Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146398.roa
File:                     AS146398.roa (raw, json)
Hash identifier:          0Ss0w8r0WGsG5WbM7oOnchBiMGKSCVzgDhdPW840aGs=
Subject key identifier:   31:1F:DC:E7:FC:6C:1C:53:AA:34:81:B9:CB:50:36:ED:A4:00:61:53
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0B058A3F7FBA027412768D42425C84FE115C8AD2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146398.roa
Signing time:             Fri 22 May 2026 02:48:10 +0000
ROA not before:           Fri 22 May 2026 02:43:10 +0000
ROA not after:            Fri 21 May 2027 02:48:10 +0000
asID:                     146398
IP address blocks:        240a:aea4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:05:8a:3f:7f:ba:02:74:12:76:8d:42:42:5c:84:fe:11:5c:8a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:43:10 2026 GMT
            Not After : May 21 02:48:10 2027 GMT
        Subject: CN=311FDCE7FC6C1C53AA3481B9CB5036EDA4006153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:0e:de:0d:b1:50:a5:ec:70:09:1a:d1:a5:
                    38:e5:9e:4c:39:46:f2:e2:7c:4b:f0:18:f9:b0:7a:
                    64:04:c0:6b:00:e7:bb:28:d1:9d:c3:fd:5f:08:9e:
                    90:2a:7e:64:aa:dd:6c:33:6b:0d:e7:a6:93:fe:b5:
                    bb:22:87:08:af:49:bf:74:19:6a:1a:df:6b:68:a3:
                    47:3f:e3:65:06:4a:cb:98:e7:b5:eb:45:a7:8f:67:
                    e4:a2:62:95:71:c7:fd:20:dc:2c:ed:6a:a3:75:a5:
                    09:b6:43:68:08:9f:1b:68:d1:7d:ef:45:1a:43:05:
                    e1:54:ee:75:d3:cc:5c:e0:fa:dd:47:86:f2:88:61:
                    84:89:bf:e3:77:0b:36:79:6d:13:38:52:35:d5:3f:
                    a5:15:af:ce:d2:46:46:61:f6:80:95:2a:99:dd:48:
                    57:79:99:0a:a9:05:09:f8:54:f0:c0:ee:67:e6:a3:
                    13:a6:9c:60:73:e4:c9:54:24:f4:0f:1d:95:24:32:
                    a3:cb:3d:68:8a:ae:d4:93:4e:23:72:aa:cb:1b:98:
                    55:6d:6f:5d:89:a9:90:24:f6:71:6d:00:17:25:8e:
                    ec:23:dc:7b:7b:26:9e:39:ae:06:cd:88:91:f1:29:
                    ec:73:d7:cc:47:8d:ff:95:68:bc:b2:74:27:6a:9d:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1F:DC:E7:FC:6C:1C:53:AA:34:81:B9:CB:50:36:ED:A4:00:61:53
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146398.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aea4::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:6c:c8:46:2a:b1:55:97:37:05:20:77:dc:f2:f9:a0:99:38:
         26:49:92:75:63:d6:64:3b:12:e6:d0:e7:71:17:b5:19:95:b0:
         eb:e9:ff:dd:ea:f9:24:7c:e5:d8:7f:11:b7:8d:7d:29:bf:fa:
         89:fc:47:c7:23:c2:fb:20:75:d1:31:81:5d:f4:47:b1:01:47:
         f4:76:e4:db:59:98:c4:d4:0b:f6:ea:c8:55:0d:93:00:3b:ac:
         f3:ba:73:40:b8:66:79:1a:8f:06:ee:19:09:c7:68:ad:4e:45:
         87:de:a4:a4:46:94:b0:e5:14:19:73:e2:22:42:8e:1d:2b:dc:
         ee:e4:21:bd:c6:f1:92:7c:4c:21:86:28:cd:1a:ea:00:8c:4a:
         21:63:87:a3:59:cd:b9:29:ce:35:f8:b1:6c:c1:00:62:b6:17:
         6f:28:b7:96:49:ee:22:d3:95:da:9a:c6:c2:0b:84:c0:26:25:
         11:60:1a:8c:a3:6d:e1:f3:72:80:54:91:cb:eb:0b:64:8b:31:
         1a:f4:61:c8:ab:0d:51:10:dd:b1:e3:a9:39:fb:1f:36:29:59:
         61:a3:d1:af:f2:af:ab:d4:f1:f8:0a:d7:d0:06:01:52:61:56:
         41:34:61:93:ae:1a:df:0f:d2:1d:02:a1:75:c8:9e:a3:ad:62:
         32:5e:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----