Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146222.roa
File:                     AS146222.roa (raw, json)
Hash identifier:          wWc05UOPxCvCBFWh2/altZJNDHTbZyUVK8FsCJ1tZl4=
Subject key identifier:   F1:E8:77:2A:4B:79:5C:BE:D6:BD:F3:71:8F:9C:66:B5:B3:05:DD:B8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0F197021A14511DE3EB179D97D63E70BC479AE0D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146222.roa
Signing time:             Fri 22 May 2026 07:08:49 +0000
ROA not before:           Fri 22 May 2026 07:03:49 +0000
ROA not after:            Fri 21 May 2027 07:08:49 +0000
asID:                     146222
IP address blocks:        240a:adf4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:19:70:21:a1:45:11:de:3e:b1:79:d9:7d:63:e7:0b:c4:79:ae:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:49 2026 GMT
            Not After : May 21 07:08:49 2027 GMT
        Subject: CN=F1E8772A4B795CBED6BDF3718F9C66B5B305DDB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:55:d7:be:2e:ec:5d:07:ab:e9:5e:53:61:
                    ec:79:fe:8d:e5:76:80:9a:8f:7d:32:e7:49:8f:94:
                    e4:d6:c1:58:1a:63:e4:58:b4:da:1d:3c:45:fb:51:
                    68:38:50:00:06:2c:ad:12:e2:cf:18:84:a0:5f:00:
                    d9:05:5f:7c:22:bc:0f:18:b7:36:72:4d:e1:f2:7c:
                    a0:67:83:da:42:b1:c8:b8:bc:a7:0d:f3:77:84:03:
                    55:fe:20:fb:66:de:91:a6:9c:0c:85:36:02:5d:c9:
                    9e:78:9e:ab:96:6c:eb:29:73:3b:ce:2f:40:7e:9f:
                    7a:e2:fc:9e:be:05:47:dc:43:2c:73:45:81:23:62:
                    d6:6c:56:9f:32:dd:32:f9:28:b1:62:7c:c8:5e:04:
                    9d:03:e1:79:dc:8e:39:52:b8:ed:c6:25:66:84:6f:
                    41:eb:d9:1c:cf:46:0d:e5:95:59:0d:b0:16:a8:42:
                    40:20:3b:41:76:f3:67:91:95:62:8c:21:39:8c:77:
                    a4:44:80:4c:f7:05:60:73:02:48:c2:0d:aa:29:4f:
                    28:be:bb:56:cd:79:e0:d7:fa:8f:07:00:0c:1d:48:
                    ea:b1:18:82:bc:79:8d:d9:a5:1c:ce:f2:1a:fb:fb:
                    9e:51:15:f2:7e:85:b1:67:18:5e:59:92:2f:c4:9f:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E8:77:2A:4B:79:5C:BE:D6:BD:F3:71:8F:9C:66:B5:B3:05:DD:B8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146222.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adf4::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:dd:52:19:c4:1b:a7:cb:c0:fa:f8:e3:d7:3e:d5:95:3c:5d:
         8f:d8:90:c1:f9:96:4b:11:1c:6c:e6:d3:79:7e:53:16:74:2a:
         b0:6f:d8:f7:d4:5d:09:9d:19:31:e8:2e:e0:55:9d:2a:6e:22:
         1e:3e:c6:3d:b8:03:3b:82:71:66:bc:95:01:50:6f:15:88:61:
         2b:cb:ef:07:ff:44:15:f7:a3:11:ac:d7:f7:ab:90:0b:8c:4e:
         94:c6:c5:49:8e:ed:08:5d:dc:ba:09:4a:55:18:d0:21:56:04:
         0d:f4:1d:2e:6a:8c:39:96:60:42:cc:8f:80:53:bd:f5:42:17:
         f0:78:a3:cb:0d:65:79:99:95:42:d8:14:92:8d:ed:ef:de:60:
         43:81:39:6a:d1:6f:0f:bd:89:28:1e:b5:75:ae:16:06:63:66:
         42:2e:c7:90:17:de:0b:48:b3:f2:fe:9e:e5:e3:af:31:b6:ab:
         a7:a0:8d:f8:2e:7d:23:49:89:a9:29:d5:cc:56:37:88:7e:73:
         1a:7f:6a:fc:ea:23:0c:8f:6f:9c:39:87:0a:cd:b9:14:15:3b:
         52:ee:ad:6a:d0:60:be:e7:ff:03:71:e4:0e:ce:75:c1:c6:b9:
         26:4e:68:6b:05:91:f7:bc:1b:d1:33:0c:f4:e9:6b:0a:6d:c2:
         0c:5e:e1:f9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDxlwIaFFEd4+sXnZfWPnC8R5rg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNDlaFw0yNzA1MjEwNzA4NDlaMDMxMTAvBgNV
BAMTKEYxRTg3NzJBNEI3OTVDQkVENkJERjM3MThGOUM2NkI1QjMwNUREQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeVFXXvi7sXQer6V5TYex5/o3l
doCaj30y50mPlOTWwVgaY+RYtNodPEX7UWg4UAAGLK0S4s8YhKBfANkFX3wivA8Y
tzZyTeHyfKBng9pCsci4vKcN83eEA1X+IPtm3pGmnAyFNgJdyZ54nquWbOspczvO
L0B+n3ri/J6+BUfcQyxzRYEjYtZsVp8y3TL5KLFifMheBJ0D4XncjjlSuO3GJWaE
b0Hr2RzPRg3llVkNsBaoQkAgO0F282eRlWKMITmMd6REgEz3BWBzAkjCDaopTyi+
u1bNeeDX+o8HAAwdSOqxGIK8eY3ZpRzO8hr7+55RFfJ+hbFnGF5Zki/En0dbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU8eh3Kkt5XL7WvfNxj5xmtbMF3bgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjIyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt9DANBgkqhkiG9w0BAQsFAAOCAQEAEN1S
GcQbp8vA+vjj1z7VlTxdj9iQwfmWSxEcbObTeX5TFnQqsG/Y99RdCZ0ZMegu4FWd
Km4iHj7GPbgDO4JxZryVAVBvFYhhK8vvB/9EFfejEazX96uQC4xOlMbFSY7tCF3c
uglKVRjQIVYEDfQdLmqMOZZgQsyPgFO99UIX8Hijyw1leZmVQtgUko3t795gQ4E5
atFvD72JKB61da4WBmNmQi7HkBfeC0iz8v6e5eOvMbarp6CN+C59I0mJqSnVzFY3
iH5zGn9q/OojDI9vnDmHCs25FBU7Uu6tatBgvuf/A3HkDs51wca5Jk5oawWR97wb
0TMM9OlrCm3CDF7h+Q==
-----END CERTIFICATE-----