Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146127.roa
File:                     AS146127.roa (raw, json)
Hash identifier:          CuojHAnAeU+n2BliljjBLl5TuA7eszg1SXXyoXhGYDU=
Subject key identifier:   90:8B:BD:33:10:2F:77:87:DA:2D:8C:4D:92:B8:AC:A8:1E:6E:C2:EB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1DB78948ADDC2E2A9E8353934A5BC0E5024E27D2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146127.roa
Signing time:             Fri 22 May 2026 02:47:40 +0000
ROA not before:           Fri 22 May 2026 02:42:40 +0000
ROA not after:            Fri 21 May 2027 02:47:40 +0000
asID:                     146127
IP address blocks:        240a:ad95::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b7:89:48:ad:dc:2e:2a:9e:83:53:93:4a:5b:c0:e5:02:4e:27:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:40 2026 GMT
            Not After : May 21 02:47:40 2027 GMT
        Subject: CN=908BBD33102F7787DA2D8C4D92B8ACA81E6EC2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:cf:9f:73:d1:61:c1:07:aa:54:fa:55:42:
                    f3:58:79:13:94:33:b6:6d:78:f7:0e:68:e4:4b:b0:
                    87:39:40:c6:ee:96:8e:d5:db:ca:8b:6f:7c:f6:c6:
                    02:15:81:02:af:ed:d5:e4:de:f9:08:63:a0:47:94:
                    44:28:a7:c9:dd:b1:93:14:9d:ca:9c:5b:fd:bc:df:
                    d6:14:b9:10:66:b2:ac:dc:f0:66:db:ea:27:66:4a:
                    18:ed:4f:d4:c5:82:d8:28:e6:9d:7b:50:81:7a:7e:
                    b8:86:64:4c:65:dd:8e:8e:95:c3:45:f4:e9:29:8d:
                    35:82:67:4b:81:03:4b:18:f7:66:23:fa:69:60:cb:
                    97:2b:e9:31:3d:5b:0d:dd:b4:cf:02:f9:39:0b:b6:
                    57:5d:ce:7e:a5:81:6d:a6:fd:bf:06:fd:b5:6c:5d:
                    31:c5:66:db:0e:4d:11:99:a1:c5:d4:ad:bc:21:18:
                    80:f5:89:0a:2a:80:9b:83:20:bd:80:0a:e9:7c:f9:
                    72:32:86:2b:26:37:91:cb:9f:52:c4:7e:cc:61:87:
                    25:3f:38:5d:38:63:50:87:24:e4:a3:45:39:a4:e5:
                    25:12:73:13:02:be:ab:22:ba:0e:a6:f8:86:02:cc:
                    94:21:fa:b6:4b:19:04:64:3b:24:3e:bb:9a:37:7a:
                    74:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8B:BD:33:10:2F:77:87:DA:2D:8C:4D:92:B8:AC:A8:1E:6E:C2:EB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146127.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad95::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:e2:1e:b7:48:89:74:7d:4e:de:80:af:03:73:45:98:8b:13:
         41:6b:62:38:3c:95:44:c1:0d:e8:7c:fb:20:e6:28:61:d6:31:
         e6:1a:11:a7:7e:c2:6b:2f:46:59:c7:81:d5:21:95:f5:9b:44:
         4b:69:8a:db:07:7b:b4:50:e9:5f:d2:ba:b9:69:26:21:48:1c:
         ca:a2:ac:89:27:1a:dd:00:fd:d2:5d:80:bf:4d:a7:81:c3:ab:
         e0:a3:c8:a6:aa:45:48:e3:8d:f9:b5:da:93:a0:a6:56:3f:88:
         b3:cf:88:5c:33:f0:e8:c2:dc:7a:92:af:d8:df:cd:61:3b:a4:
         c2:12:9f:ab:26:04:85:01:d2:88:39:95:5a:4d:03:a9:d1:59:
         27:bf:a3:93:80:7b:ee:a7:38:19:62:26:f0:47:85:5a:d1:59:
         a6:45:0e:fc:c0:cd:47:a6:7c:39:d7:6f:c8:e2:87:28:84:fc:
         bc:37:48:44:92:57:ad:73:4f:6b:e6:5c:ef:e3:8d:f6:12:bd:
         7b:e3:fd:fd:61:5e:cb:25:ac:d2:ef:14:65:5b:a1:4b:63:00:
         b6:2a:cb:2f:ae:77:fe:98:e4:ad:ad:e7:d3:d2:96:61:76:07:
         26:ae:d7:dc:88:79:98:52:15:17:2c:a6:2f:1a:c0:40:92:cf:
         e8:11:f0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----