Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146448.roa
File:                     AS146448.roa (raw, json)
Hash identifier:          h03NpfhN1oOK4QS2C03T5chvpyaxcA4MTwDYL9dskJs=
Subject key identifier:   86:38:86:2C:FA:88:E1:20:0B:0C:2B:BD:65:76:A8:49:4A:CC:C4:98
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6ADB67ECDCA5C834208961A24B39B62589141FA7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146448.roa
Signing time:             Fri 22 May 2026 07:32:31 +0000
ROA not before:           Fri 22 May 2026 07:27:31 +0000
ROA not after:            Fri 21 May 2027 07:32:31 +0000
asID:                     146448
IP address blocks:        240a:aed6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:db:67:ec:dc:a5:c8:34:20:89:61:a2:4b:39:b6:25:89:14:1f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:31 2026 GMT
            Not After : May 21 07:32:31 2027 GMT
        Subject: CN=8638862CFA88E1200B0C2BBD6576A8494ACCC498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:8a:c6:f2:33:9a:99:13:b1:4c:df:84:f6:
                    6a:13:27:f5:82:25:20:99:3f:b3:15:77:36:bb:4a:
                    e7:6a:64:de:9f:11:92:69:89:16:9d:85:4c:a9:b0:
                    b0:2c:12:82:c0:5f:69:f7:09:5f:a3:7b:e8:2c:50:
                    bf:58:0a:43:8f:bc:3e:03:69:21:d9:1a:c8:c9:e0:
                    3a:3b:e0:82:07:eb:b4:74:a1:78:85:f4:b2:2b:1c:
                    57:b4:9c:d8:54:86:84:b5:f7:75:9a:9b:7d:9f:c9:
                    bd:79:88:a6:8a:05:93:cf:3e:f4:9d:d8:22:fa:59:
                    9d:03:24:46:6f:55:42:74:1f:40:64:3e:bc:92:1d:
                    d9:8d:b3:a4:7f:dd:5c:b7:3b:29:87:65:ca:52:24:
                    6a:0b:1d:62:bc:e1:12:3c:05:77:46:58:b0:d5:db:
                    41:25:7c:63:92:fe:db:b3:b3:19:ea:50:2e:54:a6:
                    61:21:f4:53:cf:51:b7:b5:d2:35:61:d9:ae:67:cb:
                    57:d5:b8:82:47:01:52:c8:7f:51:b5:57:4e:96:e8:
                    65:73:f0:33:a9:d9:0e:d9:56:a4:3f:c9:68:ef:d5:
                    f2:12:4a:b3:86:98:e5:56:7c:f6:17:89:87:c9:e1:
                    e1:6c:9c:fd:4e:e0:49:4a:9b:29:97:8a:dc:29:d9:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:38:86:2C:FA:88:E1:20:0B:0C:2B:BD:65:76:A8:49:4A:CC:C4:98
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146448.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aed6::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:08:f0:c7:35:dd:de:0d:36:04:fa:c9:eb:dd:7c:b1:3c:c3:
         d8:cc:a0:f9:43:0f:d8:1b:81:ff:ad:54:7c:ee:15:fd:50:3a:
         af:0b:6c:d4:02:51:bb:dd:76:af:db:5b:79:9e:aa:1d:e0:fd:
         a5:ff:68:bc:d4:bb:31:bd:ef:39:8a:51:e1:35:63:63:b7:6c:
         2d:39:c7:05:17:d4:4c:1e:41:7a:4e:95:a8:87:09:17:61:b2:
         3f:f5:2b:c0:d7:82:40:a1:0e:4e:0d:c9:cd:e3:64:18:13:18:
         9c:1a:7c:46:14:fe:e0:29:42:e2:30:10:91:cb:8f:cb:c1:6c:
         3e:39:7f:69:ed:c3:62:10:b2:24:c3:6d:7f:01:a1:64:b2:82:
         c0:48:da:6d:8f:7a:16:e0:e9:03:20:1f:48:24:63:d9:87:67:
         23:84:e2:e6:30:5b:be:b8:6a:7a:7b:99:f0:34:a9:fa:c1:b4:
         27:4e:0e:6d:76:79:00:d1:f6:c1:71:8a:68:84:c6:ba:63:b9:
         1a:15:4b:cb:4b:79:f9:a6:70:53:41:94:58:bd:97:43:cf:c4:
         29:bf:1c:59:32:8f:7f:3a:db:c7:03:2e:25:a7:05:9b:d5:f9:
         7e:e2:54:ba:3a:6a:33:eb:1d:33:cf:2f:f3:b8:61:43:8e:f0:
         67:dd:11:60
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUattn7NylyDQgiWGiSzm2JYkUH6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MzFaFw0yNzA1MjEwNzMyMzFaMDMxMTAvBgNV
BAMTKDg2Mzg4NjJDRkE4OEUxMjAwQjBDMkJCRDY1NzZBODQ5NEFDQ0M0OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPYrG8jOamROxTN+E9moTJ/WC
JSCZP7MVdza7SudqZN6fEZJpiRadhUypsLAsEoLAX2n3CV+je+gsUL9YCkOPvD4D
aSHZGsjJ4Do74IIH67R0oXiF9LIrHFe0nNhUhoS193Wam32fyb15iKaKBZPPPvSd
2CL6WZ0DJEZvVUJ0H0BkPrySHdmNs6R/3Vy3OymHZcpSJGoLHWK84RI8BXdGWLDV
20ElfGOS/tuzsxnqUC5UpmEh9FPPUbe10jVh2a5ny1fVuIJHAVLIf1G1V06W6GVz
8DOp2Q7ZVqQ/yWjv1fISSrOGmOVWfPYXiYfJ4eFsnP1O4ElKmymXitwp2cGJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUhjiGLPqI4SALDCu9ZXaoSUrMxJgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NDQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqu1jANBgkqhkiG9w0BAQsFAAOCAQEAYQjw
xzXd3g02BPrJ6918sTzD2Myg+UMP2BuB/61UfO4V/VA6rwts1AJRu912r9tbeZ6q
HeD9pf9ovNS7Mb3vOYpR4TVjY7dsLTnHBRfUTB5Bek6VqIcJF2GyP/UrwNeCQKEO
Tg3JzeNkGBMYnBp8RhT+4ClC4jAQkcuPy8FsPjl/ae3DYhCyJMNtfwGhZLKCwEja
bY96FuDpAyAfSCRj2YdnI4Ti5jBbvrhqenuZ8DSp+sG0J04ObXZ5ANH2wXGKaITG
umO5GhVLy0t5+aZwU0GUWL2XQ8/EKb8cWTKPfzrbxwMuJacFm9X5fuJUujpqM+sd
M88v87hhQ47wZ90RYA==
-----END CERTIFICATE-----