Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146327.roa
File:                     AS146327.roa (raw, json)
Hash identifier:          zKm+JsXFPhDW1AcXVszvXQ9VsTydlwQbEeylIZ2EiZw=
Subject key identifier:   74:29:A3:22:CE:6E:A2:BC:D7:B5:ED:0D:20:1A:EE:B0:F1:0A:5D:A4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       05468B08FC9D0BCF25CEDEEE75C1A82D636CC742
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146327.roa
Signing time:             Fri 22 May 2026 07:40:52 +0000
ROA not before:           Fri 22 May 2026 07:35:52 +0000
ROA not after:            Fri 21 May 2027 07:40:52 +0000
asID:                     146327
IP address blocks:        240a:ae5d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:46:8b:08:fc:9d:0b:cf:25:ce:de:ee:75:c1:a8:2d:63:6c:c7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:52 2026 GMT
            Not After : May 21 07:40:52 2027 GMT
        Subject: CN=7429A322CE6EA2BCD7B5ED0D201AEEB0F10A5DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2f:a7:ae:eb:5d:24:46:84:5d:f4:85:36:81:
                    46:b1:0c:73:d3:ac:db:1a:cd:e9:6c:73:52:18:11:
                    ee:88:b8:8e:f1:48:e8:88:f9:e5:6e:40:54:b0:c7:
                    77:e2:d0:a6:b6:5b:a6:c2:e8:a5:6b:39:db:2f:b5:
                    33:cc:34:4c:69:bf:cc:15:b7:94:62:8a:3b:a5:34:
                    1e:24:e9:49:33:0c:b2:65:0a:ea:a7:d4:93:69:59:
                    00:ba:4d:6d:e9:02:c3:d0:68:9a:f2:b5:56:c0:1b:
                    98:09:5e:11:ae:4d:bc:69:35:58:73:ea:85:df:31:
                    c1:2b:75:d9:40:dc:24:3f:11:13:ec:fd:fc:7c:b9:
                    da:a5:6f:c8:c7:4b:f5:29:23:a5:05:f6:e6:3a:52:
                    8f:f3:0b:eb:03:7a:66:b2:5d:d9:ac:c0:2c:b8:ea:
                    d3:cd:76:99:a2:2e:35:d5:67:1f:a3:b5:23:25:e6:
                    c6:83:65:ee:14:24:97:11:8a:4c:7e:65:e6:88:09:
                    d1:bd:64:1f:44:93:43:36:4c:36:6c:0e:ef:cd:62:
                    58:53:c3:db:b4:a1:e9:c4:e1:50:28:8e:3f:c2:c4:
                    84:d4:43:95:dd:a4:74:63:84:b0:19:19:ee:d6:1a:
                    fa:ec:4e:4f:e3:a4:b4:82:cb:94:59:a3:66:92:c3:
                    8e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:29:A3:22:CE:6E:A2:BC:D7:B5:ED:0D:20:1A:EE:B0:F1:0A:5D:A4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146327.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae5d::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:6d:a5:41:7e:26:b5:d9:80:c4:6b:9a:9c:7c:b4:32:eb:43:
         c3:a5:4c:f2:c2:a5:a2:cc:cc:4e:f8:ae:2c:d7:9d:9f:ee:ee:
         5d:a8:60:8d:6a:ca:04:42:7f:3a:de:42:bb:ec:a1:d6:ba:61:
         c0:75:d0:af:9f:a1:76:85:6e:f1:52:fc:d2:fb:eb:3d:e7:33:
         66:48:a0:d1:29:28:ed:c5:41:2d:0b:f3:a0:45:b3:6b:31:20:
         f5:4d:3c:a4:ef:1a:21:23:50:07:5e:91:df:7e:00:90:69:c6:
         98:43:1b:df:54:27:11:44:23:77:26:25:c7:c6:5d:3a:25:34:
         86:81:49:fc:f0:7a:87:a9:5d:9f:f3:0c:40:e0:58:25:31:d5:
         8d:a3:51:34:98:a4:1b:e4:1b:b8:92:22:9f:c4:ef:4b:48:cf:
         70:b8:89:c5:f5:e7:40:29:97:70:fa:df:e3:f0:52:77:14:91:
         0b:70:7f:0b:7a:09:7a:65:53:0c:a0:0d:79:9c:f6:23:b2:60:
         57:1b:26:d4:6f:cf:97:e9:67:0b:4b:ce:8a:70:d7:f6:47:56:
         be:d5:75:8b:62:47:fc:e3:0b:1c:e0:35:af:b0:c9:4e:32:25:
         da:05:79:6f:4e:30:f4:88:be:6c:ea:66:cd:92:45:15:50:b7:
         45:27:1c:44
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBUaLCPydC88lzt7udcGoLWNsx0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM1NTJaFw0yNzA1MjEwNzQwNTJaMDMxMTAvBgNV
BAMTKDc0MjlBMzIyQ0U2RUEyQkNEN0I1RUQwRDIwMUFFRUIwRjEwQTVEQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWL6eu610kRoRd9IU2gUaxDHPT
rNsazelsc1IYEe6IuI7xSOiI+eVuQFSwx3fi0Ka2W6bC6KVrOdsvtTPMNExpv8wV
t5RiijulNB4k6UkzDLJlCuqn1JNpWQC6TW3pAsPQaJrytVbAG5gJXhGuTbxpNVhz
6oXfMcErddlA3CQ/ERPs/fx8udqlb8jHS/UpI6UF9uY6Uo/zC+sDemayXdmswCy4
6tPNdpmiLjXVZx+jtSMl5saDZe4UJJcRikx+ZeaICdG9ZB9Ek0M2TDZsDu/NYlhT
w9u0oenE4VAojj/CxITUQ5XdpHRjhLAZGe7WGvrsTk/jpLSCy5RZo2aSw45VAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUdCmjIs5uorzXte0NIBrusPEKXaQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquXTANBgkqhkiG9w0BAQsFAAOCAQEApm2l
QX4mtdmAxGuanHy0MutDw6VM8sKloszMTviuLNedn+7uXahgjWrKBEJ/Ot5Cu+yh
1rphwHXQr5+hdoVu8VL80vvrPeczZkig0Sko7cVBLQvzoEWzazEg9U08pO8aISNQ
B16R334AkGnGmEMb31QnEUQjdyYlx8ZdOiU0hoFJ/PB6h6ldn/MMQOBYJTHVjaNR
NJikG+QbuJIin8TvS0jPcLiJxfXnQCmXcPrf4/BSdxSRC3B/C3oJemVTDKANeZz2
I7JgVxsm1G/Pl+lnC0vOinDX9kdWvtV1i2JH/OMLHOA1r7DJTjIl2gV5b04w9Ii+
bOpmzZJFFVC3RSccRA==
-----END CERTIFICATE-----