Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146049.roa
File:                     AS146049.roa (raw, json)
Hash identifier:          1icxrQ0cGVmdjj2rqskUGWUSqG1mskpz8n+JiJw2UdE=
Subject key identifier:   8C:CD:6F:FC:03:06:C7:2E:A0:71:53:B4:33:AC:FB:BE:0E:73:EB:20
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       59D105A8C94A2AC5E013B05EE9660F64CD5FA782
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146049.roa
Signing time:             Fri 22 May 2026 01:50:27 +0000
ROA not before:           Fri 22 May 2026 01:45:27 +0000
ROA not after:            Fri 21 May 2027 01:50:27 +0000
asID:                     146049
IP address blocks:        240a:ad47::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d1:05:a8:c9:4a:2a:c5:e0:13:b0:5e:e9:66:0f:64:cd:5f:a7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:27 2026 GMT
            Not After : May 21 01:50:27 2027 GMT
        Subject: CN=8CCD6FFC0306C72EA07153B433ACFBBE0E73EB20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:77:09:86:fd:5c:eb:f9:91:6b:ab:38:bb:b9:
                    71:2b:c2:b4:eb:5c:8f:cc:db:59:11:24:37:7f:53:
                    9e:b2:ed:44:0f:ea:fd:70:9a:7b:ca:9f:3b:ec:e2:
                    67:cc:19:d3:c4:e7:2f:11:b7:f1:50:d8:3a:c6:dd:
                    a7:04:ce:13:9c:db:13:0d:0b:12:c0:75:55:3f:47:
                    b0:ad:43:e5:b5:fb:91:b0:76:8b:b0:21:ff:87:10:
                    04:c5:1c:60:49:ac:f0:f0:40:13:de:e0:98:62:b8:
                    36:5c:5e:4e:c5:b6:01:0e:15:9c:19:0c:30:fb:19:
                    9f:4c:6a:e5:58:91:83:8d:56:0c:ae:54:7a:d8:3c:
                    43:d7:c0:88:a6:eb:e5:0d:97:17:a2:53:68:12:8b:
                    2c:89:ef:d6:73:5e:1d:bd:5d:1d:d0:62:79:8e:cc:
                    29:f7:f4:f0:52:90:40:b3:c1:f2:de:de:11:b6:71:
                    70:b3:e3:46:ea:99:86:9c:ce:be:68:99:5f:83:82:
                    77:b6:a0:3a:f3:d4:0e:7a:7f:a9:5a:9b:22:25:98:
                    8d:10:e1:95:c5:39:ee:b6:05:ef:e8:e9:f1:5e:a8:
                    a0:43:1c:02:68:37:0d:4a:7c:5b:df:8c:20:f0:3f:
                    a6:fc:56:4e:ae:cd:56:ae:ec:c7:03:76:e6:cf:52:
                    a8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CD:6F:FC:03:06:C7:2E:A0:71:53:B4:33:AC:FB:BE:0E:73:EB:20
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146049.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad47::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:82:24:3d:30:8c:1b:69:51:c1:eb:b3:e5:58:83:e6:6a:b4:
         6e:69:97:58:bd:f1:ae:9e:53:42:69:ca:45:f8:74:c7:b6:d0:
         e3:cf:10:cf:fc:15:83:8a:88:11:92:a5:8d:fd:bd:b1:b8:43:
         d8:45:02:8e:23:00:b9:da:10:5f:9a:c4:f9:66:73:40:46:08:
         8c:2e:0b:7b:a2:7a:22:c9:37:6c:78:8f:c9:ed:c2:34:ef:d2:
         91:29:19:98:bf:d9:e5:9c:82:22:c0:63:64:e9:1d:88:69:88:
         6d:0d:f1:3e:73:9b:5f:3b:cb:ed:dd:bc:44:70:75:4e:67:e3:
         fd:76:bf:2a:64:b0:57:b2:d3:4a:c5:7e:bd:45:51:ee:df:90:
         ff:ab:a0:91:45:85:4f:e1:4c:b5:75:10:0c:10:7a:96:c1:a7:
         87:9b:2c:5d:c3:3f:5f:02:fa:cc:3f:f7:ba:8a:7f:37:67:df:
         f9:88:b1:0f:41:74:47:58:0a:db:7f:7a:ac:7a:4f:bd:3f:e6:
         01:52:c1:45:df:c6:d3:25:91:2b:7b:68:1e:2c:72:6a:e5:c4:
         98:31:6f:d6:0e:37:7c:0f:f2:b3:b1:f3:70:33:7b:f9:3d:cd:
         a7:53:8c:10:ff:62:87:43:d4:9d:4a:10:58:e1:b7:b3:e0:30:
         f0:be:28:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----