Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146622.roa
File:                     AS146622.roa (raw, json)
Hash identifier:          9t/thQSUDHPH3wK749AqhtFXeqCieQfBEXZdX+96+fk=
Subject key identifier:   CA:97:65:BC:37:3F:06:EF:66:0E:39:A9:4E:C8:4E:49:A5:60:F1:48
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0783B85C588B718086CD51C0D4B1768B3EF3437B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146622.roa
Signing time:             Mon 25 May 2026 06:48:53 +0000
ROA not before:           Mon 25 May 2026 06:43:53 +0000
ROA not after:            Mon 24 May 2027 06:48:53 +0000
asID:                     146622
IP address blocks:        240a:af84::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:83:b8:5c:58:8b:71:80:86:cd:51:c0:d4:b1:76:8b:3e:f3:43:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:53 2026 GMT
            Not After : May 24 06:48:53 2027 GMT
        Subject: CN=CA9765BC373F06EF660E39A94EC84E49A560F148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:56:a3:59:74:a1:74:86:dc:31:88:99:1e:
                    b9:9e:5f:68:20:64:97:99:28:4d:bc:2b:06:35:8a:
                    93:67:cf:57:7b:d1:2b:61:7e:ed:7a:c8:c9:bb:0a:
                    07:ba:5e:04:47:42:ac:6b:7a:50:55:97:b1:23:5e:
                    1d:a3:49:56:4b:19:27:c3:72:f9:ed:52:c7:44:29:
                    d2:01:c4:81:53:14:f8:b8:9b:1b:e0:72:49:25:6c:
                    bd:06:c3:77:ef:31:c9:af:c0:b6:f6:27:48:87:54:
                    89:07:0c:c6:8f:94:3b:67:a0:2e:2e:bf:d6:47:86:
                    4f:8e:3b:a5:41:b6:73:91:8e:66:e4:ef:78:79:94:
                    72:04:ce:51:1b:3c:47:d1:24:c5:6e:19:e6:d0:6b:
                    82:67:6f:2e:48:91:ee:49:31:e8:43:2b:88:25:d8:
                    96:44:08:22:fa:c4:2c:61:b3:ca:cf:f5:84:92:92:
                    5c:c6:fe:19:3f:fd:c3:4a:e8:46:ee:66:ac:76:95:
                    57:8e:93:8e:20:7f:d6:d6:c9:ea:40:1e:9b:5c:54:
                    dd:5c:5f:7c:f4:42:93:f0:ba:9e:03:a3:e2:7e:1e:
                    eb:b5:a8:51:ee:00:cc:d9:84:51:8e:04:99:6a:66:
                    10:08:d4:05:ea:2b:44:92:eb:b9:0b:94:60:8d:ef:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:97:65:BC:37:3F:06:EF:66:0E:39:A9:4E:C8:4E:49:A5:60:F1:48
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146622.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af84::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:62:76:08:fe:6a:b7:6e:1b:c4:27:9e:9a:6b:06:15:71:58:
         0e:7c:34:f6:72:99:3b:6a:eb:04:35:41:1a:97:5f:5e:dc:e2:
         24:ef:87:e6:37:4f:14:2d:01:1c:88:78:43:c2:7b:c0:0a:29:
         b1:d9:85:de:56:25:5f:01:bf:30:2b:fe:55:7b:6f:37:81:e0:
         8c:91:88:55:10:34:0f:50:2c:d2:f5:e8:2f:0d:2b:ba:81:cd:
         26:0e:83:ef:d8:cc:72:0f:3e:7a:19:34:6d:5a:66:c0:97:39:
         19:1a:2d:e6:be:33:89:11:5a:bd:a5:84:a7:7d:fc:11:28:8f:
         c3:7f:30:b5:88:f5:5b:db:70:a0:98:94:3b:fc:f5:80:54:31:
         47:9f:1e:05:40:8d:4e:c2:2c:4b:dd:6f:a6:ff:9f:f6:be:87:
         db:3e:00:84:d1:aa:98:b3:a8:0d:98:19:85:8d:8b:37:0a:83:
         dd:68:38:1c:a9:43:01:3c:d6:51:ab:db:5b:53:a6:59:3f:60:
         4a:d2:c6:a1:51:e4:b5:d3:bf:2e:9d:11:3f:0e:93:ed:88:a5:
         23:5e:01:69:03:57:df:25:78:c8:34:68:5f:b8:fa:46:53:fb:
         27:19:60:12:13:1e:09:4d:b2:ac:ec:dc:e0:45:52:ab:5a:32:
         f8:a7:8c:7a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUB4O4XFiLcYCGzVHA1LF2iz7zQ3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNTNaFw0yNzA1MjQwNjQ4NTNaMDMxMTAvBgNV
BAMTKENBOTc2NUJDMzczRjA2RUY2NjBFMzlBOTRFQzg0RTQ5QTU2MEYxNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdhlajWXShdIbcMYiZHrmeX2gg
ZJeZKE28KwY1ipNnz1d70Sthfu16yMm7Cge6XgRHQqxrelBVl7EjXh2jSVZLGSfD
cvntUsdEKdIBxIFTFPi4mxvgckklbL0Gw3fvMcmvwLb2J0iHVIkHDMaPlDtnoC4u
v9ZHhk+OO6VBtnORjmbk73h5lHIEzlEbPEfRJMVuGebQa4Jnby5Ike5JMehDK4gl
2JZECCL6xCxhs8rP9YSSklzG/hk//cNK6EbuZqx2lVeOk44gf9bWyepAHptcVN1c
X3z0QpPwup4Do+J+Huu1qFHuAMzZhFGOBJlqZhAI1AXqK0SS67kLlGCN74iDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUypdlvDc/Bu9mDjmpTshOSaVg8UgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjIyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvhDANBgkqhkiG9w0BAQsFAAOCAQEAfGJ2
CP5qt24bxCeemmsGFXFYDnw09nKZO2rrBDVBGpdfXtziJO+H5jdPFC0BHIh4Q8J7
wAopsdmF3lYlXwG/MCv+VXtvN4HgjJGIVRA0D1As0vXoLw0ruoHNJg6D79jMcg8+
ehk0bVpmwJc5GRot5r4ziRFavaWEp338ESiPw38wtYj1W9twoJiUO/z1gFQxR58e
BUCNTsIsS91vpv+f9r6H2z4AhNGqmLOoDZgZhY2LNwqD3Wg4HKlDATzWUavbW1Om
WT9gStLGoVHktdO/Lp0RPw6T7YilI14BaQNX3yV4yDRoX7j6RlP7JxlgEhMeCU2y
rOzc4EVSq1oy+KeMeg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:46 2026 by rpki-client