Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146198.roa
File:                     AS146198.roa (raw, json)
Hash identifier:          Cj84eLuT15ID7Qs3tmJNk/JJL//9dPSKtPSO/G98Xuo=
Subject key identifier:   12:8D:45:A3:48:00:1B:FF:0E:45:E0:74:B4:0D:A5:E7:58:56:05:92
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       43243CF16FBA581A4BAA445B72DE986E3621CF80
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146198.roa
Signing time:             Fri 22 May 2026 04:27:03 +0000
ROA not before:           Fri 22 May 2026 04:22:03 +0000
ROA not after:            Fri 21 May 2027 04:27:03 +0000
asID:                     146198
IP address blocks:        240a:addc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:24:3c:f1:6f:ba:58:1a:4b:aa:44:5b:72:de:98:6e:36:21:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:03 2026 GMT
            Not After : May 21 04:27:03 2027 GMT
        Subject: CN=128D45A348001BFF0E45E074B40DA5E758560592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2c:34:9b:6e:8c:fb:61:7e:ff:74:da:05:d6:
                    6d:69:ad:69:0c:55:87:a3:4d:c3:29:66:71:b8:62:
                    70:55:70:ae:23:4b:4c:8e:71:d0:12:37:8c:74:6a:
                    d7:97:28:a6:24:45:68:5c:3c:35:e2:03:6c:4f:55:
                    8f:19:ac:68:58:1c:2a:eb:77:27:89:bc:ba:d0:d0:
                    f0:bf:8a:26:b0:da:25:21:53:b3:69:26:a9:a2:b1:
                    56:88:25:00:d8:d9:97:ef:68:a3:d3:e1:ec:dd:66:
                    b3:53:0e:11:c8:52:bb:a9:51:31:68:11:2d:19:0e:
                    7c:f4:c4:f2:42:c1:fd:25:0d:79:62:b4:89:57:0a:
                    c7:9e:f4:43:0b:0c:de:7f:a7:70:c2:4e:b3:5d:1c:
                    f1:cb:90:a3:80:05:25:c7:22:f5:b2:25:67:55:1f:
                    6e:32:c1:5f:63:7a:72:63:b0:56:5a:c7:8a:2e:e3:
                    45:04:df:2a:8e:2f:58:17:81:41:e1:3e:fb:cd:a9:
                    38:13:4f:77:a8:66:06:ad:7d:d7:84:e5:e7:3c:6e:
                    e0:c4:d3:bd:44:fd:d3:ab:69:e8:d4:7e:7a:88:98:
                    ca:0a:01:5b:e2:4e:b9:e8:43:b1:e3:25:d4:ed:bd:
                    65:b8:f4:2d:cc:5e:43:fa:68:00:9e:2f:d9:07:ff:
                    2a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8D:45:A3:48:00:1B:FF:0E:45:E0:74:B4:0D:A5:E7:58:56:05:92
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146198.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:addc::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:35:ed:da:84:40:a4:64:05:f0:3e:13:b3:c2:99:14:d3:f3:
         80:29:a1:ee:57:40:3d:77:56:94:73:61:e3:8c:5e:99:a7:03:
         cb:5d:8b:1b:8d:88:c2:bc:12:79:92:4d:15:3c:9b:ff:86:3f:
         23:56:56:e8:a0:6e:a1:a8:00:27:b9:61:99:2a:1a:ac:39:d8:
         72:a4:7c:0f:0f:8c:15:fe:b1:77:21:b3:99:77:78:a9:44:35:
         bd:0d:46:33:2f:69:1e:e6:b8:8e:50:d5:e5:73:06:c9:11:60:
         cd:aa:c5:9c:aa:73:92:0d:6d:42:fd:eb:78:22:f4:4c:e3:bf:
         09:2c:cf:b2:0a:53:6d:e2:2c:3f:f1:da:6c:d4:21:d3:46:ee:
         dc:ba:0b:51:4d:1e:70:1e:13:19:55:d1:06:5b:52:ec:bd:ec:
         e4:99:ad:79:e2:fd:5b:b3:bf:ca:20:53:89:09:19:54:44:7c:
         69:44:b9:1b:05:5b:c2:a8:65:72:dd:83:35:04:56:97:2f:f8:
         57:9a:10:8e:67:ac:07:46:b4:ff:02:0a:a2:1a:17:f8:15:f2:
         da:bf:49:60:ba:d2:e9:f8:2d:ed:28:39:9e:46:3e:84:ca:53:
         fc:e6:9b:2e:a2:fa:6d:99:93:7b:76:d8:fc:b5:a7:6c:e3:56:
         cf:0c:48:a0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQyQ88W+6WBpLqkRbct6YbjYhz4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMDNaFw0yNzA1MjEwNDI3MDNaMDMxMTAvBgNV
BAMTKDEyOEQ0NUEzNDgwMDFCRkYwRTQ1RTA3NEI0MERBNUU3NTg1NjA1OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhLDSbboz7YX7/dNoF1m1prWkM
VYejTcMpZnG4YnBVcK4jS0yOcdASN4x0ateXKKYkRWhcPDXiA2xPVY8ZrGhYHCrr
dyeJvLrQ0PC/iiaw2iUhU7NpJqmisVaIJQDY2ZfvaKPT4ezdZrNTDhHIUrupUTFo
ES0ZDnz0xPJCwf0lDXlitIlXCsee9EMLDN5/p3DCTrNdHPHLkKOABSXHIvWyJWdV
H24ywV9jenJjsFZax4ou40UE3yqOL1gXgUHhPvvNqTgTT3eoZgatfdeE5ec8buDE
071E/dOraejUfnqImMoKAVviTrnoQ7HjJdTtvWW49C3MXkP6aACeL9kH/ypRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUEo1Fo0gAG/8OReB0tA2l51hWBZIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt3DANBgkqhkiG9w0BAQsFAAOCAQEAMjXt
2oRApGQF8D4Ts8KZFNPzgCmh7ldAPXdWlHNh44xemacDy12LG42IwrwSeZJNFTyb
/4Y/I1ZW6KBuoagAJ7lhmSoarDnYcqR8Dw+MFf6xdyGzmXd4qUQ1vQ1GMy9pHua4
jlDV5XMGyRFgzarFnKpzkg1tQv3reCL0TOO/CSzPsgpTbeIsP/HabNQh00bu3LoL
UU0ecB4TGVXRBltS7L3s5JmteeL9W7O/yiBTiQkZVER8aUS5GwVbwqhlct2DNQRW
ly/4V5oQjmesB0a0/wIKohoX+BXy2r9JYLrS6fgt7Sg5nkY+hMpT/OabLqL6bZmT
e3bY/LWnbONWzwxIoA==
-----END CERTIFICATE-----