Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146616.roa
File:                     AS146616.roa (raw, json)
Hash identifier:          pLqgowp8631jn8Uyq2PeIA0borCOqS7N8VTdbiLX38w=
Subject key identifier:   6E:31:C1:D7:5B:AC:2C:F0:EB:CD:9F:CB:FB:3E:6B:C2:99:93:24:6D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4D0BEA92EEE20AA3A15EA9F29C016E47B3295B2C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146616.roa
Signing time:             Mon 25 May 2026 06:48:51 +0000
ROA not before:           Mon 25 May 2026 06:43:51 +0000
ROA not after:            Mon 24 May 2027 06:48:51 +0000
asID:                     146616
IP address blocks:        240a:af7e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0b:ea:92:ee:e2:0a:a3:a1:5e:a9:f2:9c:01:6e:47:b3:29:5b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:51 2026 GMT
            Not After : May 24 06:48:51 2027 GMT
        Subject: CN=6E31C1D75BAC2CF0EBCD9FCBFB3E6BC29993246D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:c6:d8:99:45:9a:60:c1:21:c5:59:eb:e5:
                    cd:94:fd:58:ab:08:2e:94:f2:b8:99:cd:7a:2c:bb:
                    95:1b:11:9b:15:2e:7a:98:73:4b:1b:11:3d:80:bc:
                    46:f8:05:fe:7e:9f:f8:39:6e:85:20:e6:a1:6a:fe:
                    42:35:b7:87:28:af:b0:32:41:b0:44:8c:e1:7b:f4:
                    b6:44:86:6c:a5:5d:3a:c8:d1:0f:dc:7d:b3:5e:dd:
                    bf:54:cb:80:b0:f9:46:e5:25:cc:8e:d3:8a:59:b6:
                    b0:e6:e2:8f:77:c5:7d:73:03:39:50:5b:50:34:77:
                    98:d8:ba:69:90:72:50:46:74:64:3c:fa:2b:ac:73:
                    e2:3a:27:eb:4c:92:9e:e1:06:71:90:74:9f:f2:d2:
                    81:c2:e5:7f:02:6c:e8:84:bf:8f:92:6c:e3:c9:b2:
                    20:df:11:62:24:24:21:83:56:30:f6:92:a8:02:e8:
                    5b:b2:fa:6b:be:4b:8d:04:84:c6:62:3d:5d:31:ca:
                    81:a7:e1:d6:8b:fe:a5:41:d1:1d:a0:d4:b7:7e:57:
                    40:19:eb:66:f6:f6:3d:c3:87:a2:26:23:e0:5c:e2:
                    0c:fa:b5:80:53:55:2c:72:c9:1f:b2:45:39:fc:ce:
                    c1:9c:b9:13:07:89:34:a2:48:c9:c9:b6:ef:01:22:
                    68:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:31:C1:D7:5B:AC:2C:F0:EB:CD:9F:CB:FB:3E:6B:C2:99:93:24:6D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146616.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af7e::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:8b:b5:e8:47:22:19:f5:eb:dc:5d:9a:c5:27:99:db:a0:49:
         cc:a9:78:64:4e:44:34:c3:c8:09:38:ba:0a:bb:3d:c2:81:6a:
         a0:4c:3c:d7:d7:d1:8a:db:7e:b4:c6:a9:e3:a1:71:ab:36:8a:
         95:f5:89:19:ae:f0:89:76:bb:f1:4a:d1:11:f2:54:cd:44:5a:
         c2:d0:41:68:ab:82:8f:ec:aa:b6:42:b0:3a:80:74:44:00:01:
         54:6f:6d:e8:54:37:51:00:cd:36:e2:09:be:83:9e:04:d7:f3:
         9b:b8:38:a0:0f:bc:26:c5:44:fc:50:04:61:36:25:93:b4:4d:
         d3:b7:17:e8:8f:4f:78:88:90:72:f0:5e:c7:28:63:13:a3:84:
         f9:0e:50:63:41:45:87:07:61:9c:61:7c:93:37:77:dc:56:2d:
         66:3f:01:42:e7:5b:82:56:e0:57:ea:89:5b:d7:91:33:35:5c:
         11:de:3a:31:34:6d:ee:f7:ef:dd:f8:08:14:cd:b0:8f:63:87:
         59:bb:54:7d:a0:23:2d:aa:42:01:0a:e5:25:3e:df:88:28:36:
         d0:40:02:47:e1:bd:a9:e0:4a:cb:42:b4:8c:90:5e:18:a9:2b:
         2f:86:a6:08:3d:0c:df:d7:cc:4d:e3:c5:4b:1d:d0:bc:b2:d2:
         ee:64:6b:62
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTQvqku7iCqOhXqnynAFuR7MpWywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNTFaFw0yNzA1MjQwNjQ4NTFaMDMxMTAvBgNV
BAMTKDZFMzFDMUQ3NUJBQzJDRjBFQkNEOUZDQkZCM0U2QkMyOTk5MzI0NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgsbYmUWaYMEhxVnr5c2U/Vir
CC6U8riZzXosu5UbEZsVLnqYc0sbET2AvEb4Bf5+n/g5boUg5qFq/kI1t4cor7Ay
QbBEjOF79LZEhmylXTrI0Q/cfbNe3b9Uy4Cw+UblJcyO04pZtrDm4o93xX1zAzlQ
W1A0d5jYummQclBGdGQ8+iusc+I6J+tMkp7hBnGQdJ/y0oHC5X8CbOiEv4+SbOPJ
siDfEWIkJCGDVjD2kqgC6Fuy+mu+S40EhMZiPV0xyoGn4daL/qVB0R2g1Ld+V0AZ
62b29j3Dh6ImI+Bc4gz6tYBTVSxyyR+yRTn8zsGcuRMHiTSiSMnJtu8BImi9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbjHB11usLPDrzZ/L+z5rwpmTJG0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjE2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvfjANBgkqhkiG9w0BAQsFAAOCAQEAQIu1
6EciGfXr3F2axSeZ26BJzKl4ZE5ENMPICTi6Crs9woFqoEw819fRitt+tMap46Fx
qzaKlfWJGa7wiXa78UrREfJUzURawtBBaKuCj+yqtkKwOoB0RAABVG9t6FQ3UQDN
NuIJvoOeBNfzm7g4oA+8JsVE/FAEYTYlk7RN07cX6I9PeIiQcvBexyhjE6OE+Q5Q
Y0FFhwdhnGF8kzd33FYtZj8BQudbglbgV+qJW9eRMzVcEd46MTRt7vfv3fgIFM2w
j2OHWbtUfaAjLapCAQrlJT7fiCg20EACR+G9qeBKy0K0jJBeGKkrL4amCD0M39fM
TePFSx3QvLLS7mRrYg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:20 2026 by rpki-client