Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146715.roa
File:                     AS146715.roa (raw, json)
Hash identifier:          jlcyPGBV5qkz6OekT90zgtOthEBJTVOkPQFKyv1aSbY=
Subject key identifier:   C7:7F:C9:C1:5F:39:E5:6F:D2:6F:32:BE:76:B8:86:17:DA:1F:11:A3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       33B33CB78E43008DEA72437AB62DFA2AC7794B7C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146715.roa
Signing time:             Tue 26 May 2026 06:12:51 +0000
ROA not before:           Tue 26 May 2026 06:07:51 +0000
ROA not after:            Tue 25 May 2027 06:12:51 +0000
asID:                     146715
IP address blocks:        240a:afe1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b3:3c:b7:8e:43:00:8d:ea:72:43:7a:b6:2d:fa:2a:c7:79:4b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:51 2026 GMT
            Not After : May 25 06:12:51 2027 GMT
        Subject: CN=C77FC9C15F39E56FD26F32BE76B88617DA1F11A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5d:dd:0a:32:f0:3d:2c:9a:5c:8e:22:0d:e9:
                    94:9e:88:b1:24:f8:86:69:79:8a:60:7f:93:24:83:
                    74:3d:12:26:ed:9b:a4:d5:a1:ed:4a:b0:81:af:e8:
                    f5:58:83:74:69:d6:fe:a2:fe:f0:78:5f:a8:22:57:
                    70:16:43:a3:58:c1:78:96:8d:1a:24:fc:ab:57:99:
                    f0:52:71:58:b6:ba:7c:25:9a:ed:3d:fd:91:82:67:
                    d4:d9:e5:0f:a5:51:c3:59:a5:cb:e0:20:b0:5a:ff:
                    3a:16:59:99:ed:18:21:d8:7d:fb:97:33:3a:ec:1f:
                    6d:c0:bf:72:53:b5:56:81:7e:13:c6:bb:0d:c8:05:
                    c3:31:f8:60:c5:03:bf:d0:1f:62:b1:74:70:4b:05:
                    d8:24:47:20:5c:cb:8f:f4:15:57:c0:d2:b0:18:45:
                    52:3d:73:ff:bf:1b:02:35:73:e4:25:a6:e7:a8:a2:
                    74:3b:7d:b3:03:cf:e0:e9:ff:a9:4b:a8:b6:6c:bf:
                    4d:ab:b8:8e:e4:56:01:1f:e9:35:f3:9f:28:80:88:
                    0d:9c:7e:34:9e:e4:34:ce:66:60:44:f7:d7:7b:17:
                    28:82:bf:4c:0e:c6:51:55:47:da:11:a2:2d:ad:31:
                    ef:76:e5:9c:ee:35:2e:ec:8a:d1:8b:e3:15:66:ca:
                    d7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7F:C9:C1:5F:39:E5:6F:D2:6F:32:BE:76:B8:86:17:DA:1F:11:A3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146715.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afe1::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:b1:2d:d8:7d:66:d8:3b:45:1a:ac:85:35:82:74:1f:a7:89:
         bb:e2:7b:71:8b:b4:89:fd:77:65:56:46:7c:8f:58:43:e5:34:
         61:5c:64:ca:73:17:53:d3:b5:26:08:b6:a8:86:91:63:cb:d3:
         17:1d:36:c2:61:1d:8a:b6:70:a4:67:f0:12:94:21:f5:7a:ed:
         7b:96:b2:de:b3:f0:fd:89:09:dc:2c:cc:ce:82:e0:49:10:98:
         7b:f1:c4:bb:24:58:72:5b:66:08:d2:76:7e:28:75:fe:88:60:
         ab:50:79:53:3f:35:1e:e2:63:78:2c:79:3a:50:2b:08:40:de:
         7d:0f:a4:0a:07:15:e6:6b:a2:e9:c3:b8:b8:d6:33:28:fd:f4:
         63:5a:8d:b4:61:88:58:dc:af:45:b1:d9:7a:b1:69:f9:ca:6d:
         73:3a:4b:90:00:a9:00:27:ff:ad:6f:0f:19:71:de:49:4f:14:
         6c:bd:16:77:53:61:26:f8:61:2f:b9:1a:12:67:0b:e0:5f:ea:
         08:41:ae:5e:6f:f3:b4:95:61:0b:c6:cb:bd:3b:fa:80:53:cc:
         8e:12:09:13:31:01:51:f5:d1:a6:d3:3e:58:5b:21:ca:f1:fd:
         d8:c8:ba:14:c3:7e:0a:4f:38:9b:16:3b:bd:c9:36:9d:d5:27:
         0a:8d:2f:38
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUM7M8t45DAI3qckN6ti36Ksd5S3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3NTFaFw0yNzA1MjUwNjEyNTFaMDMxMTAvBgNV
BAMTKEM3N0ZDOUMxNUYzOUU1NkZEMjZGMzJCRTc2Qjg4NjE3REExRjExQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXXd0KMvA9LJpcjiIN6ZSeiLEk
+IZpeYpgf5Mkg3Q9Eibtm6TVoe1KsIGv6PVYg3Rp1v6i/vB4X6giV3AWQ6NYwXiW
jRok/KtXmfBScVi2unwlmu09/ZGCZ9TZ5Q+lUcNZpcvgILBa/zoWWZntGCHYffuX
MzrsH23Av3JTtVaBfhPGuw3IBcMx+GDFA7/QH2KxdHBLBdgkRyBcy4/0FVfA0rAY
RVI9c/+/GwI1c+QlpueoonQ7fbMDz+Dp/6lLqLZsv02ruI7kVgEf6TXznyiAiA2c
fjSe5DTOZmBE99d7FyiCv0wOxlFVR9oRoi2tMe925ZzuNS7sitGL4xVmytcXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUx3/JwV855W/SbzK+driGF9ofEaMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NzE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqv4TANBgkqhkiG9w0BAQsFAAOCAQEAR7Et
2H1m2DtFGqyFNYJ0H6eJu+J7cYu0if13ZVZGfI9YQ+U0YVxkynMXU9O1Jgi2qIaR
Y8vTFx02wmEdirZwpGfwEpQh9Xrte5ay3rPw/YkJ3CzMzoLgSRCYe/HEuyRYcltm
CNJ2fih1/ohgq1B5Uz81HuJjeCx5OlArCEDefQ+kCgcV5mui6cO4uNYzKP30Y1qN
tGGIWNyvRbHZerFp+cptczpLkACpACf/rW8PGXHeSU8UbL0Wd1NhJvhhL7kaEmcL
4F/qCEGuXm/ztJVhC8bLvTv6gFPMjhIJEzEBUfXRptM+WFshyvH92Mi6FMN+Ck84
mxY7vck2ndUnCo0vOA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:00 2026 by rpki-client