Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146506.roa
File:                     AS146506.roa (raw, json)
Hash identifier:          84CvIJy1OA8+wlHKRWCGfh8KFJfHiCvHTTJcJs883d4=
Subject key identifier:   FB:C3:A2:D7:2D:58:D2:CA:F1:DD:AF:D4:7A:3D:3B:24:D9:6A:A8:9D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1B66A182DEA927624C1AD44522CF82EDE771FCD5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146506.roa
Signing time:             Fri 22 May 2026 06:05:36 +0000
ROA not before:           Fri 22 May 2026 06:00:36 +0000
ROA not after:            Fri 21 May 2027 06:05:36 +0000
asID:                     146506
IP address blocks:        240a:af10::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:66:a1:82:de:a9:27:62:4c:1a:d4:45:22:cf:82:ed:e7:71:fc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:36 2026 GMT
            Not After : May 21 06:05:36 2027 GMT
        Subject: CN=FBC3A2D72D58D2CAF1DDAFD47A3D3B24D96AA89D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:dd:2e:ce:96:e4:69:f7:47:fe:cb:fb:57:
                    6e:5d:b5:35:58:de:26:4c:f1:38:bb:85:c1:10:ae:
                    9e:69:35:ae:39:ce:a1:ab:5a:43:b8:fb:0c:89:02:
                    5d:67:20:cb:00:f8:87:86:bc:20:29:31:97:83:38:
                    97:09:de:b8:1b:83:9b:7e:94:28:f8:92:6c:fa:2d:
                    45:d8:e7:c9:41:98:8e:15:4b:aa:ee:8c:b1:62:f5:
                    d8:4d:57:ef:37:39:2d:c7:84:b1:f2:79:d6:0b:5a:
                    5c:90:ef:4c:f1:8b:b1:b8:91:52:05:f1:25:8e:05:
                    87:79:ce:94:0f:b1:d2:f7:76:e9:d3:32:83:93:b0:
                    ac:5d:0a:5a:72:86:67:3d:e5:fa:90:1b:09:26:cb:
                    d0:6d:7c:d5:4b:4a:b4:cb:b8:1d:50:c8:26:89:10:
                    db:b3:eb:95:c6:66:39:e2:a5:1e:94:df:ee:6b:1e:
                    09:25:1b:f9:dc:bc:de:52:27:fc:80:c9:16:b4:57:
                    0d:6e:1c:6d:17:9e:fb:52:6d:5e:59:20:9a:c1:ea:
                    8c:ff:fc:25:c6:94:17:6f:00:4e:93:1b:ad:78:5b:
                    02:90:62:40:c4:9b:6f:48:50:b2:53:09:94:70:cc:
                    df:85:69:8d:ad:7e:6b:4b:ff:1a:a7:d3:2d:b7:4d:
                    dd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C3:A2:D7:2D:58:D2:CA:F1:DD:AF:D4:7A:3D:3B:24:D9:6A:A8:9D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146506.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af10::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:53:f9:f8:5c:8c:6e:18:6c:32:53:57:f6:a8:08:01:95:98:
         71:65:cc:41:a3:06:4c:5f:c5:f3:35:e2:47:17:a7:3a:bd:8f:
         3f:6d:53:81:b0:68:e5:1a:14:3c:34:1b:c6:d4:16:c5:38:2a:
         fc:03:45:32:7e:dd:e1:41:36:60:c8:1e:0b:43:1c:d2:a0:aa:
         80:e9:58:a1:14:13:63:e5:24:a1:04:f6:9c:34:60:4b:59:43:
         1b:59:6b:35:c7:95:08:aa:c0:31:32:7a:f3:ab:37:67:12:e4:
         b0:fa:91:72:9d:c2:71:86:52:c7:eb:e7:9d:48:91:9b:dd:e7:
         57:6b:66:42:29:de:86:91:15:f2:56:71:8e:d0:d7:bd:c9:d1:
         55:1f:b1:13:5a:30:bf:ef:b1:36:75:31:44:2c:ce:39:a6:6b:
         30:6c:a4:54:d4:00:0c:4d:31:cd:19:48:9c:8c:ee:4a:c1:3e:
         32:b0:82:4a:06:e8:60:6c:30:a6:68:de:28:26:d3:1e:57:f6:
         9a:7e:3c:77:ae:25:23:5e:fa:9a:aa:3e:59:75:90:53:2c:62:
         e6:4a:50:89:f5:c4:36:26:c9:bc:78:50:13:06:45:bb:e9:5e:
         79:d1:e1:45:14:38:35:f7:6e:30:9a:f4:e6:a4:63:ef:eb:f2:
         0e:4f:6f:71
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUG2ahgt6pJ2JMGtRFIs+C7edx/NUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMzZaFw0yNzA1MjEwNjA1MzZaMDMxMTAvBgNV
BAMTKEZCQzNBMkQ3MkQ1OEQyQ0FGMUREQUZENDdBM0QzQjI0RDk2QUE4OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWbd0uzpbkafdH/sv7V25dtTVY
3iZM8Ti7hcEQrp5pNa45zqGrWkO4+wyJAl1nIMsA+IeGvCApMZeDOJcJ3rgbg5t+
lCj4kmz6LUXY58lBmI4VS6rujLFi9dhNV+83OS3HhLHyedYLWlyQ70zxi7G4kVIF
8SWOBYd5zpQPsdL3dunTMoOTsKxdClpyhmc95fqQGwkmy9BtfNVLSrTLuB1QyCaJ
ENuz65XGZjnipR6U3+5rHgklG/ncvN5SJ/yAyRa0Vw1uHG0XnvtSbV5ZIJrB6oz/
/CXGlBdvAE6TG614WwKQYkDEm29IULJTCZRwzN+FaY2tfmtL/xqn0y23Td3FAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU+8Oi1y1Y0srx3a/Uej07JNlqqJ0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTA2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvEDANBgkqhkiG9w0BAQsFAAOCAQEAWlP5
+FyMbhhsMlNX9qgIAZWYcWXMQaMGTF/F8zXiRxenOr2PP21TgbBo5RoUPDQbxtQW
xTgq/ANFMn7d4UE2YMgeC0Mc0qCqgOlYoRQTY+UkoQT2nDRgS1lDG1lrNceVCKrA
MTJ686s3ZxLksPqRcp3CcYZSx+vnnUiRm93nV2tmQinehpEV8lZxjtDXvcnRVR+x
E1owv++xNnUxRCzOOaZrMGykVNQADE0xzRlInIzuSsE+MrCCSgboYGwwpmjeKCbT
Hlf2mn48d64lI176mqo+WXWQUyxi5kpQifXENibJvHhQEwZFu+leedHhRRQ4Nfdu
MJr05qRj7+vyDk9vcQ==
-----END CERTIFICATE-----