:b3:e2:ba:98:0a:09:54:74:6f:5f:23:63:7b:
                    72:38:b9:fe:6e:d2:87:37:6b:e1:8d:9f:4f:35:5b:
                    1c:fa:83:a3:85:4b:cf:64:51:fd:1e:92:bf:f9:94:
                    97:3e:35:bd:ba:71:7d:68:20:06:62:f5:0f:0e:fc:
                    44:0a:c9:cb:73:d2:2d:75:bc:b1:45:8e:d7:f5:6b:
                    6b:36:f8:ea:1e:aa:a5:b7:90:4e:0e:af:76:ce:28:
                    b4:2a:5e:6f:2f:6e:23:2f:18:0d:d1:53:81:fc:22:
                    02:f5:1c:44:5e:87:97:46:bc:a3:6b:f3:e8:91:25:
                    21:88:4a:d7:8a:ae:22:60:c2:97:be:14:22:23:76:
                    43:dd:91:ec:6d:d8:16:b1:e0:6f:7d:03:26:45:58:
                    e0:a9:0a:e1:7c:66:14:39:eb:e3:8c:ca:ca:74:2d:
                    c9:f7:d5:26:28:87:bd:dc:11:98:a2:7f:14:c2:61:
                    30:4f:7a:c9:e9:cc:1d:24:08:ec:a6:67:38:35:0c:
                    8a:9c:0d:cd:4b:7b:46:44:62:87:e3:c0:82:88:fe:
                    47:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5F:2E:42:A1:90:3B:E4:AF:7C:0C:8E:DA:E4:AD:C7:A5:A6:66:2E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146609.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af77::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:d8:56:1b:a0:b2:5f:b3:08:1b:cc:7f:ce:20:b8:80:e5:35:
         b8:7d:3a:91:49:ca:d1:c9:0e:b4:75:96:ba:4b:1d:8e:f1:40:
         d5:7c:c4:32:b0:47:46:75:27:6e:9b:00:e7:2d:f4:b2:e3:e7:
         54:68:52:a8:02:26:1c:1d:00:08:6d:e9:b1:82:4c:c3:df:30:
         8f:05:b7:87:c2:3b:ac:20:56:07:3c:c7:0f:89:9b:b9:0d:76:
         c9:e6:ae:8a:5c:7f:d5:b8:c7:7b:63:5e:41:ef:9b:91:ea:df:
         b8:39:da:f8:da:31:36:e2:c8:3a:23:8d:6d:91:c1:96:dd:34:
         c7:88:3f:ab:2a:b1:bd:2a:f6:4c:6f:33:09:9e:6e:6a:c4:e2:
         85:69:92:0e:6b:55:89:9c:08:1e:f2:9f:8f:de:6a:0f:4d:ab:
         95:3a:95:c5:47:73:a5:5b:65:8b:8d:77:22:77:48:91:25:32:
         f4:8c:d1:a8:ae:61:84:73:37:be:5e:e5:c5:db:63:ec:b0:2e:
         32:62:5c:6d:50:45:74:56:f3:62:01:6c:8a:27:60:f2:d2:8e:
         bb:73:fe:3b:72:a4:84:7a:73:d6:4c:10:2b:25:55:32:ea:8f:
         73:4f:24:a3:24:3b:57:44:67:4f:53:4f:ae:bf:71:54:72:6e:
         30:ba:84:38
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUND1l6vDSovKunYXeJ9ckIibChogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzNDFaFw0yNzA1MjEwNjU4NDFaMDMxMTAvBgNV
BAMTKDEwNUYyRTQyQTE5MDNCRTRBRjdDMEM4RURBRTRBREM3QTVBNjY2MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbz14KNbi5wYaTJo9gD/9Bjp9
Id8wYq8WyhQVgN/v/gVetzASGxTrXfvBgMGGs+K6mAoJVHRvXyNje3I4uf5u0oc3
a+GNn081Wxz6g6OFS89kUf0ekr/5lJc+Nb26cX1oIAZi9Q8O/EQKyctz0i11vLFF
jtf1a2s2+OoeqqW3kE4Or3bOKLQqXm8vbiMvGA3RU4H8IgL1HEReh5dGvKNr8+iR
JSGISteKriJgwpe+FCIjdkPdkext2Bax4G99AyZFWOCpCuF8ZhQ56+OMysp0Lcn3
1SYoh73cEZiifxTCYTBPesnpzB0kCOymZzg1DIqcDc1Le0ZEYofjwIKI/kefAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUEF8uQqGQO+SvfAyO2uStx6WmZi4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvdzANBgkqhkiG9w0BAQsFAAOCAQEAA9hW
G6CyX7MIG8x/ziC4gOU1uH06kUnK0ckOtHWWuksdjvFA1XzEMrBHRnUnbpsA5y30
suPnVGhSqAImHB0ACG3psYJMw98wjwW3h8I7rCBWBzzHD4mbuQ12yeauilx/1bjH
e2NeQe+bkerfuDna+NoxNuLIOiONbZHBlt00x4g/qyqxvSr2TG8zCZ5uasTihWmS
DmtViZwIHvKfj95qD02rlTqVxUdzpVtli413IndIkSUy9IzRqK5hhHM3vl7lxdtj
7LAuMmJcbVBFdFbzYgFsiidg8tKOu3P+O3KkhHpz1kwQKyVVMuqPc08koyQ7V0Rn
T1NPrr9xVHJuMLqEOA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:56 2026 by rpki-client