Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146364.roa
File:                     AS146364.roa (raw, json)
Hash identifier:          CfsdLtGQ0BB0MhVuYSHWIEYv548fLnJKcyRu9B/ywOA=
Subject key identifier:   A7:65:60:8A:38:09:60:79:9D:BB:BD:7C:63:8C:9D:57:25:50:1F:EE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1569E21C83F4BD3950E936ADA6D62C920BFFF3DC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146364.roa
Signing time:             Tue 26 May 2026 06:12:25 +0000
ROA not before:           Tue 26 May 2026 06:07:25 +0000
ROA not after:            Tue 25 May 2027 06:12:25 +0000
asID:                     146364
IP address blocks:        240a:ae82::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:69:e2:1c:83:f4:bd:39:50:e9:36:ad:a6:d6:2c:92:0b:ff:f3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:25 2026 GMT
            Not After : May 25 06:12:25 2027 GMT
        Subject: CN=A765608A380960799DBBBD7C638C9D5725501FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:a7:69:fb:c8:20:ac:fd:1b:1d:dd:2c:56:
                    86:b2:4a:49:94:89:9f:a5:9b:ae:c1:1c:f9:23:27:
                    0c:70:2e:e4:bd:ec:4e:4c:6f:b9:46:93:07:06:3d:
                    f9:d7:64:33:55:61:fa:22:7e:0e:54:58:1f:6d:43:
                    d7:0c:0f:91:20:20:d5:85:6c:c4:ca:58:13:71:6f:
                    ac:a5:c4:a2:f8:da:2a:4d:80:ec:f0:c5:83:20:cf:
                    46:dd:b8:6d:41:6b:2c:9d:0a:b5:ff:34:d7:50:a0:
                    3f:97:f8:28:4d:e2:7a:2e:59:fb:aa:31:63:4a:7d:
                    d3:a6:f7:55:10:d9:28:7e:90:18:88:70:6b:a4:3a:
                    d3:bd:1c:a4:27:21:41:d4:e9:4d:ac:69:ae:70:64:
                    c7:3e:d9:04:2a:27:c7:9b:fd:b3:9c:cb:b4:4c:e8:
                    ed:6a:6f:2a:48:78:57:5b:f9:6e:5f:3b:7b:c9:d8:
                    66:08:13:db:51:81:5a:ec:80:9f:4d:86:65:c9:01:
                    b3:ca:6f:34:a4:a5:09:dd:7a:93:d9:78:3e:ad:c8:
                    0a:2f:ff:60:d1:d5:01:45:ef:d3:e8:73:cb:2b:11:
                    28:cd:6f:a3:c0:e5:dd:f3:d5:ee:21:1a:34:4e:3e:
                    8e:d7:08:c2:01:07:bf:e3:3e:14:41:19:f3:5d:e4:
                    de:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:65:60:8A:38:09:60:79:9D:BB:BD:7C:63:8C:9D:57:25:50:1F:EE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146364.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae82::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:65:4c:68:1a:1f:bf:d7:0d:df:50:c3:7e:11:68:74:9f:7b:
         16:9d:9c:1e:eb:0b:f2:9d:d5:60:c7:b8:20:5a:d4:29:67:71:
         0b:fd:f1:eb:b5:86:b2:c9:1d:d1:32:69:e4:65:d9:89:73:b9:
         6b:dd:c6:26:38:75:d4:32:64:cd:ae:3f:9f:b0:95:a4:2a:a9:
         1e:fd:3f:49:72:54:f1:60:bc:a7:df:ce:62:08:11:12:f4:6d:
         83:31:3c:02:f7:0f:00:1d:84:cd:fe:88:97:71:8b:dd:88:48:
         5c:e2:f8:4e:94:6e:a5:f7:7b:c1:8b:e7:3b:c2:6b:6b:4a:a5:
         82:fe:e0:9f:d6:43:5e:78:1c:5b:bf:be:40:68:15:0a:41:ee:
         3a:41:03:2c:ef:db:e4:38:2b:5f:de:d5:cc:be:db:a9:7b:d4:
         dc:34:67:d5:1d:ff:f1:cd:42:dd:55:56:37:29:1f:09:f5:cc:
         7d:13:a9:f0:c7:84:73:99:f1:29:c3:39:24:3f:bf:fa:4b:82:
         0d:44:98:4d:77:e6:f6:16:fd:33:98:9e:da:92:1f:57:8e:fe:
         1b:65:fd:fb:d0:4a:4f:77:21:77:43:fe:9a:0a:96:b2:47:bf:
         ae:15:79:53:75:ba:d0:62:47:9e:4d:82:ce:83:7d:7e:8a:fc:
         e1:86:11:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----