Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146167.roa
File:                     AS146167.roa (raw, json)
Hash identifier:          X8s6AoUbiDaDmDtM7PFPtXrC8Hh5her1YBhx1PS9X3M=
Subject key identifier:   B8:17:18:6A:49:32:1F:2C:97:46:9E:C1:56:4C:99:94:F8:8B:0B:DD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3A528E4F033A4F7CEA0BBD513D3D47582CCBEE54
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146167.roa
Signing time:             Tue 26 May 2026 03:16:35 +0000
ROA not before:           Tue 26 May 2026 03:11:35 +0000
ROA not after:            Tue 25 May 2027 03:16:35 +0000
asID:                     146167
IP address blocks:        240a:adbd::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:52:8e:4f:03:3a:4f:7c:ea:0b:bd:51:3d:3d:47:58:2c:cb:ee:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:35 2026 GMT
            Not After : May 25 03:16:35 2027 GMT
        Subject: CN=B817186A49321F2C97469EC1564C9994F88B0BDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:34:bb:ff:22:a9:a6:bf:db:a1:e8:f3:a1:f2:
                    d8:fd:1f:9e:e1:65:5a:80:a7:3c:9f:af:cb:c2:77:
                    6a:42:a5:bb:87:75:9f:2b:4c:a6:53:cc:8d:ab:d8:
                    3e:5a:74:32:f6:a9:cf:ff:ca:b3:ee:77:63:59:e6:
                    43:b6:42:17:21:3e:8f:b3:80:87:4c:56:2d:74:79:
                    da:d9:57:68:a0:e2:1c:29:2b:51:f1:f1:22:fd:48:
                    6b:5f:05:47:78:30:47:1a:24:d5:23:dd:72:6a:9f:
                    d6:45:6e:4a:db:de:7a:3a:51:d8:16:12:0b:31:93:
                    16:65:38:59:51:5e:0a:48:67:b5:47:7b:cf:a1:f0:
                    86:1d:34:08:f9:c2:24:80:ca:02:41:25:c8:3b:b9:
                    d0:c0:fb:8d:c5:54:7d:14:77:4b:4a:35:7f:92:0a:
                    b1:0a:79:e8:49:c9:6d:75:3e:b1:ca:e7:ad:42:81:
                    88:8b:6d:cb:ed:4c:37:14:99:e4:52:84:26:f2:27:
                    74:6c:4a:03:96:4e:45:e2:6d:7d:52:c1:c6:3c:84:
                    87:df:1f:05:04:b3:ab:10:3c:0c:ae:33:33:4d:98:
                    e9:9c:4a:9a:83:af:25:2a:75:4d:14:e5:a5:e1:27:
                    9c:5b:b0:fd:16:66:ab:64:0d:4a:a2:74:fd:d1:cf:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:17:18:6A:49:32:1F:2C:97:46:9E:C1:56:4C:99:94:F8:8B:0B:DD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146167.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adbd::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:48:da:df:77:e1:10:59:9a:c4:60:0a:ed:45:3b:5f:43:aa:
         03:e0:8c:62:77:b7:51:77:61:2d:43:0c:54:44:61:e2:c6:cb:
         af:59:b0:78:4e:64:96:e1:f3:39:84:f3:c6:a3:f8:2e:5c:85:
         1d:bf:e3:46:ae:e8:bf:d4:76:92:4d:69:6f:27:e4:cb:ee:43:
         b0:95:0f:9a:13:b5:16:d4:72:38:9d:04:96:07:d1:be:16:8c:
         c8:46:e2:36:cd:27:d8:c3:6c:d3:5c:73:d3:6d:af:5b:ec:84:
         d2:ec:0b:03:28:dc:df:5d:c0:f9:7a:6a:b1:d6:16:ac:7f:b4:
         24:24:db:14:14:cc:97:41:a0:26:e5:26:f7:68:cc:10:65:84:
         d3:90:fe:a9:83:a9:1c:12:a0:07:ab:50:45:b7:0f:66:22:e9:
         91:13:e7:40:9a:63:e9:eb:f4:79:52:23:12:94:30:e0:78:d6:
         cd:97:63:ab:ec:14:8a:da:ac:d1:46:72:23:84:b7:94:a7:30:
         f3:9d:6c:62:86:db:24:d6:91:ab:88:f9:71:dd:b0:63:26:44:
         c9:9c:68:fa:0d:c4:17:d5:b2:40:71:e0:90:de:d7:78:69:3f:
         64:f3:b3:7f:23:0c:01:c9:bf:bd:c2:b8:b7:16:a8:fd:59:e6:
         ec:4a:6e:bd
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOlKOTwM6T3zqC71RPT1HWCzL7lQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExMzVaFw0yNzA1MjUwMzE2MzVaMDMxMTAvBgNV
BAMTKEI4MTcxODZBNDkzMjFGMkM5NzQ2OUVDMTU2NEM5OTk0Rjg4QjBCREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwNLv/Iqmmv9uh6POh8tj9H57h
ZVqApzyfr8vCd2pCpbuHdZ8rTKZTzI2r2D5adDL2qc//yrPud2NZ5kO2QhchPo+z
gIdMVi10edrZV2ig4hwpK1Hx8SL9SGtfBUd4MEcaJNUj3XJqn9ZFbkrb3no6UdgW
EgsxkxZlOFlRXgpIZ7VHe8+h8IYdNAj5wiSAygJBJcg7udDA+43FVH0Ud0tKNX+S
CrEKeehJyW11PrHK561CgYiLbcvtTDcUmeRShCbyJ3RsSgOWTkXibX1SwcY8hIff
HwUEs6sQPAyuMzNNmOmcSpqDryUqdU0U5aXhJ5xbsP0WZqtkDUqidP3RzxrVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUuBcYakkyHyyXRp7BVkyZlPiLC90wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtvTANBgkqhkiG9w0BAQsFAAOCAQEAaUja
33fhEFmaxGAK7UU7X0OqA+CMYne3UXdhLUMMVERh4sbLr1mweE5kluHzOYTzxqP4
LlyFHb/jRq7ov9R2kk1pbyfky+5DsJUPmhO1FtRyOJ0ElgfRvhaMyEbiNs0n2MNs
01xz022vW+yE0uwLAyjc313A+XpqsdYWrH+0JCTbFBTMl0GgJuUm92jMEGWE05D+
qYOpHBKgB6tQRbcPZiLpkRPnQJpj6ev0eVIjEpQw4HjWzZdjq+wUitqs0UZyI4S3
lKcw851sYobbJNaRq4j5cd2wYyZEyZxo+g3EF9WyQHHgkN7XeGk/ZPOzfyMMAcm/
vcK4txao/Vnm7EpuvQ==
-----END CERTIFICATE-----