Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146060.roa
File:                     AS146060.roa (raw, json)
Hash identifier:          /QzeJ7NvPc73FBc0p91ohhtZXngN1maGAf4whW0YGUM=
Subject key identifier:   3F:3B:B1:CC:20:B7:6B:7C:75:93:BD:36:E6:A7:53:14:3F:2C:ED:0D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3A51F28E434FE0788CC94507677CE9F537EAB04B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146060.roa
Signing time:             Tue 26 May 2026 08:52:52 +0000
ROA not before:           Tue 26 May 2026 08:47:52 +0000
ROA not after:            Tue 25 May 2027 08:52:52 +0000
asID:                     146060
IP address blocks:        240a:ad52::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:51:f2:8e:43:4f:e0:78:8c:c9:45:07:67:7c:e9:f5:37:ea:b0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:52 2026 GMT
            Not After : May 25 08:52:52 2027 GMT
        Subject: CN=3F3BB1CC20B76B7C7593BD36E6A753143F2CED0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:96:84:5d:97:50:4c:f8:af:dc:af:26:d3:
                    c9:d8:ce:aa:2b:e2:34:f2:94:a3:95:4b:b8:ad:ee:
                    3d:10:76:52:05:10:8f:6c:1e:a2:19:b5:3c:3a:59:
                    b6:6c:ec:85:83:6e:06:1b:a5:57:a0:97:1b:ed:8f:
                    57:35:06:e7:fb:88:b7:b7:a4:26:0f:6d:ab:ec:1c:
                    e8:ba:84:8a:9c:f9:24:04:f7:e6:ce:03:2b:55:1e:
                    0a:43:bb:5c:a3:b9:07:5a:ac:0c:f9:e1:3d:eb:af:
                    86:27:ec:80:78:58:37:11:fd:bd:34:d4:1f:fc:5b:
                    e2:48:f7:be:a1:da:41:2a:b5:69:96:60:17:9b:07:
                    97:de:c4:18:b5:f9:e1:7a:1d:b9:19:ae:d4:95:bc:
                    2a:c3:8a:62:46:b4:ca:b5:35:b4:73:31:56:9e:48:
                    04:b6:48:4a:46:7f:c8:0e:c0:4a:02:8b:57:28:0a:
                    5e:29:c2:34:69:21:8d:58:3b:61:d8:7d:45:7f:92:
                    ee:5e:76:e2:01:64:1e:75:fc:7b:d1:26:e0:ff:59:
                    fc:d9:e0:12:ec:34:d1:0f:ba:1c:69:e6:ee:a5:2e:
                    5b:d9:f3:6f:55:6d:b3:aa:27:91:1d:25:fa:cc:50:
                    95:d9:73:5f:07:a1:ae:ca:e5:38:5e:eb:d9:23:76:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3B:B1:CC:20:B7:6B:7C:75:93:BD:36:E6:A7:53:14:3F:2C:ED:0D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146060.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad52::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:be:43:a1:60:5e:76:25:cf:a7:00:e7:94:bf:37:f1:a2:1d:
         8a:a4:04:99:a4:89:c2:08:d9:17:1f:ad:61:5e:21:e6:73:cd:
         d8:94:5c:c9:47:75:54:ba:8e:bc:e3:5c:26:4f:41:cd:87:c9:
         fe:27:a0:f5:34:11:79:e4:c7:a7:1b:bb:cc:36:c5:49:e7:eb:
         99:7e:a5:16:50:ae:bf:88:9b:d0:05:59:c9:6c:a1:52:5a:4e:
         3a:78:31:f3:f3:8f:65:9c:c7:d2:20:1b:6f:4d:22:02:53:9b:
         a0:de:46:37:ad:84:fe:15:19:a9:f6:2a:93:7d:c7:e8:7e:59:
         6d:2c:02:e2:08:9a:2f:e7:b0:d6:41:0d:ce:ec:4b:ec:71:3f:
         ac:22:bb:f6:1e:81:a3:51:23:1f:cc:09:50:6b:ac:c9:7a:0d:
         9f:5d:68:f6:32:af:d1:32:0b:16:4e:6a:1f:56:47:75:34:87:
         4e:d8:0b:b8:2c:15:e0:56:85:c0:c8:09:80:1d:b5:08:34:8b:
         93:c5:01:2f:08:6e:cc:38:9a:d2:bd:92:4d:c4:ab:8c:a3:dc:
         f0:3f:49:6b:13:61:18:28:97:a4:7f:7f:b8:56:32:97:db:ae:
         77:20:1e:da:4c:03:82:14:c8:50:1e:2f:de:be:02:09:43:82:
         ba:88:e6:8a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOlHyjkNP4HiMyUUHZ3zp9TfqsEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwODQ3NTJaFw0yNzA1MjUwODUyNTJaMDMxMTAvBgNV
BAMTKDNGM0JCMUNDMjBCNzZCN0M3NTkzQkQzNkU2QTc1MzE0M0YyQ0VEMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LpaEXZdQTPiv3K8m08nYzqor
4jTylKOVS7it7j0QdlIFEI9sHqIZtTw6WbZs7IWDbgYbpVeglxvtj1c1Buf7iLe3
pCYPbavsHOi6hIqc+SQE9+bOAytVHgpDu1yjuQdarAz54T3rr4Yn7IB4WDcR/b00
1B/8W+JI976h2kEqtWmWYBebB5fexBi1+eF6HbkZrtSVvCrDimJGtMq1NbRzMVae
SAS2SEpGf8gOwEoCi1coCl4pwjRpIY1YO2HYfUV/ku5eduIBZB51/HvRJuD/WfzZ
4BLsNNEPuhxp5u6lLlvZ829VbbOqJ5EdJfrMUJXZc18Hoa7K5The69kjdoBtAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUPzuxzCC3a3x1k7025qdTFD8s7Q0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MDYwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtUjANBgkqhkiG9w0BAQsFAAOCAQEATb5D
oWBediXPpwDnlL838aIdiqQEmaSJwgjZFx+tYV4h5nPN2JRcyUd1VLqOvONcJk9B
zYfJ/ieg9TQReeTHpxu7zDbFSefrmX6lFlCuv4ib0AVZyWyhUlpOOngx8/OPZZzH
0iAbb00iAlOboN5GN62E/hUZqfYqk33H6H5ZbSwC4giaL+ew1kENzuxL7HE/rCK7
9h6Bo1EjH8wJUGusyXoNn11o9jKv0TILFk5qH1ZHdTSHTtgLuCwV4FaFwMgJgB21
CDSLk8UBLwhuzDia0r2STcSrjKPc8D9JaxNhGCiXpH9/uFYyl9uudyAe2kwDghTI
UB4v3r4CCUOCuojmig==
-----END CERTIFICATE-----