Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146062.roa
File:                     AS146062.roa (raw, json)
Hash identifier:          qFBoAts5F6UWC35opTJX1rOEHbMBrTlD7wHV8YQvqn8=
Subject key identifier:   C3:F2:35:1A:BD:95:E8:F0:B1:47:76:EB:D4:D8:AE:6D:44:FB:5F:DA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3F784476E8D1D887421B80E0F929EDDEE7779A1A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146062.roa
Signing time:             Fri 22 May 2026 06:27:44 +0000
ROA not before:           Fri 22 May 2026 06:22:44 +0000
ROA not after:            Fri 21 May 2027 06:27:44 +0000
asID:                     146062
IP address blocks:        240a:ad54::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:78:44:76:e8:d1:d8:87:42:1b:80:e0:f9:29:ed:de:e7:77:9a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:44 2026 GMT
            Not After : May 21 06:27:44 2027 GMT
        Subject: CN=C3F2351ABD95E8F0B14776EBD4D8AE6D44FB5FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:97:d5:a3:9d:b5:ff:1b:3f:3d:39:85:db:c6:
                    fa:ac:6b:df:53:12:4d:9d:0a:1f:e6:df:2f:af:4f:
                    23:ef:15:ce:5b:df:04:af:36:41:40:5a:7d:2c:f2:
                    45:2f:55:c3:46:1b:57:a3:7e:4b:5c:19:6d:1b:ab:
                    5d:80:50:0c:a6:62:bb:83:5b:8f:12:54:e0:e7:0f:
                    32:6b:ca:f5:63:fc:27:eb:6c:e7:cb:86:ef:db:8d:
                    b1:06:52:d8:81:bf:ee:cf:5d:e6:47:4a:de:e1:17:
                    6b:5f:c9:a8:3f:40:68:ac:14:07:70:d1:15:97:56:
                    86:f2:5d:08:36:b5:a8:db:6d:e9:f5:53:a4:3c:46:
                    7d:ab:68:17:01:89:6b:cd:bd:2f:4e:04:07:da:49:
                    18:92:20:aa:72:12:47:d1:af:66:8f:75:9f:bc:2e:
                    2d:d8:69:3d:60:84:4e:2c:a2:01:df:17:71:19:29:
                    7f:10:40:61:fa:de:84:24:2c:86:b5:2c:44:52:5c:
                    9a:94:cd:af:a7:3e:af:1a:e1:44:29:63:f2:b3:d0:
                    d7:fc:59:9e:56:c3:34:87:13:93:7a:1d:ae:dc:56:
                    9c:cf:de:24:52:4c:fa:d3:61:f0:5c:f0:8c:df:dc:
                    74:e1:f8:dc:56:a9:e1:a3:55:84:6e:7d:24:ed:f4:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:35:1A:BD:95:E8:F0:B1:47:76:EB:D4:D8:AE:6D:44:FB:5F:DA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146062.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad54::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:5b:f1:18:44:84:10:83:06:70:45:d0:33:99:bf:3c:14:6c:
         db:62:43:c3:f9:05:a0:1c:d6:74:f8:aa:f8:5b:09:ed:d2:b9:
         fc:85:8f:48:4f:2e:5b:95:4e:91:9f:df:48:d7:b7:56:de:2b:
         27:14:4b:27:1d:bf:ad:60:ac:b0:1b:be:76:0a:ca:d9:ea:af:
         b1:d8:61:5b:52:47:cd:02:30:60:7c:ca:7c:3b:71:09:b6:63:
         e6:ca:4e:f4:98:9c:f2:38:cb:6a:3d:3e:1b:be:98:15:e9:2f:
         81:a8:7a:d9:29:96:2e:a1:43:28:05:4e:08:bf:d4:b0:c4:86:
         0d:1d:3d:a5:8e:3d:1e:53:21:bc:1e:39:7c:32:fe:37:9b:60:
         2a:46:a0:02:dd:ab:52:63:53:c7:93:1a:48:dc:20:8b:ed:d6:
         20:9a:26:01:48:fb:2d:c7:40:1b:71:b1:9a:8c:54:32:5f:73:
         0e:b1:9e:fe:d5:ce:d3:d1:2d:93:00:69:cd:51:cb:e1:29:80:
         75:99:72:dc:74:75:11:02:13:56:09:65:4b:b5:cc:ee:d2:86:
         fa:ea:56:99:5d:b2:57:a8:68:81:c3:6c:f4:ae:20:be:69:5a:
         74:a9:26:fc:28:5d:64:75:4f:3a:9e:f4:1b:7a:85:e4:d1:ca:
         a4:90:48:a6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUP3hEdujR2IdCG4Dg+Snt3ud3mhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNDRaFw0yNzA1MjEwNjI3NDRaMDMxMTAvBgNV
BAMTKEMzRjIzNTFBQkQ5NUU4RjBCMTQ3NzZFQkQ0RDhBRTZENDRGQjVGREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdl9WjnbX/Gz89OYXbxvqsa99T
Ek2dCh/m3y+vTyPvFc5b3wSvNkFAWn0s8kUvVcNGG1ejfktcGW0bq12AUAymYruD
W48SVODnDzJryvVj/CfrbOfLhu/bjbEGUtiBv+7PXeZHSt7hF2tfyag/QGisFAdw
0RWXVobyXQg2tajbben1U6Q8Rn2raBcBiWvNvS9OBAfaSRiSIKpyEkfRr2aPdZ+8
Li3YaT1ghE4sogHfF3EZKX8QQGH63oQkLIa1LERSXJqUza+nPq8a4UQpY/Kz0Nf8
WZ5WwzSHE5N6Ha7cVpzP3iRSTPrTYfBc8Izf3HTh+NxWqeGjVYRufSTt9NdVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUw/I1Gr2V6PCxR3br1NiubUT7X9owHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MDYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtVDANBgkqhkiG9w0BAQsFAAOCAQEAMlvx
GESEEIMGcEXQM5m/PBRs22JDw/kFoBzWdPiq+FsJ7dK5/IWPSE8uW5VOkZ/fSNe3
Vt4rJxRLJx2/rWCssBu+dgrK2eqvsdhhW1JHzQIwYHzKfDtxCbZj5spO9Jic8jjL
aj0+G76YFekvgah62SmWLqFDKAVOCL/UsMSGDR09pY49HlMhvB45fDL+N5tgKkag
At2rUmNTx5MaSNwgi+3WIJomAUj7LcdAG3GxmoxUMl9zDrGe/tXO09EtkwBpzVHL
4SmAdZly3HR1EQITVgllS7XM7tKG+upWmV2yV6hogcNs9K4gvmladKkm/ChdZHVP
Op70G3qF5NHKpJBIpg==
-----END CERTIFICATE-----