Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146649.roa
File:                     AS146649.roa (raw, json)
Hash identifier:          hIi3EF/FLBBueFVxFwV4Oemazm5Gu0GFRdzX8c03NiU=
Subject key identifier:   5F:5C:98:CE:45:35:0D:A6:E7:02:E2:85:C1:50:8C:D6:1A:47:20:FE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2F63028A5F2C1EA10E02590EFB7B21F751174DF8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146649.roa
Signing time:             Mon 25 May 2026 01:51:33 +0000
ROA not before:           Mon 25 May 2026 01:46:33 +0000
ROA not after:            Mon 24 May 2027 01:51:33 +0000
asID:                     146649
IP address blocks:        240a:af9f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:63:02:8a:5f:2c:1e:a1:0e:02:59:0e:fb:7b:21:f7:51:17:4d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:33 2026 GMT
            Not After : May 24 01:51:33 2027 GMT
        Subject: CN=5F5C98CE45350DA6E702E285C1508CD61A4720FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:57:16:6d:0d:99:4c:7a:3e:10:13:4e:16:
                    cd:d4:a8:39:a0:15:a5:42:97:f3:ef:3c:ba:ff:58:
                    fe:5e:ac:15:90:1f:8d:a3:d8:13:0d:88:fa:7b:48:
                    fb:3e:4f:81:a9:bc:8f:16:4b:25:1c:aa:aa:2e:df:
                    aa:cb:9b:c5:ad:b5:d6:6a:02:8f:8a:b7:69:c2:4f:
                    ed:88:40:6f:18:50:0e:0f:e2:cc:67:19:a7:4a:14:
                    b2:91:ca:1f:7d:84:df:6c:99:40:3e:3e:ee:cb:70:
                    6b:bb:09:86:63:28:a3:03:5e:81:08:fc:af:34:28:
                    38:df:de:3f:90:25:29:be:5f:1d:57:a6:7a:e4:d8:
                    ac:88:81:e3:05:22:da:0f:bf:5d:3a:f3:06:2e:07:
                    2a:ad:7b:4c:07:0d:c0:a0:49:55:24:1c:76:24:6b:
                    d8:90:d4:f1:79:5d:57:ee:8d:51:6a:08:cd:b8:73:
                    e0:74:3c:2d:d1:ef:1c:68:3a:c8:2c:2b:f0:00:5b:
                    4a:70:46:2c:09:0a:5c:a9:a9:1a:db:a6:4b:26:eb:
                    3e:d2:55:ca:3f:4c:e0:6d:33:17:c4:7a:c7:5a:98:
                    1c:c5:8b:d8:bf:ca:08:b7:c9:ec:f7:0a:8c:b9:21:
                    5a:8a:b7:09:72:58:a0:13:55:68:b0:27:57:88:89:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5C:98:CE:45:35:0D:A6:E7:02:E2:85:C1:50:8C:D6:1A:47:20:FE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146649.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af9f::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:96:9c:8d:21:45:a7:29:9e:27:bd:b7:0f:85:e8:3d:60:39:
         0e:c4:63:f4:03:da:1e:73:f9:bc:8d:03:10:bd:4d:7d:46:62:
         65:b7:8b:75:c8:00:de:89:48:55:0d:85:ce:94:dc:45:77:d9:
         f0:d1:13:47:21:d9:90:9b:9a:7c:7f:ee:b3:60:62:61:49:e0:
         44:59:ba:2a:d4:16:b2:30:dc:ba:6a:b6:40:0e:7e:0a:ad:a3:
         08:04:42:71:d0:cb:84:4a:52:09:66:ad:d1:1f:f7:66:d7:b2:
         44:8e:6c:14:7f:cc:cb:bb:f3:4b:48:c2:74:95:0c:e7:ac:7f:
         74:b9:27:44:b6:a9:7b:37:9e:bf:da:03:3d:f7:02:20:59:40:
         da:95:d3:9c:6a:ab:7e:b3:18:81:28:d3:41:ec:da:51:81:34:
         c0:67:58:f0:f1:c7:0d:30:24:e3:19:5c:d7:5d:09:e6:40:83:
         ef:1b:c0:1d:7a:df:61:26:02:fb:6d:b8:e3:c7:ea:03:b4:b7:
         db:78:0b:bd:cf:1e:82:83:11:40:e5:69:bb:2a:62:65:d0:cd:
         cf:d9:f4:77:1d:a0:7b:6c:80:9d:e4:8f:94:07:66:a0:2d:48:
         26:d7:02:03:75:b6:e7:b7:ca:e6:b2:e7:01:6e:11:c8:23:de:
         4d:dd:ec:05
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUL2MCil8sHqEOAlkO+3sh91EXTfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MzNaFw0yNzA1MjQwMTUxMzNaMDMxMTAvBgNV
BAMTKDVGNUM5OENFNDUzNTBEQTZFNzAyRTI4NUMxNTA4Q0Q2MUE0NzIwRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZm1cWbQ2ZTHo+EBNOFs3UqDmg
FaVCl/PvPLr/WP5erBWQH42j2BMNiPp7SPs+T4GpvI8WSyUcqqou36rLm8WttdZq
Ao+Kt2nCT+2IQG8YUA4P4sxnGadKFLKRyh99hN9smUA+Pu7LcGu7CYZjKKMDXoEI
/K80KDjf3j+QJSm+Xx1Xpnrk2KyIgeMFItoPv1068wYuByqte0wHDcCgSVUkHHYk
a9iQ1PF5XVfujVFqCM24c+B0PC3R7xxoOsgsK/AAW0pwRiwJClypqRrbpksm6z7S
Vco/TOBtMxfEesdamBzFi9i/ygi3yez3Coy5IVqKtwlyWKATVWiwJ1eIiRf5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUX1yYzkU1DabnAuKFwVCM1hpHIP4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvnzANBgkqhkiG9w0BAQsFAAOCAQEAKZac
jSFFpymeJ723D4XoPWA5DsRj9APaHnP5vI0DEL1NfUZiZbeLdcgA3olIVQ2FzpTc
RXfZ8NETRyHZkJuafH/us2BiYUngRFm6KtQWsjDcumq2QA5+Cq2jCARCcdDLhEpS
CWat0R/3ZteyRI5sFH/My7vzS0jCdJUM56x/dLknRLapezeev9oDPfcCIFlA2pXT
nGqrfrMYgSjTQezaUYE0wGdY8PHHDTAk4xlc110J5kCD7xvAHXrfYSYC+22448fq
A7S323gLvc8egoMRQOVpuypiZdDNz9n0dx2ge2yAneSPlAdmoC1IJtcCA3W257fK
5rLnAW4RyCPeTd3sBQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:08 2026 by rpki-client