Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146284.roa
File:                     AS146284.roa (raw, json)
Hash identifier:          pqvVsDqyBbrjcK7J9j+j41R8MUrNvEjc5lhKmrmAqEI=
Subject key identifier:   52:92:51:1F:12:AE:47:B8:C7:AD:59:8B:99:DE:1B:B0:82:5E:60:EA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       10B3DC1D4043F61DB5461CBECA8E7F97337D893F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146284.roa
Signing time:             Fri 22 May 2026 01:50:25 +0000
ROA not before:           Fri 22 May 2026 01:45:25 +0000
ROA not after:            Fri 21 May 2027 01:50:25 +0000
asID:                     146284
IP address blocks:        240a:ae32::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b3:dc:1d:40:43:f6:1d:b5:46:1c:be:ca:8e:7f:97:33:7d:89:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:25 2026 GMT
            Not After : May 21 01:50:25 2027 GMT
        Subject: CN=5292511F12AE47B8C7AD598B99DE1BB0825E60EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1e:4a:4b:54:67:e6:e4:77:70:79:4d:2b:87:
                    2f:52:06:17:f4:b9:5a:8b:09:1e:5d:56:ad:19:ff:
                    a3:df:d4:ef:e0:cc:bb:81:5c:f4:5d:41:54:15:88:
                    1e:00:fc:d4:6a:1e:6c:14:ee:5a:00:90:47:62:ee:
                    75:f0:78:d3:f0:78:39:44:38:13:1a:49:c0:6c:b7:
                    ab:95:82:d0:94:50:b5:10:a2:4e:a9:b8:18:5d:10:
                    51:08:e8:0e:bf:9e:e8:04:5e:b3:46:6f:bb:e7:a1:
                    31:8e:4c:e7:0e:ca:fa:a7:29:f3:b4:b8:15:1f:22:
                    47:f8:55:35:ef:b9:d4:ae:96:12:b7:fe:08:80:b0:
                    20:2e:ca:be:0c:08:d4:49:25:a5:67:35:7f:86:cf:
                    f7:a3:c7:d6:85:a5:01:f7:0d:fa:53:ed:b6:3f:5a:
                    73:1c:1f:07:69:b6:82:b1:00:86:4e:80:53:fa:90:
                    e2:9d:ef:14:1c:7f:94:d0:9e:cd:7b:93:cd:21:4c:
                    31:97:80:cc:32:93:8f:07:ae:15:c4:0e:c0:f7:c6:
                    48:e7:b4:89:6f:62:a0:82:f5:84:30:39:eb:0e:de:
                    e0:de:5f:e1:36:1a:23:2c:63:d8:67:65:5a:90:6a:
                    64:7c:07:5a:22:3b:c9:74:5a:34:81:b6:82:1a:a4:
                    fb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:92:51:1F:12:AE:47:B8:C7:AD:59:8B:99:DE:1B:B0:82:5E:60:EA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146284.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae32::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:0f:96:26:d8:05:bb:69:f4:e1:32:66:16:92:74:34:cf:5b:
         d5:b1:b0:74:6b:04:01:50:46:50:cf:e5:ef:b5:e1:3e:5f:b5:
         8a:29:aa:f0:61:ec:0e:66:8d:c5:b6:b1:d0:09:27:6d:a6:f4:
         81:bd:64:b4:26:6d:70:76:f1:a8:63:67:ce:07:a8:06:91:66:
         8e:aa:38:6e:c3:f4:11:2a:6a:b5:45:bc:c7:99:f1:01:5c:54:
         87:f5:4b:34:5a:09:f0:5f:fc:5b:f8:e2:4c:92:b1:63:25:f2:
         3c:a7:82:0c:3c:b5:93:ce:54:3a:f0:75:23:3b:e1:d7:4a:14:
         c9:30:49:2d:3c:b7:9c:c8:88:0e:02:f1:4f:10:4c:19:e3:8f:
         8c:1a:ea:0a:1c:32:dd:8b:1f:17:79:d6:6b:58:4d:5c:f2:05:
         a4:25:40:df:65:9a:12:bf:d4:92:70:2f:fc:bb:7b:a7:55:8e:
         57:f8:6c:1f:5c:07:d7:dc:a2:86:a3:cc:e6:b5:44:a9:ee:19:
         6d:2b:2c:98:c1:25:9b:69:c1:c9:c0:8f:33:85:30:1a:0f:50:
         ee:ea:77:5e:8f:f7:4a:8b:8f:a3:6a:96:3a:98:9c:5a:2f:65:
         50:66:a2:29:90:cd:2c:97:07:ad:e9:d7:7e:0d:86:55:98:b6:
         4c:d8:a2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----