Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146559.roa
File:                     AS146559.roa (raw, json)
Hash identifier:          qJTU9EtdFnhQyuHXoIfVg5xh30dU41wq8rEqfbciLyk=
Subject key identifier:   7E:FF:60:99:23:EC:CD:14:3D:02:8E:3E:70:41:EA:38:92:2A:D9:40
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       56E84CC1F66872537BC607327CE88C51B40E6739
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146559.roa
Signing time:             Mon 25 May 2026 06:28:30 +0000
ROA not before:           Mon 25 May 2026 06:23:30 +0000
ROA not after:            Mon 24 May 2027 06:28:30 +0000
asID:                     146559
IP address blocks:        240a:af45::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e8:4c:c1:f6:68:72:53:7b:c6:07:32:7c:e8:8c:51:b4:0e:67:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:30 2026 GMT
            Not After : May 24 06:28:30 2027 GMT
        Subject: CN=7EFF609923ECCD143D028E3E7041EA38922AD940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:4b:d4:9a:bb:89:8a:46:e6:9a:53:ef:c1:
                    33:17:26:cc:f1:0d:07:e1:14:0f:0d:8f:14:11:86:
                    6b:56:8d:28:81:2a:a0:65:d8:b4:f3:2a:45:04:b6:
                    ea:d5:77:4c:50:f8:46:ae:c8:2a:b9:6f:6a:06:25:
                    b7:19:cc:e4:2a:96:6c:cb:bb:96:a8:33:35:9f:d2:
                    8b:cc:15:a2:82:ee:5a:ab:eb:72:5f:8a:1e:9f:59:
                    88:a4:2c:c6:2b:8c:af:d3:cd:86:71:13:5c:e8:e9:
                    c1:c5:1b:0a:18:3b:16:01:44:52:e9:81:cc:68:91:
                    f9:a4:ac:68:4e:96:01:aa:bf:25:95:71:89:b1:71:
                    f3:f4:90:18:66:4e:8d:54:ec:40:42:7d:8f:57:21:
                    e5:a3:6c:94:fd:b2:1d:6e:fa:dd:8e:72:63:92:2a:
                    8c:42:5a:ea:a7:d6:f9:ea:9e:5c:a6:a7:94:51:17:
                    56:74:ab:e5:cd:31:c2:f3:b3:f2:45:4e:e2:c3:ca:
                    27:ec:7e:1a:e1:3b:a7:c1:db:96:cc:bf:e5:a6:42:
                    14:34:41:df:04:97:47:49:d8:e5:b0:e0:0a:9c:57:
                    f0:65:93:ab:8f:d5:9c:c1:7b:73:9d:10:f2:c7:63:
                    05:90:b5:b9:2e:df:f4:dd:45:12:7a:f3:9f:0e:f7:
                    6f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FF:60:99:23:EC:CD:14:3D:02:8E:3E:70:41:EA:38:92:2A:D9:40
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146559.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af45::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:86:9d:35:1c:a6:66:09:81:37:b9:f4:53:46:d3:53:1e:ac:
         cd:dc:ce:93:82:47:f8:31:b9:68:e5:36:9d:53:af:3f:27:d6:
         7b:37:ff:c6:69:56:2d:7f:81:5b:71:02:2a:65:dc:c7:69:65:
         c6:c9:7f:a3:29:80:30:9c:63:28:5b:5d:75:02:a9:34:4a:05:
         58:ac:8e:75:12:13:39:5e:47:8e:f5:31:02:36:59:03:29:d2:
         b8:e0:e7:17:ec:cf:dd:1a:d9:59:99:cb:85:93:af:fc:bf:bc:
         f8:59:06:42:ab:ba:db:eb:d9:18:91:80:ef:89:33:fd:13:2d:
         aa:26:97:11:ac:74:ac:91:24:f0:ae:d5:c8:ae:66:2d:90:ee:
         ab:d4:9d:fc:b6:72:15:01:7f:cd:2b:b6:6e:36:0a:85:6f:b4:
         b1:6f:26:29:9d:ff:ec:8e:4e:d7:dd:e6:11:27:75:5e:9c:f6:
         a5:99:08:8b:bc:3e:44:63:bc:5a:cb:64:0a:4f:98:68:56:93:
         b9:78:6f:f2:15:87:a9:f5:73:3b:ae:46:e7:6f:24:f7:e1:5d:
         bf:b6:2b:dc:7f:3f:a2:9d:c5:62:69:6f:66:1d:2e:1c:e0:d6:
         c8:cd:9d:ed:7f:7f:24:67:d2:61:e7:e0:3e:d9:b5:5e:b0:1c:
         94:ab:e5:6d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVuhMwfZoclN7xgcyfOiMUbQOZzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMzBaFw0yNzA1MjQwNjI4MzBaMDMxMTAvBgNV
BAMTKDdFRkY2MDk5MjNFQ0NEMTQzRDAyOEUzRTcwNDFFQTM4OTIyQUQ5NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/50vUmruJikbmmlPvwTMXJszx
DQfhFA8NjxQRhmtWjSiBKqBl2LTzKkUEturVd0xQ+EauyCq5b2oGJbcZzOQqlmzL
u5aoMzWf0ovMFaKC7lqr63Jfih6fWYikLMYrjK/TzYZxE1zo6cHFGwoYOxYBRFLp
gcxokfmkrGhOlgGqvyWVcYmxcfP0kBhmTo1U7EBCfY9XIeWjbJT9sh1u+t2OcmOS
KoxCWuqn1vnqnlymp5RRF1Z0q+XNMcLzs/JFTuLDyifsfhrhO6fB25bMv+WmQhQ0
Qd8El0dJ2OWw4AqcV/Blk6uP1ZzBe3OdEPLHYwWQtbku3/TdRRJ6858O92+NAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUfv9gmSPszRQ9Ao4+cEHqOJIq2UAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvRTANBgkqhkiG9w0BAQsFAAOCAQEAPIad
NRymZgmBN7n0U0bTUx6szdzOk4JH+DG5aOU2nVOvPyfWezf/xmlWLX+BW3ECKmXc
x2llxsl/oymAMJxjKFtddQKpNEoFWKyOdRITOV5HjvUxAjZZAynSuODnF+zP3RrZ
WZnLhZOv/L+8+FkGQqu62+vZGJGA74kz/RMtqiaXEax0rJEk8K7VyK5mLZDuq9Sd
/LZyFQF/zSu2bjYKhW+0sW8mKZ3/7I5O193mESd1Xpz2pZkIi7w+RGO8WstkCk+Y
aFaTuXhv8hWHqfVzO65G528k9+Fdv7Yr3H8/op3FYmlvZh0uHODWyM2d7X9/JGfS
YefgPtm1XrAclKvlbQ==
-----END CERTIFICATE-----