Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146088.roa
File:                     AS146088.roa (raw, json)
Hash identifier:          v6UcNwj01Qr5tT7pNoffPAvBHauClr/8Pwcmh8lBzDM=
Subject key identifier:   A2:C5:20:BA:04:A8:32:38:79:60:A5:EF:A7:83:52:FB:15:36:CD:F9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       78E244E293500980FADBCB9714B169E7B8F8A369
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146088.roa
Signing time:             Fri 22 May 2026 07:40:56 +0000
ROA not before:           Fri 22 May 2026 07:35:56 +0000
ROA not after:            Fri 21 May 2027 07:40:56 +0000
asID:                     146088
IP address blocks:        240a:ad6e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e2:44:e2:93:50:09:80:fa:db:cb:97:14:b1:69:e7:b8:f8:a3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:56 2026 GMT
            Not After : May 21 07:40:56 2027 GMT
        Subject: CN=A2C520BA04A832387960A5EFA78352FB1536CDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:4c:13:9f:f1:a9:71:5a:fc:db:08:1b:42:
                    9b:23:dd:1e:8f:de:4f:9e:01:e6:d1:30:8c:8c:d7:
                    d6:f6:8b:be:e7:cf:a6:d1:18:c2:c9:a9:57:51:38:
                    3e:86:df:3d:e3:d8:39:26:81:31:b9:28:0a:d7:59:
                    d2:a6:e1:a8:ff:e9:89:54:05:41:22:a2:7c:ee:f1:
                    10:47:bd:22:17:39:73:5c:d1:21:93:1b:76:01:e2:
                    d5:81:e6:53:5e:f9:41:2e:eb:9a:a3:75:18:ae:a5:
                    ce:95:99:ff:7d:b4:72:09:65:15:2c:4c:97:ef:2e:
                    8f:7f:dc:05:c0:a0:ab:54:62:d6:fe:62:1c:97:bb:
                    6d:07:8f:ac:95:7e:0c:c7:08:7a:db:cf:70:7e:86:
                    4f:df:dc:30:fb:6a:e9:a8:52:0c:62:33:9e:36:b3:
                    8d:fc:3c:22:e3:57:46:41:d6:34:8c:e4:04:bd:7c:
                    d0:2b:59:8b:cb:96:24:90:49:b3:a5:55:c5:7e:c3:
                    c9:ed:9a:6d:2e:c6:4c:bd:49:ac:24:23:78:8e:c3:
                    a8:9b:f3:0a:6f:e8:ae:40:73:2c:82:92:1d:9c:1e:
                    23:12:d8:5e:d4:5e:e8:11:a4:bb:29:36:9d:e5:a6:
                    73:2e:02:88:45:8c:48:6b:38:9b:05:db:d9:cc:b0:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C5:20:BA:04:A8:32:38:79:60:A5:EF:A7:83:52:FB:15:36:CD:F9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146088.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad6e::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:e0:a5:73:71:cc:ef:7f:07:2f:84:d1:de:37:83:fb:49:ae:
         b6:98:bf:88:c5:b9:06:57:7e:82:29:31:e9:11:1a:da:53:8a:
         61:a6:7e:cc:39:98:0d:da:58:65:b7:c5:18:99:96:ba:93:eb:
         f6:d7:9f:3b:8b:d1:eb:33:79:41:54:26:0c:f4:11:f5:9c:75:
         87:d6:43:09:98:a8:b3:45:d9:74:43:d1:e4:44:dd:81:b4:da:
         7a:de:1d:76:ab:49:92:f9:7b:84:9a:12:0f:29:cb:b5:e3:29:
         20:02:be:46:50:ea:0a:ce:6b:5c:70:38:4f:b6:ea:d8:d2:ac:
         0b:fb:21:11:d0:12:bd:4d:9c:8a:ea:a0:ec:c4:43:d0:d3:95:
         1a:b4:e6:42:31:aa:6d:57:5d:9e:6f:9b:19:45:4a:a1:86:f5:
         28:95:b1:f2:84:0a:1d:62:ca:e5:b7:4f:83:72:34:f6:ad:36:
         ab:9f:96:18:36:58:b0:25:65:59:c9:ba:34:95:05:bb:a4:3d:
         14:ea:f0:ef:b1:35:8b:dd:0c:db:1d:0c:cc:3f:a0:a6:e8:61:
         82:e2:27:29:d7:24:ff:e6:36:94:41:df:a1:fe:3d:02:b5:08:
         c9:ef:20:23:17:cb:4b:10:68:ee:94:5b:63:ae:e3:48:91:9f:
         9a:55:f1:2e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUeOJE4pNQCYD628uXFLFp57j4o2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM1NTZaFw0yNzA1MjEwNzQwNTZaMDMxMTAvBgNV
BAMTKEEyQzUyMEJBMDRBODMyMzg3OTYwQTVFRkE3ODM1MkZCMTUzNkNERjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3D0wTn/GpcVr82wgbQpsj3R6P
3k+eAebRMIyM19b2i77nz6bRGMLJqVdROD6G3z3j2DkmgTG5KArXWdKm4aj/6YlU
BUEionzu8RBHvSIXOXNc0SGTG3YB4tWB5lNe+UEu65qjdRiupc6Vmf99tHIJZRUs
TJfvLo9/3AXAoKtUYtb+YhyXu20Hj6yVfgzHCHrbz3B+hk/f3DD7aumoUgxiM542
s438PCLjV0ZB1jSM5AS9fNArWYvLliSQSbOlVcV+w8ntmm0uxky9SawkI3iOw6ib
8wpv6K5AcyyCkh2cHiMS2F7UXugRpLspNp3lpnMuAohFjEhrOJsF29nMsK2HAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUosUgugSoMjh5YKXvp4NS+xU2zfkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MDg4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtbjANBgkqhkiG9w0BAQsFAAOCAQEALOCl
c3HM738HL4TR3jeD+0mutpi/iMW5Bld+gikx6REa2lOKYaZ+zDmYDdpYZbfFGJmW
upPr9tefO4vR6zN5QVQmDPQR9Zx1h9ZDCZios0XZdEPR5ETdgbTaet4ddqtJkvl7
hJoSDynLteMpIAK+RlDqCs5rXHA4T7bq2NKsC/shEdASvU2ciuqg7MRD0NOVGrTm
QjGqbVddnm+bGUVKoYb1KJWx8oQKHWLK5bdPg3I09q02q5+WGDZYsCVlWcm6NJUF
u6Q9FOrw77E1i90M2x0MzD+gpuhhguInKdck/+Y2lEHfof49ArUIye8gIxfLSxBo
7pRbY67jSJGfmlXxLg==
-----END CERTIFICATE-----