Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146047.roa
File:                     AS146047.roa (raw, json)
Hash identifier:          pWX6rmWN7rGUfDJjL3lf3swEgjZvxF42Oq0yehEhG0g=
Subject key identifier:   5B:9F:36:97:B0:54:E6:26:E7:A7:B4:7B:A0:E3:5F:49:5A:0C:02:52
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       06350EE473D1D629E17892F7121F047B8D875E38
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146047.roa
Signing time:             Fri 22 May 2026 06:46:20 +0000
ROA not before:           Fri 22 May 2026 06:41:20 +0000
ROA not after:            Fri 21 May 2027 06:46:20 +0000
asID:                     146047
IP address blocks:        240a:ad45::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:35:0e:e4:73:d1:d6:29:e1:78:92:f7:12:1f:04:7b:8d:87:5e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:20 2026 GMT
            Not After : May 21 06:46:20 2027 GMT
        Subject: CN=5B9F3697B054E626E7A7B47BA0E35F495A0C0252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:21:17:b8:6d:a5:96:6d:12:d1:53:92:4c:65:
                    c1:3e:e5:62:7c:ac:41:e2:fc:13:0e:7c:e6:10:95:
                    ec:25:b6:5a:72:97:3f:d3:3d:c3:65:10:08:a1:63:
                    3c:6a:97:c9:41:6b:93:d4:4b:7f:55:2f:e3:d5:7c:
                    af:03:2a:e1:c3:26:46:71:29:35:12:51:99:4a:7c:
                    83:22:e8:c8:83:78:a6:a7:1f:59:99:e4:fe:97:ab:
                    f5:df:1d:18:67:e6:84:f5:10:b9:09:f6:98:42:75:
                    63:68:b3:8a:f4:83:11:a0:17:6e:94:69:b9:6a:d9:
                    c0:3e:de:83:0a:8a:14:b3:b2:ca:53:44:5d:5f:35:
                    4e:87:4f:54:5d:e4:0d:1a:64:75:86:f3:2a:60:49:
                    36:c9:d5:61:b8:f8:e7:a6:cd:95:75:bd:c2:94:1e:
                    37:ae:27:9d:87:52:69:97:5e:8b:94:fc:a8:b9:28:
                    f2:46:3d:c5:db:97:41:d6:50:55:11:20:b8:8d:c8:
                    7c:4f:7e:24:95:10:2a:36:ab:6e:2c:92:f6:0e:65:
                    d6:7a:79:20:d2:31:6a:74:73:e2:fd:b0:2e:d9:4c:
                    94:07:d8:89:17:fa:67:e3:0e:fe:b4:d1:0d:a9:ed:
                    9f:72:6f:d1:8a:b9:a7:d9:95:62:58:f9:d6:b0:e4:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9F:36:97:B0:54:E6:26:E7:A7:B4:7B:A0:E3:5F:49:5A:0C:02:52
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146047.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad45::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:b1:8e:e2:a6:64:08:e7:5c:f5:ac:cf:ce:89:eb:2d:c6:cb:
         fb:17:46:ce:3a:37:76:12:2a:3e:24:fe:c3:92:3d:13:69:2e:
         ec:dd:60:f1:ce:0c:86:3c:b5:b3:88:88:b2:19:b3:a9:54:f2:
         a9:08:0e:5b:0c:ef:26:4c:5b:42:2c:aa:07:34:18:9d:88:99:
         18:26:d8:50:99:35:57:a8:b2:c1:54:d0:4f:67:ac:ad:88:58:
         f1:59:e5:40:c2:f4:75:4b:23:a9:08:1d:08:13:0f:90:61:e3:
         e9:91:7f:02:ab:d9:3a:69:ef:cb:6c:3a:2d:1c:3f:08:03:cf:
         2f:2e:63:03:0a:7a:00:36:6f:a0:09:28:b1:60:7b:c4:98:13:
         3b:11:c4:84:92:13:7c:8f:94:25:6c:b5:32:f9:32:1d:f9:69:
         b8:6e:13:2d:17:c1:7c:06:c1:cc:25:4d:29:f1:35:06:09:f5:
         48:b9:78:43:17:33:e8:ce:ad:55:5c:ae:a4:c9:e3:48:94:90:
         da:95:b1:e2:01:f8:34:76:c8:ab:eb:ba:87:bf:fe:7b:86:70:
         ce:01:34:bd:ed:81:13:4e:b8:e9:6f:3b:1d:fd:db:65:c0:63:
         6f:bb:e8:89:67:6d:71:49:79:35:81:a8:0d:d2:20:43:75:95:
         7e:58:c3:fb
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBjUO5HPR1inheJL3Eh8Ee42HXjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMjBaFw0yNzA1MjEwNjQ2MjBaMDMxMTAvBgNV
BAMTKDVCOUYzNjk3QjA1NEU2MjZFN0E3QjQ3QkEwRTM1RjQ5NUEwQzAyNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlIRe4baWWbRLRU5JMZcE+5WJ8
rEHi/BMOfOYQlewltlpylz/TPcNlEAihYzxql8lBa5PUS39VL+PVfK8DKuHDJkZx
KTUSUZlKfIMi6MiDeKanH1mZ5P6Xq/XfHRhn5oT1ELkJ9phCdWNos4r0gxGgF26U
ablq2cA+3oMKihSzsspTRF1fNU6HT1Rd5A0aZHWG8ypgSTbJ1WG4+OemzZV1vcKU
HjeuJ52HUmmXXouU/Ki5KPJGPcXbl0HWUFURILiNyHxPfiSVECo2q24skvYOZdZ6
eSDSMWp0c+L9sC7ZTJQH2IkX+mfjDv600Q2p7Z9yb9GKuafZlWJY+daw5CuzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUW582l7BU5ibnp7R7oONfSVoMAlIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MDQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtRTANBgkqhkiG9w0BAQsFAAOCAQEAZbGO
4qZkCOdc9azPzonrLcbL+xdGzjo3dhIqPiT+w5I9E2ku7N1g8c4Mhjy1s4iIshmz
qVTyqQgOWwzvJkxbQiyqBzQYnYiZGCbYUJk1V6iywVTQT2esrYhY8VnlQML0dUsj
qQgdCBMPkGHj6ZF/AqvZOmnvy2w6LRw/CAPPLy5jAwp6ADZvoAkosWB7xJgTOxHE
hJITfI+UJWy1MvkyHflpuG4TLRfBfAbBzCVNKfE1Bgn1SLl4Qxcz6M6tVVyupMnj
SJSQ2pWx4gH4NHbIq+u6h7/+e4ZwzgE0ve2BE0646W87Hf3bZcBjb7voiWdtcUl5
NYGoDdIgQ3WVfljD+w==
-----END CERTIFICATE-----