Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146260.roa
File:                     AS146260.roa (raw, json)
Hash identifier:          z5vRgIvVLYEpSiY4ULPEC2RLTftAKqjpKX+6A6tDzPA=
Subject key identifier:   58:79:07:61:56:B2:43:D0:96:63:04:5A:B3:EB:51:87:C9:D0:91:A3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0A1A226B1776504934BB649EBD8197B8ED308A9C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146260.roa
Signing time:             Fri 22 May 2026 07:08:39 +0000
ROA not before:           Fri 22 May 2026 07:03:39 +0000
ROA not after:            Fri 21 May 2027 07:08:39 +0000
asID:                     146260
IP address blocks:        240a:ae1a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1a:22:6b:17:76:50:49:34:bb:64:9e:bd:81:97:b8:ed:30:8a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:39 2026 GMT
            Not After : May 21 07:08:39 2027 GMT
        Subject: CN=5879076156B243D09663045AB3EB5187C9D091A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fe:7f:f9:ed:b1:b0:b6:ca:ec:83:95:2d:41:
                    cd:97:f8:59:16:3f:24:36:86:0b:00:0c:7b:8a:d7:
                    b5:c3:4a:de:62:78:93:df:00:6a:23:e5:29:ea:90:
                    ec:33:36:07:e3:0f:bb:6a:2a:d6:71:43:d0:db:6d:
                    b2:41:6f:6a:f3:90:53:08:2d:e8:a0:5a:07:61:0f:
                    9f:54:96:ff:a9:7a:82:56:91:15:1a:24:f1:07:8f:
                    66:d9:df:7f:d0:be:ef:d5:14:ed:32:9e:b0:c0:ff:
                    bc:9e:98:6b:ae:ac:77:1a:03:eb:72:ed:d1:36:59:
                    b2:3e:de:36:f0:21:33:30:2a:21:04:7d:85:75:2d:
                    d8:8c:10:08:44:68:b0:dc:e1:f6:c1:63:0d:ff:a4:
                    c4:12:32:56:a2:32:55:d5:7b:bf:52:47:61:27:f0:
                    d5:7c:1d:2d:3b:fc:52:74:b1:98:09:16:67:b3:de:
                    90:e2:a3:0e:f4:fd:f5:ac:11:57:d4:fe:c3:4f:93:
                    2a:c8:9b:01:e9:49:a7:c5:79:a9:d5:05:85:01:c1:
                    24:c5:b2:69:92:95:08:5a:60:2d:a8:7d:72:2b:c5:
                    ba:a7:41:52:41:42:e1:e4:b7:18:40:b1:c4:bd:7d:
                    f6:61:ce:cd:34:13:6f:02:e6:ec:c2:af:93:04:74:
                    8a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:79:07:61:56:B2:43:D0:96:63:04:5A:B3:EB:51:87:C9:D0:91:A3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146260.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae1a::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:ce:7c:03:3e:da:07:0a:c3:ff:51:c4:44:28:de:fe:82:ca:
         b7:05:ab:aa:e5:75:bc:f7:c5:5e:8c:17:f5:13:2b:56:1e:03:
         4e:3a:23:0e:06:fc:64:69:10:91:86:78:95:2f:17:8c:5d:09:
         87:ee:0a:a5:97:31:0c:4f:45:46:fc:7c:58:a4:a2:9e:0c:f5:
         06:1c:22:d4:5e:10:0e:b3:e8:cf:fe:89:7c:51:01:ba:dc:66:
         e2:dd:83:65:ca:73:fb:4e:ef:f5:c8:94:c8:23:f4:74:24:ad:
         54:eb:92:1f:92:62:d5:4a:1f:7f:6e:96:ee:35:1b:c6:35:9b:
         ce:8e:54:ab:95:aa:ee:0d:da:c0:02:62:9b:9d:ca:81:76:1a:
         a0:69:ee:87:25:24:66:4c:d4:b3:a9:d1:74:51:5d:d2:f1:ff:
         bf:66:3e:b6:a1:43:41:4e:f3:85:fe:48:90:37:af:84:bd:c8:
         9d:be:67:d7:56:d1:92:a5:18:c6:24:2d:aa:db:9f:4e:be:cb:
         18:6c:14:b9:04:cd:90:bd:2a:3b:6a:81:30:0e:7e:16:cd:f0:
         fe:40:12:e0:83:84:f8:c2:46:55:94:66:da:10:2f:0e:04:f5:
         98:b5:ab:5b:e0:13:de:08:1a:c1:ee:94:38:7c:09:69:21:2c:
         ab:1a:f2:63
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUChoiaxd2UEk0u2SevYGXuO0wipwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzMzlaFw0yNzA1MjEwNzA4MzlaMDMxMTAvBgNV
BAMTKDU4NzkwNzYxNTZCMjQzRDA5NjYzMDQ1QUIzRUI1MTg3QzlEMDkxQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/n/57bGwtsrsg5UtQc2X+FkW
PyQ2hgsADHuK17XDSt5ieJPfAGoj5SnqkOwzNgfjD7tqKtZxQ9DbbbJBb2rzkFMI
LeigWgdhD59Ulv+peoJWkRUaJPEHj2bZ33/Qvu/VFO0ynrDA/7yemGuurHcaA+ty
7dE2WbI+3jbwITMwKiEEfYV1LdiMEAhEaLDc4fbBYw3/pMQSMlaiMlXVe79SR2En
8NV8HS07/FJ0sZgJFmez3pDiow70/fWsEVfU/sNPkyrImwHpSafFeanVBYUBwSTF
smmSlQhaYC2ofXIrxbqnQVJBQuHktxhAscS9ffZhzs00E28C5uzCr5MEdIr7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUWHkHYVayQ9CWYwRas+tRh8nQkaMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjYwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquGjANBgkqhkiG9w0BAQsFAAOCAQEAdM58
Az7aBwrD/1HERCje/oLKtwWrquV1vPfFXowX9RMrVh4DTjojDgb8ZGkQkYZ4lS8X
jF0Jh+4KpZcxDE9FRvx8WKSingz1Bhwi1F4QDrPoz/6JfFEButxm4t2DZcpz+07v
9ciUyCP0dCStVOuSH5Ji1Uoff26W7jUbxjWbzo5Uq5Wq7g3awAJim53KgXYaoGnu
hyUkZkzUs6nRdFFd0vH/v2Y+tqFDQU7zhf5IkDevhL3Inb5n11bRkqUYxiQtqtuf
Tr7LGGwUuQTNkL0qO2qBMA5+Fs3w/kAS4IOE+MJGVZRm2hAvDgT1mLWrW+AT3gga
we6UOHwJaSEsqxryYw==
-----END CERTIFICATE-----