Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146193.roa
File:                     AS146193.roa (raw, json)
Hash identifier:          zEeM4T6MJz9TET+DjWnDV1rdAdPyxeIA25QmlvOxVDY=
Subject key identifier:   02:C4:59:14:E4:19:DE:0F:15:F6:CD:EA:4C:CD:C4:64:8B:F3:52:D1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7D0A63406B1CFA629856495FFDC15A33A59FDCF3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146193.roa
Signing time:             Tue 26 May 2026 01:13:26 +0000
ROA not before:           Tue 26 May 2026 01:08:26 +0000
ROA not after:            Tue 25 May 2027 01:13:26 +0000
asID:                     146193
IP address blocks:        240a:add7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0a:63:40:6b:1c:fa:62:98:56:49:5f:fd:c1:5a:33:a5:9f:dc:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:26 2026 GMT
            Not After : May 25 01:13:26 2027 GMT
        Subject: CN=02C45914E419DE0F15F6CDEA4CCDC4648BF352D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:5f:cc:59:f5:89:fe:7b:db:80:22:3e:c4:
                    ae:b0:c7:70:d0:95:b9:e7:84:17:0b:75:17:e6:ff:
                    b1:ba:34:cd:78:b0:e3:59:80:f7:c5:47:96:b9:d3:
                    b2:85:df:7b:82:ff:67:93:dd:e8:81:c3:87:81:4b:
                    f8:96:93:29:fa:4f:68:78:3d:80:9f:8a:05:55:8c:
                    9c:07:3a:2e:8b:1d:29:68:4b:78:94:77:fe:06:6d:
                    6f:55:50:21:f9:27:37:47:c7:22:7f:a4:9a:b5:38:
                    8d:4d:c4:54:86:99:36:ff:80:0a:c3:a9:17:0e:25:
                    7a:4e:4a:86:95:9b:4e:de:94:85:38:cb:67:94:12:
                    56:f8:0e:65:13:d4:b6:2a:93:a1:36:ae:d2:8d:48:
                    08:c1:cc:45:ae:cf:fa:75:41:e2:71:39:4b:3e:bc:
                    3a:a1:7a:e8:a9:76:56:4d:4a:5f:d1:be:2c:e8:cb:
                    14:8d:a1:b9:bf:6d:a9:c8:41:77:92:f8:19:65:7e:
                    c4:57:80:c3:32:03:30:9a:74:ca:c5:a5:c9:41:61:
                    9f:63:d2:74:d0:a6:11:61:a6:29:d8:b1:8c:17:55:
                    fe:f0:4b:58:23:e7:90:3b:c6:45:8a:49:40:c6:92:
                    54:5c:cf:d3:f4:26:4d:e8:ad:a0:65:8a:7f:f3:d9:
                    31:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C4:59:14:E4:19:DE:0F:15:F6:CD:EA:4C:CD:C4:64:8B:F3:52:D1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146193.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:add7::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:f3:67:a2:17:86:22:4f:16:3c:cf:d8:2f:bf:96:d4:cf:8c:
         12:35:8f:df:e0:56:9c:ef:8f:93:af:58:97:27:d9:78:0e:c3:
         33:6e:e9:28:d3:9d:55:15:3c:80:cc:1d:0c:04:11:09:5d:bc:
         0a:b2:49:bd:ef:3c:f1:52:86:74:38:1b:91:4d:5a:2a:d6:47:
         63:63:c0:dc:1f:73:56:82:b5:a0:64:b5:af:ab:c9:5b:f3:35:
         27:9d:6f:2c:31:02:4b:33:0d:6a:29:11:23:2a:33:03:8a:e2:
         66:7e:d4:0d:9f:8f:97:05:d5:d9:ab:47:a3:f9:6f:36:0f:25:
         4b:be:19:db:ef:94:fd:0b:ad:b2:25:8e:f4:c6:d2:4e:95:8f:
         6f:e3:2b:9b:41:8f:b6:85:72:8f:12:b8:35:3a:60:a0:de:34:
         2d:71:92:68:84:15:50:da:fb:da:94:82:78:98:df:10:35:79:
         e9:ea:21:d9:55:e4:b9:17:88:a3:d7:6c:ef:55:28:7f:58:b7:
         da:1e:f2:a3:25:cc:75:67:3e:de:6f:57:be:36:c5:e5:b4:3a:
         6e:f7:f3:5b:0a:cb:ea:4b:b1:35:8a:ad:80:0f:6e:e3:36:55:
         62:98:f5:81:e1:d4:40:c5:b1:4a:a8:37:98:72:a7:90:ca:57:
         ab:92:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----