Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146531.roa
File:                     AS146531.roa (raw, json)
Hash identifier:          rLRmMKWudwS19UsEJSO9cDkLycRagPxvX9H1F2I71Z0=
Subject key identifier:   B4:F8:5C:22:2C:E5:21:E4:AA:23:0F:87:F1:29:7E:63:52:54:6C:8F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       54818022FA6F98E4A134B27167F5AF742B11F268
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146531.roa
Signing time:             Mon 25 May 2026 06:28:11 +0000
ROA not before:           Mon 25 May 2026 06:23:11 +0000
ROA not after:            Mon 24 May 2027 06:28:11 +0000
asID:                     146531
IP address blocks:        240a:af29::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:81:80:22:fa:6f:98:e4:a1:34:b2:71:67:f5:af:74:2b:11:f2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:11 2026 GMT
            Not After : May 24 06:28:11 2027 GMT
        Subject: CN=B4F85C222CE521E4AA230F87F1297E6352546C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:2d:47:6a:4c:f3:fb:b2:8c:a3:bf:12:8a:
                    91:b8:ca:aa:33:aa:e4:dc:06:00:ef:b2:96:19:5f:
                    dc:51:0b:c0:35:67:f1:a6:62:64:cd:0c:4a:ea:ff:
                    04:98:2a:38:43:ca:e7:be:7e:a8:2a:14:8e:39:a0:
                    db:75:ba:09:10:6f:61:41:06:89:21:bd:fd:32:67:
                    1d:5f:0d:c7:cb:8c:fb:a0:8e:44:6c:22:b5:61:62:
                    1f:fa:44:69:b0:42:8d:1e:6a:c0:a2:8d:42:fd:22:
                    fe:e2:6e:7e:42:1a:07:49:ad:e0:d9:4d:44:04:f5:
                    60:9c:73:00:86:75:8c:d2:50:15:ea:68:d8:37:45:
                    bc:f0:e7:79:fb:1b:8a:8b:19:47:e6:50:62:77:c2:
                    cf:fc:2f:d0:6e:a6:50:78:40:ea:27:d0:28:71:10:
                    56:5c:45:c4:18:de:e3:17:f6:bb:86:c8:6c:d9:6d:
                    12:8f:f0:47:bd:73:23:6c:c6:33:9b:a6:06:1e:8d:
                    b7:42:41:b3:fc:b7:64:8b:f2:00:3f:3a:33:c9:7e:
                    81:89:23:f0:32:02:c3:92:a1:1d:da:4c:f1:d6:16:
                    02:09:03:ac:ed:2b:f9:03:2e:e8:78:82:ff:4d:73:
                    4b:a4:64:3d:cf:a4:c6:83:61:28:3e:43:c9:d2:72:
                    4d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F8:5C:22:2C:E5:21:E4:AA:23:0F:87:F1:29:7E:63:52:54:6C:8F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af29::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:9b:1c:60:8c:bd:f9:25:3c:4d:28:83:56:50:73:21:9f:8a:
         02:f8:70:f0:12:c1:ec:a0:de:e6:5e:b7:ae:2f:fe:b7:b0:ae:
         68:c3:5b:30:34:42:bb:6b:c7:c9:f6:1e:e4:26:99:f7:7e:f3:
         5d:59:67:46:b5:d5:4e:7f:c3:45:1b:09:82:09:87:69:13:fe:
         df:f0:88:e9:99:25:f3:f1:97:c6:b6:f3:c6:09:8c:7f:78:9b:
         34:51:c5:bd:ad:4f:97:58:9a:7f:2b:8a:b6:07:db:7f:9a:78:
         70:02:48:3f:2f:f0:44:ca:78:3e:a5:55:93:d5:0a:99:7e:4c:
         88:bc:f9:cb:be:8e:b4:39:16:b7:c0:33:ec:b0:c0:ae:52:3d:
         57:11:a2:4a:a6:b0:5a:50:0b:fc:e0:9f:a9:6c:f9:32:a9:f5:
         6c:02:c7:61:ff:d7:0c:a0:13:7e:0e:7e:15:48:e6:93:e1:f7:
         d7:e2:78:21:a5:2b:d4:04:86:8a:4c:f1:d7:0f:a4:53:67:f7:
         21:bd:1a:10:cb:11:6e:de:47:ef:10:3f:93:3f:c1:47:2b:f2:
         a2:88:39:72:bb:ca:fd:9a:b5:e1:6c:bb:37:d4:ba:e8:8d:d9:
         3d:06:23:b3:40:05:99:bc:82:73:47:f1:3b:b6:2f:a8:d1:0c:
         f4:02:c1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----