Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146123.roa
File:                     AS146123.roa (raw, json)
Hash identifier:          HTSjfL58z47aqM5m9iPuViy6EogQqQd4HBiefbhIq3s=
Subject key identifier:   D4:F0:02:74:07:A7:D4:83:11:0B:F7:24:E7:6D:35:C6:26:8C:81:4B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       601663481E0A0CD3D967CCEBEDF4600212BE7000
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146123.roa
Signing time:             Fri 22 May 2026 06:46:32 +0000
ROA not before:           Fri 22 May 2026 06:41:32 +0000
ROA not after:            Fri 21 May 2027 06:46:32 +0000
asID:                     146123
IP address blocks:        240a:ad91::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:16:63:48:1e:0a:0c:d3:d9:67:cc:eb:ed:f4:60:02:12:be:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:32 2026 GMT
            Not After : May 21 06:46:32 2027 GMT
        Subject: CN=D4F0027407A7D483110BF724E76D35C6268C814B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:15:05:94:c2:c5:76:9c:b4:65:9b:eb:c1:
                    05:50:15:4e:44:b2:2c:db:3e:ef:62:fe:3c:8f:97:
                    23:7c:13:0d:00:56:61:e3:a1:30:3b:7a:56:e4:a4:
                    20:74:f4:47:05:7a:16:a8:e9:96:6a:ff:e3:d8:f1:
                    9f:4f:04:42:6d:6a:c6:bd:67:11:45:3c:e4:5c:90:
                    4a:77:0b:f3:e5:00:d0:95:93:f6:4b:5d:40:19:c4:
                    df:f2:13:48:10:c2:8e:54:2a:6d:ce:a7:ef:49:d4:
                    f0:93:f8:91:1f:f9:77:54:82:06:b1:cb:a0:26:b2:
                    ec:3a:94:98:c7:f7:b2:ba:68:23:a6:a1:cf:75:08:
                    d0:05:92:ed:7e:25:00:0e:d7:77:d8:ec:90:37:84:
                    fd:a9:95:3b:0f:7b:f1:ae:9f:fe:fc:2a:3e:a9:eb:
                    b6:e7:82:3b:4c:75:7f:93:3e:a9:91:a5:34:be:62:
                    d3:1c:89:60:c2:1a:f3:4d:62:9c:ba:75:ef:c4:7d:
                    ef:24:e3:7d:82:63:26:a8:e7:34:16:51:ab:b5:09:
                    03:7a:ad:ad:04:eb:f3:02:0b:21:5b:8f:d2:3a:41:
                    0a:3b:d1:0a:ef:97:cb:1c:ae:c0:99:ce:3c:74:d3:
                    02:1d:60:03:d4:14:82:c7:b7:5c:db:08:20:dd:44:
                    f5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F0:02:74:07:A7:D4:83:11:0B:F7:24:E7:6D:35:C6:26:8C:81:4B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146123.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad91::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:ad:dc:52:ba:14:c7:53:07:dd:0a:3e:ec:bc:6d:e1:a6:fd:
         f7:03:7b:ef:43:6b:c4:c3:cd:70:da:6a:cd:dc:ea:37:52:ef:
         c5:b9:c3:4c:4c:e6:ef:78:87:3d:01:76:a0:da:48:7c:25:a9:
         18:8d:1c:81:fc:d4:dc:ae:47:91:44:ae:e5:3f:e0:24:c8:b5:
         b7:14:ed:4f:a4:f2:7b:a3:8d:83:5c:66:3b:88:5b:77:ce:e5:
         7d:28:49:1b:52:40:61:85:6d:a6:41:2b:0a:3f:f4:a3:c4:54:
         c0:cb:d8:29:bd:8c:a5:cc:2b:4b:ca:bf:13:b2:2f:2c:82:7c:
         03:0f:c1:c9:98:b7:36:c5:08:68:0e:6d:6e:c3:0c:5c:46:56:
         49:a3:39:76:f3:90:03:ec:5a:55:e9:08:79:dc:ae:8a:8c:71:
         5e:e5:5b:65:dc:76:85:74:71:d9:8f:7b:7d:7a:30:e3:3f:98:
         f2:b3:88:99:9b:b3:58:79:83:76:27:97:6f:e5:d1:7c:6f:47:
         2c:49:89:51:92:50:74:80:a7:ad:a9:6f:44:d7:62:c0:a6:31:
         03:5d:39:94:d1:05:df:d6:87:72:d4:80:ba:b5:89:b6:42:a7:
         3b:88:b4:11:35:1d:32:09:15:f7:96:f2:f1:f2:60:24:e9:2b:
         7a:cf:22:3d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYBZjSB4KDNPZZ8zr7fRgAhK+cAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMzJaFw0yNzA1MjEwNjQ2MzJaMDMxMTAvBgNV
BAMTKEQ0RjAwMjc0MDdBN0Q0ODMxMTBCRjcyNEU3NkQzNUM2MjY4QzgxNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhxUFlMLFdpy0ZZvrwQVQFU5E
sizbPu9i/jyPlyN8Ew0AVmHjoTA7elbkpCB09EcFehao6ZZq/+PY8Z9PBEJtasa9
ZxFFPORckEp3C/PlANCVk/ZLXUAZxN/yE0gQwo5UKm3Op+9J1PCT+JEf+XdUggax
y6Amsuw6lJjH97K6aCOmoc91CNAFku1+JQAO13fY7JA3hP2plTsPe/Gun/78Kj6p
67bngjtMdX+TPqmRpTS+YtMciWDCGvNNYpy6de/Efe8k432CYyao5zQWUau1CQN6
ra0E6/MCCyFbj9I6QQo70Qrvl8scrsCZzjx00wIdYAPUFILHt1zbCCDdRPVTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU1PACdAen1IMRC/ck5201xiaMgUswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtkTANBgkqhkiG9w0BAQsFAAOCAQEAcK3c
UroUx1MH3Qo+7Lxt4ab99wN770NrxMPNcNpqzdzqN1LvxbnDTEzm73iHPQF2oNpI
fCWpGI0cgfzU3K5HkUSu5T/gJMi1txTtT6Tye6ONg1xmO4hbd87lfShJG1JAYYVt
pkErCj/0o8RUwMvYKb2MpcwrS8q/E7IvLIJ8Aw/ByZi3NsUIaA5tbsMMXEZWSaM5
dvOQA+xaVekIedyuioxxXuVbZdx2hXRx2Y97fXow4z+Y8rOImZuzWHmDdieXb+XR
fG9HLEmJUZJQdICnralvRNdiwKYxA105lNEF39aHctSAurWJtkKnO4i0ETUdMgkV
95by8fJgJOkres8iPQ==
-----END CERTIFICATE-----