Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146212.roa
File:                     AS146212.roa (raw, json)
Hash identifier:          RY6pPZPLwBS9PWoNAtX0a5JMHcxsuV/e9HbLczjaMLU=
Subject key identifier:   01:02:94:3F:49:7B:6C:DA:88:17:01:76:B6:F0:61:DC:6F:27:D5:FE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       F942927F2C144D09B5DFE52F5207D25A940695
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146212.roa
Signing time:             Fri 22 May 2026 01:50:10 +0000
ROA not before:           Fri 22 May 2026 01:45:10 +0000
ROA not after:            Fri 21 May 2027 01:50:10 +0000
asID:                     146212
IP address blocks:        240a:adea::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f9:42:92:7f:2c:14:4d:09:b5:df:e5:2f:52:07:d2:5a:94:06:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:10 2026 GMT
            Not After : May 21 01:50:10 2027 GMT
        Subject: CN=0102943F497B6CDA88170176B6F061DC6F27D5FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:6a:59:02:fd:19:b4:e6:d5:f7:bf:a0:4d:
                    f0:4d:75:bc:a5:fc:0c:9a:d1:96:b4:ce:d1:ed:ac:
                    60:4d:f8:33:ac:93:eb:4d:b7:63:cc:5d:38:36:ae:
                    79:0b:87:29:39:fa:c1:54:d6:64:88:55:fc:d6:e9:
                    13:bd:9a:9e:ab:26:f9:2e:6a:8e:05:b4:50:57:00:
                    29:9f:4b:4d:36:d1:1b:cc:12:30:89:57:ae:77:1d:
                    70:49:3b:53:ff:8c:e9:9a:da:7a:24:88:06:35:60:
                    3b:b4:53:f5:a8:e2:18:3c:ed:f2:0b:fd:90:f8:7e:
                    c9:55:4f:8d:71:91:15:c2:68:58:c4:64:fb:eb:90:
                    22:03:ed:2b:3e:5f:f9:f1:93:c0:b9:a4:15:73:2d:
                    2d:2c:c5:59:51:fc:70:3f:66:77:e5:e6:81:38:e7:
                    83:ef:c0:5e:70:6c:8f:7e:d7:a1:53:12:b7:8f:dc:
                    e1:e5:8a:27:87:9b:7c:9b:a4:1a:81:19:1b:58:0b:
                    01:92:5c:3d:ce:d5:9d:7d:84:f3:3a:f9:3c:8f:d5:
                    d1:d3:e7:99:bb:84:dc:de:28:1c:36:eb:54:f6:b0:
                    89:2c:18:7a:66:67:cf:99:b3:ae:7e:0f:5a:05:bc:
                    83:9a:ba:ca:ac:24:e2:e6:d0:ba:15:9c:16:b1:14:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:02:94:3F:49:7B:6C:DA:88:17:01:76:B6:F0:61:DC:6F:27:D5:FE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146212.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adea::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:a0:52:21:af:bc:13:bd:5d:a6:ae:98:60:f9:97:62:f4:b9:
         33:ef:f5:25:b9:57:4d:1b:74:51:91:84:3b:47:89:1d:d8:6a:
         58:f6:d5:03:f3:47:5c:97:20:49:13:76:9d:f5:d7:6b:5e:1c:
         00:bb:33:f6:8f:e8:5c:dd:3e:2f:41:7d:57:4f:b7:84:8e:8f:
         42:51:09:93:b5:10:ea:ae:c5:e2:ee:6e:17:fd:70:a9:b2:fe:
         bc:48:c0:28:3f:aa:e7:92:00:0f:e2:09:75:6b:47:b6:f3:33:
         85:08:c9:f5:88:80:12:1f:34:91:4c:87:db:ba:69:8c:fc:f4:
         dc:8d:6b:bd:18:98:5d:89:93:8f:e2:cc:83:9d:c5:e1:3b:e8:
         20:a0:c7:83:f6:43:ce:32:78:36:b3:f2:2d:bc:82:f8:69:d7:
         87:f3:8a:f2:92:96:63:49:34:5e:92:b1:b9:01:01:3b:ab:6a:
         a7:c4:8b:38:ea:26:f7:38:0d:da:1b:25:84:9c:20:14:a6:b7:
         d9:91:92:58:b6:59:a0:6b:52:27:cc:17:7e:c5:5b:34:6b:d4:
         7a:98:d0:79:41:d8:a3:32:b3:96:b1:34:e3:66:1d:ee:4b:cb:
         ef:ae:80:d5:52:b6:ea:95:f1:98:65:e9:46:bd:09:64:f7:5c:
         86:88:d0:eb
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAPlCkn8sFE0Jtd/lL1IH0lqUBpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MTBaFw0yNzA1MjEwMTUwMTBaMDMxMTAvBgNV
BAMTKDAxMDI5NDNGNDk3QjZDREE4ODE3MDE3NkI2RjA2MURDNkYyN0Q1RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ52pZAv0ZtObV97+gTfBNdbyl
/Aya0Za0ztHtrGBN+DOsk+tNt2PMXTg2rnkLhyk5+sFU1mSIVfzW6RO9mp6rJvku
ao4FtFBXACmfS0020RvMEjCJV653HXBJO1P/jOma2nokiAY1YDu0U/Wo4hg87fIL
/ZD4fslVT41xkRXCaFjEZPvrkCID7Ss+X/nxk8C5pBVzLS0sxVlR/HA/Znfl5oE4
54PvwF5wbI9+16FTEreP3OHliieHm3ybpBqBGRtYCwGSXD3O1Z19hPM6+TyP1dHT
55m7hNzeKBw261T2sIksGHpmZ8+Zs65+D1oFvIOausqsJOLm0LoVnBaxFOs7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUAQKUP0l7bNqIFwF2tvBh3G8n1f4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt6jANBgkqhkiG9w0BAQsFAAOCAQEAk6BS
Ia+8E71dpq6YYPmXYvS5M+/1JblXTRt0UZGEO0eJHdhqWPbVA/NHXJcgSRN2nfXX
a14cALsz9o/oXN0+L0F9V0+3hI6PQlEJk7UQ6q7F4u5uF/1wqbL+vEjAKD+q55IA
D+IJdWtHtvMzhQjJ9YiAEh80kUyH27ppjPz03I1rvRiYXYmTj+LMg53F4TvoIKDH
g/ZDzjJ4NrPyLbyC+GnXh/OK8pKWY0k0XpKxuQEBO6tqp8SLOOom9zgN2hslhJwg
FKa32ZGSWLZZoGtSJ8wXfsVbNGvUepjQeUHYozKzlrE042Yd7kvL766A1VK26pXx
mGXpRr0JZPdchojQ6w==
-----END CERTIFICATE-----