Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146293.roa
File:                     AS146293.roa (raw, json)
Hash identifier:          Zi5YjQ8n+iqAhhpMwMsKErcAcpFOa4whlPFvhrWH+d8=
Subject key identifier:   27:54:2D:EB:CD:E4:FE:93:95:3F:2F:3C:24:07:32:9C:F9:B7:3A:DB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       118FFDF54A92331102415F1428D7EF3070B6DCE8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146293.roa
Signing time:             Tue 26 May 2026 02:35:24 +0000
ROA not before:           Tue 26 May 2026 02:30:24 +0000
ROA not after:            Tue 25 May 2027 02:35:24 +0000
asID:                     146293
IP address blocks:        240a:ae3b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8f:fd:f5:4a:92:33:11:02:41:5f:14:28:d7:ef:30:70:b6:dc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:24 2026 GMT
            Not After : May 25 02:35:24 2027 GMT
        Subject: CN=27542DEBCDE4FE93953F2F3C2407329CF9B73ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:ca:61:4d:c5:23:2b:e5:0a:a0:fd:97:ab:
                    cd:f9:ab:c0:08:99:71:74:dc:fe:24:4a:a8:8d:48:
                    68:a6:ad:68:e6:c4:dc:56:4f:c7:2d:bf:c6:e0:1b:
                    1f:f3:15:6d:11:d9:03:f1:a3:07:10:b6:66:28:1a:
                    bb:5e:e3:02:c4:e8:45:30:40:20:75:64:41:ea:75:
                    10:32:1a:71:be:3c:c1:05:83:f2:bf:bb:32:88:86:
                    46:02:c1:76:35:d8:68:6d:6f:45:69:da:5c:31:91:
                    d9:1e:2e:80:24:0f:0d:93:4c:7e:90:34:81:a1:4c:
                    4a:13:94:97:35:1f:16:94:0d:2e:a3:f7:8c:92:aa:
                    f0:94:71:fe:15:e3:43:ca:b6:9a:b7:e1:be:45:1b:
                    d4:21:a8:f4:35:3e:58:ae:da:d5:a5:28:f9:a9:0d:
                    c3:52:04:a8:26:17:bd:dc:d1:92:c5:74:89:ea:f7:
                    84:4a:f8:48:9f:9e:3a:70:0f:c5:2e:60:3e:fc:a0:
                    b9:a9:f7:14:43:4c:77:ff:da:85:81:b3:4b:a1:92:
                    96:88:fe:e9:ce:1c:59:dc:d0:5d:1e:41:dd:9d:7a:
                    8d:fa:9b:97:4b:80:3e:0c:fc:d4:62:36:3d:a0:e0:
                    2e:57:0c:ad:6a:54:54:aa:5c:b5:ab:c3:6e:88:ba:
                    cf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:54:2D:EB:CD:E4:FE:93:95:3F:2F:3C:24:07:32:9C:F9:B7:3A:DB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146293.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae3b::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:26:e5:6a:05:43:cd:43:fc:10:87:dc:15:3b:0b:c7:38:3a:
         0b:4f:8f:53:79:ee:ef:50:61:b8:51:15:3b:36:2a:db:a7:6c:
         9c:05:2f:85:55:ad:db:06:9a:77:3c:b6:4d:42:dc:28:82:4a:
         e7:df:9f:81:f6:2a:88:3b:8d:b8:02:31:15:b7:d2:c0:b2:51:
         cd:76:09:df:24:5d:fc:b8:4a:51:b8:32:7c:cc:74:87:22:f3:
         24:f6:ff:58:ec:a1:f7:93:0a:c0:6c:e2:af:4c:b1:c8:6d:7c:
         59:46:56:05:5f:8b:6f:77:72:0a:60:7e:03:67:d2:9c:26:da:
         71:98:b2:cc:81:d1:fb:bb:86:41:fd:82:4b:0a:c1:5b:03:20:
         d4:ec:7d:7f:11:26:e1:10:1d:b2:23:5c:2c:2f:1a:ba:42:ef:
         68:8a:33:9a:91:0a:fd:c6:09:05:04:65:54:4f:96:bd:af:bf:
         ab:b2:93:dd:57:47:cf:c6:42:28:8e:3c:27:32:28:2f:2a:31:
         2f:ac:39:f3:e2:c3:6b:a7:94:43:09:ea:55:ae:2c:e4:1b:33:
         4b:2c:97:21:a8:1e:b7:a9:d3:6e:60:d6:40:9a:ae:6c:c8:6a:
         7a:71:51:3a:c4:2b:5c:61:74:57:27:f3:6c:7e:43:a8:71:0a:
         1b:5f:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----