Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146241.roa
File:                     AS146241.roa (raw, json)
Hash identifier:          M40R4BmbOZKSwc2QoYpENUhcdcJqr3MGwzJfP7lGNK4=
Subject key identifier:   E9:48:86:17:BE:70:24:36:60:65:BB:2C:33:14:B1:A4:A4:8A:01:0D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       069C15D2E30C23B8E95728C71E6B21AF573304B5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146241.roa
Signing time:             Fri 22 May 2026 02:48:09 +0000
ROA not before:           Fri 22 May 2026 02:43:09 +0000
ROA not after:            Fri 21 May 2027 02:48:09 +0000
asID:                     146241
IP address blocks:        240a:ae07::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9c:15:d2:e3:0c:23:b8:e9:57:28:c7:1e:6b:21:af:57:33:04:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:43:09 2026 GMT
            Not After : May 21 02:48:09 2027 GMT
        Subject: CN=E9488617BE7024366065BB2C3314B1A4A48A010D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:67:e3:5d:f1:4f:50:1c:18:1e:27:10:40:
                    16:f5:1a:43:8c:6b:0e:fe:d6:29:70:88:64:ac:06:
                    bc:31:93:46:96:ed:32:0e:d1:0f:8d:1b:8b:b0:80:
                    80:1f:1c:66:1b:1e:13:ca:4c:04:59:4c:6d:7a:86:
                    81:23:75:5c:d1:cf:ca:8a:df:a1:fd:5f:80:76:fa:
                    4d:51:ac:3e:9d:a0:96:54:70:4a:a5:50:e5:99:96:
                    1f:7b:4b:4f:1d:aa:2c:c7:32:66:b7:f7:8f:ad:f5:
                    35:3d:84:ec:38:7c:39:20:d9:f8:a3:02:26:92:d8:
                    ee:c0:ee:b2:fd:bf:52:4b:34:bc:7e:61:72:3b:4d:
                    77:bf:cb:89:a1:5c:ec:f9:ed:97:b5:2f:19:2e:a2:
                    0b:64:6f:4f:88:85:2c:f7:55:c0:32:95:cd:0f:14:
                    80:02:86:7a:de:6d:a0:6f:e1:47:4f:58:c5:b5:60:
                    52:3f:72:30:a3:de:0b:b0:9f:0c:5c:ab:d6:7c:95:
                    b6:f5:04:21:5c:fa:bf:da:52:83:4c:df:7e:8e:8f:
                    01:f9:72:a9:e9:70:a5:e4:6b:46:70:7a:cb:b3:3f:
                    a1:81:f4:87:e8:a9:7f:0b:ef:af:39:6c:77:8a:f0:
                    cd:b8:9e:2b:02:02:30:76:f5:65:98:ab:86:e6:36:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:48:86:17:BE:70:24:36:60:65:BB:2C:33:14:B1:A4:A4:8A:01:0D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146241.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae07::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:38:4f:57:c0:87:e8:54:6e:bb:6e:8e:7e:e0:8f:2c:8c:2b:
         7f:f9:76:94:34:8d:a1:f2:9f:85:e0:70:4b:e4:d4:7e:d9:03:
         cf:23:b2:5c:db:0d:2f:23:ed:e5:49:7a:79:1c:47:06:94:7b:
         7a:97:44:72:74:12:e7:55:c3:30:6c:99:67:19:95:84:f3:f1:
         eb:bf:8c:e3:f6:3b:39:fc:0f:c0:17:77:b0:0e:cf:2b:fe:84:
         30:a1:8f:c6:85:a6:ec:25:bb:d6:08:2c:63:01:7c:bd:6b:4b:
         4e:b4:db:e0:62:e6:05:50:89:db:94:46:65:70:51:27:57:36:
         78:a4:17:77:18:44:e3:3b:d1:47:21:0e:2f:82:f7:e8:91:7a:
         73:4d:93:39:4f:cc:43:84:b6:f1:12:a2:6c:06:25:37:57:1f:
         42:d7:3a:98:0d:4f:19:67:cd:14:e4:90:79:c0:74:55:93:e9:
         3d:7c:52:22:34:b2:72:54:64:5b:2c:5a:d6:49:8d:a9:95:da:
         be:67:6d:30:12:23:ec:5c:e7:d1:82:fc:8a:c4:0b:da:c9:31:
         01:c3:0a:5b:a3:ce:05:4c:8a:f5:ef:e9:56:f8:f0:8f:76:34:
         37:b6:e3:7b:80:bd:54:59:aa:20:df:96:6f:c0:cf:25:9d:27:
         6e:4b:10:34
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBpwV0uMMI7jpVyjHHmshr1czBLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQzMDlaFw0yNzA1MjEwMjQ4MDlaMDMxMTAvBgNV
BAMTKEU5NDg4NjE3QkU3MDI0MzY2MDY1QkIyQzMzMTRCMUE0QTQ4QTAxMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkaWfjXfFPUBwYHicQQBb1GkOM
aw7+1ilwiGSsBrwxk0aW7TIO0Q+NG4uwgIAfHGYbHhPKTARZTG16hoEjdVzRz8qK
36H9X4B2+k1RrD6doJZUcEqlUOWZlh97S08dqizHMma394+t9TU9hOw4fDkg2fij
AiaS2O7A7rL9v1JLNLx+YXI7TXe/y4mhXOz57Ze1Lxkuogtkb0+IhSz3VcAylc0P
FIAChnrebaBv4UdPWMW1YFI/cjCj3guwnwxcq9Z8lbb1BCFc+r/aUoNM336OjwH5
cqnpcKXka0ZwesuzP6GB9IfoqX8L7685bHeK8M24nisCAjB29WWYq4bmNtRbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU6UiGF75wJDZgZbssMxSxpKSKAQ0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquBzANBgkqhkiG9w0BAQsFAAOCAQEAEDhP
V8CH6FRuu26OfuCPLIwrf/l2lDSNofKfheBwS+TUftkDzyOyXNsNLyPt5Ul6eRxH
BpR7epdEcnQS51XDMGyZZxmVhPPx67+M4/Y7OfwPwBd3sA7PK/6EMKGPxoWm7CW7
1ggsYwF8vWtLTrTb4GLmBVCJ25RGZXBRJ1c2eKQXdxhE4zvRRyEOL4L36JF6c02T
OU/MQ4S28RKibAYlN1cfQtc6mA1PGWfNFOSQecB0VZPpPXxSIjSyclRkWyxa1kmN
qZXavmdtMBIj7Fzn0YL8isQL2skxAcMKW6POBUyK9e/pVvjwj3Y0N7bje4C9VFmq
IN+Wb8DPJZ0nbksQNA==
-----END CERTIFICATE-----