Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146112.roa
File:                     AS146112.roa (raw, json)
Hash identifier:          xIlTnsjgEDp2+dXlNlwxuBeyX06pkSdubUNAGsR9m10=
Subject key identifier:   36:23:52:E6:E3:F7:AE:9C:43:D9:39:83:EB:43:1A:90:E1:AD:6E:A5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       55B6BD258E73BBDE49E972BABE97780FFD749CEB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146112.roa
Signing time:             Mon 25 May 2026 01:51:17 +0000
ROA not before:           Mon 25 May 2026 01:46:17 +0000
ROA not after:            Mon 24 May 2027 01:51:17 +0000
asID:                     146112
IP address blocks:        240a:ad86::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b6:bd:25:8e:73:bb:de:49:e9:72:ba:be:97:78:0f:fd:74:9c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:17 2026 GMT
            Not After : May 24 01:51:17 2027 GMT
        Subject: CN=362352E6E3F7AE9C43D93983EB431A90E1AD6EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:55:f9:53:24:74:d5:48:3e:ea:bb:4b:dc:
                    e3:6f:b3:06:2c:f7:32:84:3c:76:af:62:6d:ed:51:
                    47:e4:e4:4b:44:d6:da:40:08:60:c3:b0:6c:a0:3f:
                    67:cd:ad:52:94:c9:77:a2:20:01:74:3b:c2:15:89:
                    47:16:71:41:4a:d7:bc:e4:9f:c2:62:50:ed:f4:f2:
                    96:36:bd:68:92:d9:31:28:38:d2:0d:e6:b0:cb:fa:
                    fb:3a:c7:39:05:5d:aa:8e:ba:e5:79:20:3a:e2:27:
                    ba:41:75:da:e6:f0:c0:4a:f5:f1:02:bf:bd:40:25:
                    7b:8a:e0:6a:27:f0:75:28:e1:39:02:c2:3f:cb:79:
                    47:22:a6:ac:14:4c:88:07:a3:54:78:b7:1d:1c:7f:
                    3c:cd:6f:cd:9b:78:16:1f:de:4c:00:99:1b:cf:5f:
                    60:17:3d:cf:ad:e7:cc:2e:05:ba:c5:8c:79:5e:c2:
                    fd:76:a1:2a:96:de:3e:30:5b:54:77:9f:a7:89:50:
                    c4:3b:6e:eb:72:86:c4:cd:0a:c1:43:d6:72:2f:1f:
                    53:b3:e3:87:23:fc:08:a8:a1:4f:55:78:2d:ce:54:
                    f4:ea:ac:b0:d4:8e:1f:e4:2b:ba:3e:99:a9:00:0d:
                    81:bb:1e:22:dc:e9:53:93:05:ee:c9:e0:50:d6:08:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:23:52:E6:E3:F7:AE:9C:43:D9:39:83:EB:43:1A:90:E1:AD:6E:A5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad86::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:0d:26:0e:60:31:f0:e8:37:66:88:42:c1:4e:2f:ad:8d:65:
         b6:80:46:e2:60:6c:66:9d:83:cc:a7:5e:c5:9d:2a:8f:0c:84:
         c4:a7:f7:c5:fe:0e:87:f9:7f:67:14:e5:92:74:88:07:19:37:
         fd:51:8f:e5:51:9b:56:aa:65:03:09:17:f7:d9:94:81:ce:33:
         a8:f4:94:2b:26:a7:7b:c8:a9:ce:74:05:62:a1:6d:fc:1c:dc:
         70:11:41:62:eb:33:e5:98:1d:2f:e5:aa:7b:ff:63:8f:73:54:
         ac:b4:43:d8:1b:7c:a5:9e:09:59:65:c3:95:39:60:84:d6:8e:
         4d:8e:ec:ee:9c:bf:97:83:c5:99:7a:5c:8d:d9:4d:bb:7a:34:
         24:29:bd:05:02:63:24:29:d6:24:7c:e0:d7:74:8f:e2:a1:c8:
         aa:a5:c3:d1:fe:67:51:03:8a:89:ea:a3:9a:25:1b:7c:29:4c:
         85:97:7d:62:21:2d:82:b3:03:fc:72:e7:a2:ff:43:79:65:af:
         32:90:91:ad:17:20:58:0f:11:4b:25:12:e8:7e:a9:31:bb:18:
         1b:f1:67:01:de:58:e5:75:2d:c8:d5:71:42:6f:20:ed:aa:f4:
         bf:82:50:d4:e1:2c:66:60:54:df:d4:72:d7:20:ec:a8:91:fa:
         c5:b3:dd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----