Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146517.roa
File:                     AS146517.roa (raw, json)
Hash identifier:          eQI+V9DGgfHir01/eLiET0itsbwkCN/h+TZQiaxbB4E=
Subject key identifier:   8C:58:74:8E:74:E4:89:6C:81:00:09:8A:63:40:DE:5C:E4:BE:8F:F4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3BDF2BBCE4026C5F4700DF4339F23FC391775EE0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146517.roa
Signing time:             Fri 22 May 2026 07:08:48 +0000
ROA not before:           Fri 22 May 2026 07:03:48 +0000
ROA not after:            Fri 21 May 2027 07:08:48 +0000
asID:                     146517
IP address blocks:        240a:af1b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:df:2b:bc:e4:02:6c:5f:47:00:df:43:39:f2:3f:c3:91:77:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:48 2026 GMT
            Not After : May 21 07:08:48 2027 GMT
        Subject: CN=8C58748E74E4896C8100098A6340DE5CE4BE8FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:34:21:58:20:8a:69:cf:fc:3e:6b:7f:55:b5:
                    de:8a:47:d1:1a:ca:04:6c:04:fc:41:86:ba:fc:79:
                    51:7e:f6:52:2a:e7:a1:5d:3f:9c:d0:9d:fd:83:e8:
                    6f:ff:09:47:42:b8:ca:c4:58:38:d8:58:de:40:c9:
                    3e:78:5c:7d:48:91:d9:c4:56:6c:7b:77:39:68:40:
                    77:e0:58:4c:13:16:a6:44:d1:21:7b:1f:3a:c9:b9:
                    ea:12:74:c7:ee:c8:4b:b8:44:15:3c:51:02:21:c9:
                    6b:a0:d7:9b:71:9a:8e:35:64:96:12:b7:52:ca:f7:
                    96:a9:93:a7:e4:89:84:9d:6e:65:90:52:5a:8c:13:
                    17:b3:a6:5b:c4:ee:fa:33:71:ae:b6:ad:3e:a9:2f:
                    0c:d4:ca:35:73:4e:49:2a:72:88:ed:b2:51:ee:b6:
                    5e:d4:0c:44:ff:42:46:5d:3f:92:80:40:de:ac:3f:
                    57:20:53:72:82:3e:5b:c8:c1:bf:d8:26:c8:dd:96:
                    00:23:86:f5:91:e1:83:d1:e4:25:69:a1:f6:9c:7b:
                    85:6d:1d:b4:d3:ad:af:1d:82:b1:2d:d6:a2:00:38:
                    23:b4:fd:df:35:fe:77:7e:8f:d8:ce:35:9c:29:94:
                    5b:d1:dc:bb:67:89:91:37:66:e7:e3:0a:73:a9:e3:
                    e6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:58:74:8E:74:E4:89:6C:81:00:09:8A:63:40:DE:5C:E4:BE:8F:F4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146517.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af1b::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:9b:96:64:27:28:15:25:0a:a0:af:3a:7e:62:3c:08:a6:d9:
         6c:8c:e4:1b:a9:2d:9c:44:15:fc:4a:f2:50:83:59:9b:be:4b:
         6c:6b:1e:62:f4:60:30:23:d8:0e:3d:1f:25:f0:03:8b:b8:9f:
         f9:2c:4a:d7:16:65:8f:0d:81:f4:d3:09:45:79:93:4a:43:1e:
         53:33:e9:eb:b4:e6:71:1c:66:19:b6:d8:4d:9b:f0:79:f5:c0:
         6a:16:92:d8:3f:c0:b5:72:39:6f:b3:8b:02:51:93:da:45:a2:
         08:ea:cf:e8:3c:85:c3:bd:c5:2c:3d:c1:3b:55:73:fc:16:43:
         59:4f:6f:c6:e4:6d:6d:07:37:d0:bc:6f:a0:c4:48:63:bf:37:
         aa:6d:94:f4:12:52:58:4f:30:77:2b:7c:40:d6:01:7d:69:59:
         0a:8b:35:f0:1e:64:86:a1:18:68:e8:72:0a:6c:ae:e8:d9:30:
         46:35:e0:ec:3e:31:57:be:a6:ea:6d:73:54:31:c7:d8:28:89:
         b4:9b:85:94:88:af:f3:a3:cf:cd:12:07:fe:75:bd:d4:99:8c:
         c5:09:6e:c8:e3:bc:ed:0c:55:4d:07:7c:27:e0:99:90:18:1c:
         b6:3c:54:c4:3b:05:d5:dc:27:76:14:79:b8:72:3e:88:19:26:
         38:50:b5:d7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUO98rvOQCbF9HAN9DOfI/w5F3XuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNDhaFw0yNzA1MjEwNzA4NDhaMDMxMTAvBgNV
BAMTKDhDNTg3NDhFNzRFNDg5NkM4MTAwMDk4QTYzNDBERTVDRTRCRThGRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNCFYIIppz/w+a39Vtd6KR9Ea
ygRsBPxBhrr8eVF+9lIq56FdP5zQnf2D6G//CUdCuMrEWDjYWN5AyT54XH1IkdnE
Vmx7dzloQHfgWEwTFqZE0SF7HzrJueoSdMfuyEu4RBU8UQIhyWug15txmo41ZJYS
t1LK95apk6fkiYSdbmWQUlqMExezplvE7vozca62rT6pLwzUyjVzTkkqcojtslHu
tl7UDET/QkZdP5KAQN6sP1cgU3KCPlvIwb/YJsjdlgAjhvWR4YPR5CVpoface4Vt
HbTTra8dgrEt1qIAOCO0/d81/nd+j9jONZwplFvR3LtniZE3ZufjCnOp4+bFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUjFh0jnTkiWyBAAmKY0DeXOS+j/QwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvGzANBgkqhkiG9w0BAQsFAAOCAQEAApuW
ZCcoFSUKoK86fmI8CKbZbIzkG6ktnEQV/EryUINZm75LbGseYvRgMCPYDj0fJfAD
i7if+SxK1xZljw2B9NMJRXmTSkMeUzPp67TmcRxmGbbYTZvwefXAahaS2D/AtXI5
b7OLAlGT2kWiCOrP6DyFw73FLD3BO1Vz/BZDWU9vxuRtbQc30LxvoMRIY783qm2U
9BJSWE8wdyt8QNYBfWlZCos18B5khqEYaOhyCmyu6NkwRjXg7D4xV76m6m1zVDHH
2CiJtJuFlIiv86PPzRIH/nW91JmMxQluyOO87QxVTQd8J+CZkBgctjxUxDsF1dwn
dhR5uHI+iBkmOFC11w==
-----END CERTIFICATE-----