Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146184.roa
File:                     AS146184.roa (raw, json)
Hash identifier:          tlgcfsGMpWfs045oJQLdKAKuLg6J8w70qOlZZDrHvow=
Subject key identifier:   EF:87:DC:A5:25:39:2D:73:2F:AC:29:D0:A1:4F:04:99:B0:50:D9:5D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3943F7151464799B6756AFBC024F2E62811D656B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146184.roa
Signing time:             Fri 22 May 2026 06:58:27 +0000
ROA not before:           Fri 22 May 2026 06:53:27 +0000
ROA not after:            Fri 21 May 2027 06:58:27 +0000
asID:                     146184
IP address blocks:        240a:adce::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:43:f7:15:14:64:79:9b:67:56:af:bc:02:4f:2e:62:81:1d:65:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:27 2026 GMT
            Not After : May 21 06:58:27 2027 GMT
        Subject: CN=EF87DCA525392D732FAC29D0A14F0499B050D95D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f0:83:2d:f9:f6:a1:80:89:b8:7a:83:00:11:
                    b7:e8:3b:12:e8:8f:66:e8:9c:5a:89:cd:55:fc:10:
                    84:be:0a:2a:6b:de:3e:b2:de:e2:b4:38:76:a1:ec:
                    a5:73:01:7d:aa:ba:ac:05:60:01:79:85:72:59:c4:
                    e9:ee:ec:9b:d7:b4:eb:4d:43:01:18:53:62:49:98:
                    57:3d:96:ab:09:8f:82:a2:9e:11:c0:60:33:b4:9a:
                    41:40:41:90:ef:02:34:72:94:c4:a0:5f:8e:bf:11:
                    0f:55:15:6d:4b:72:58:79:4a:60:7b:d3:21:c3:12:
                    10:78:bc:bc:71:ed:b5:a7:dc:d3:79:b2:98:c9:ab:
                    7e:45:3b:7a:85:df:aa:48:a6:77:bc:d4:7e:33:42:
                    ca:7a:c9:c4:1f:53:75:db:ba:58:75:7e:e2:6f:ed:
                    13:36:7f:f8:02:65:98:88:a7:a6:88:45:0d:0e:0c:
                    15:a8:10:74:c3:28:d0:1d:31:50:be:de:4f:e2:cf:
                    b3:29:eb:c5:2d:16:c1:76:26:1a:73:30:81:7c:8e:
                    ca:a2:15:e9:68:e8:e5:14:51:6b:ae:bd:2e:26:92:
                    bd:9e:36:f3:e2:6c:a8:12:4d:f3:cb:55:dc:07:ce:
                    f5:7a:11:95:16:90:22:00:af:bc:ea:9d:02:45:3b:
                    38:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:87:DC:A5:25:39:2D:73:2F:AC:29:D0:A1:4F:04:99:B0:50:D9:5D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146184.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adce::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:a5:e4:d9:86:a0:a0:cd:00:28:a9:2f:87:ed:71:d6:3f:d8:
         d0:32:d4:16:2e:68:f3:38:8b:43:4a:15:7f:8a:78:03:0a:57:
         45:fd:0c:09:35:b2:3d:ea:fe:2d:6c:83:70:eb:08:3d:18:98:
         fd:ee:c9:1c:a8:59:e0:79:bc:40:f8:83:95:cd:0c:c0:6e:ff:
         1b:7a:c7:dd:23:a8:12:eb:4e:42:d2:ee:3b:15:a3:a7:e2:33:
         67:8e:75:ef:17:91:96:2f:87:ed:b3:f1:a8:63:33:fe:66:11:
         33:7e:3a:1c:8c:6b:50:7b:cd:54:b4:9c:ad:57:59:1d:e0:1e:
         a8:5d:dd:ab:74:2f:ca:3e:50:a6:b4:a9:10:ad:9a:34:25:97:
         ac:4b:a6:9c:05:ca:47:7a:93:e9:e8:09:c2:1e:cc:b7:be:c0:
         2a:1f:55:1a:d7:40:d7:44:2d:01:52:33:66:57:85:56:e3:e4:
         cd:15:e1:a3:8a:60:44:23:4b:1e:22:da:52:da:f3:ef:85:f8:
         3a:cc:ac:9d:43:0b:de:21:ff:96:2c:8e:52:20:b7:53:61:84:
         32:16:e4:d8:f6:14:77:6f:69:dd:52:36:32:9d:df:6b:92:a5:
         ba:e1:b6:dc:0f:78:33:a9:9d:ae:cc:4a:fe:1f:27:d8:9c:04:
         a6:28:8b:24
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOUP3FRRkeZtnVq+8Ak8uYoEdZWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMjdaFw0yNzA1MjEwNjU4MjdaMDMxMTAvBgNV
BAMTKEVGODdEQ0E1MjUzOTJENzMyRkFDMjlEMEExNEYwNDk5QjA1MEQ5NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn8IMt+fahgIm4eoMAEbfoOxLo
j2bonFqJzVX8EIS+Cipr3j6y3uK0OHah7KVzAX2quqwFYAF5hXJZxOnu7JvXtOtN
QwEYU2JJmFc9lqsJj4KinhHAYDO0mkFAQZDvAjRylMSgX46/EQ9VFW1Lclh5SmB7
0yHDEhB4vLxx7bWn3NN5spjJq35FO3qF36pIpne81H4zQsp6ycQfU3Xbulh1fuJv
7RM2f/gCZZiIp6aIRQ0ODBWoEHTDKNAdMVC+3k/iz7Mp68UtFsF2JhpzMIF8jsqi
Felo6OUUUWuuvS4mkr2eNvPibKgSTfPLVdwHzvV6EZUWkCIAr7zqnQJFOziFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU74fcpSU5LXMvrCnQoU8EmbBQ2V0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtzjANBgkqhkiG9w0BAQsFAAOCAQEAUaXk
2YagoM0AKKkvh+1x1j/Y0DLUFi5o8ziLQ0oVf4p4AwpXRf0MCTWyPer+LWyDcOsI
PRiY/e7JHKhZ4Hm8QPiDlc0MwG7/G3rH3SOoEutOQtLuOxWjp+IzZ4517xeRli+H
7bPxqGMz/mYRM346HIxrUHvNVLScrVdZHeAeqF3dq3Qvyj5QprSpEK2aNCWXrEum
nAXKR3qT6egJwh7Mt77AKh9VGtdA10QtAVIzZleFVuPkzRXho4pgRCNLHiLaUtrz
74X4OsysnUML3iH/liyOUiC3U2GEMhbk2PYUd29p3VI2Mp3fa5KluuG23A94M6md
rsxK/h8n2JwEpiiLJA==
-----END CERTIFICATE-----