Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146570.roa
File:                     AS146570.roa (raw, json)
Hash identifier:          Lhj1zV8YJ+1DY4KPFIlw5Mm481c589IfE2LcflhyRUQ=
Subject key identifier:   51:24:14:5F:32:A0:01:97:44:BC:69:93:D4:EE:13:8D:ED:69:89:01
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3AD7A00AFE74F7C032DD50FF457D1030C8434F2C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146570.roa
Signing time:             Fri 22 May 2026 06:28:08 +0000
ROA not before:           Fri 22 May 2026 06:23:08 +0000
ROA not after:            Fri 21 May 2027 06:28:08 +0000
asID:                     146570
IP address blocks:        240a:af50::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d7:a0:0a:fe:74:f7:c0:32:dd:50:ff:45:7d:10:30:c8:43:4f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:23:08 2026 GMT
            Not After : May 21 06:28:08 2027 GMT
        Subject: CN=5124145F32A0019744BC6993D4EE138DED698901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f9:cc:ae:97:5d:e9:42:43:c7:4f:17:93:69:
                    4b:06:4c:59:d3:fa:4e:e1:39:19:da:4c:ba:23:aa:
                    b4:05:c3:58:79:72:79:e8:ca:9d:0d:5a:61:80:fe:
                    0e:4f:04:59:d2:95:11:f5:53:77:d7:fb:61:43:69:
                    cd:97:09:ea:e3:75:5f:d4:27:dd:9e:65:b4:e8:d7:
                    e5:86:5b:ae:19:2e:07:e3:b8:e6:9b:1b:e9:1c:bb:
                    3a:31:70:22:73:a2:b3:8d:90:7d:71:0a:e4:33:e8:
                    7e:2c:ef:f3:21:bd:9b:fe:3d:4b:d4:e4:54:ca:a4:
                    d4:f7:0d:21:62:b5:2f:56:60:51:fd:34:31:5e:00:
                    0a:ad:7c:4c:91:98:96:82:b3:4e:bf:65:9b:bf:25:
                    0b:eb:0c:37:71:99:de:27:b8:de:18:d3:d5:04:45:
                    71:71:b8:ca:d1:15:97:3f:1f:4a:fe:c2:47:13:d0:
                    9f:8c:8e:43:69:c1:fd:66:23:15:ad:14:e6:c3:03:
                    d3:57:9f:60:bb:01:ee:78:cc:45:dd:38:f6:cf:a8:
                    66:6f:9f:ff:30:14:c5:e0:c5:14:a8:39:31:45:0c:
                    32:b9:74:c1:b5:5b:63:74:59:cc:40:9b:c0:4e:b3:
                    4d:ed:4c:1a:8b:7a:66:7e:83:a5:21:2f:cb:94:d2:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:24:14:5F:32:A0:01:97:44:BC:69:93:D4:EE:13:8D:ED:69:89:01
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146570.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af50::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:bd:b7:52:9e:df:0d:c7:31:58:62:2a:35:04:ea:0b:e0:e7:
         cb:46:3e:de:dd:e7:6a:37:7b:c6:66:f6:ef:1d:f2:80:22:7f:
         c7:ba:1e:7d:6b:7a:43:d6:2f:1e:12:af:35:14:80:00:4d:18:
         24:3d:12:b1:c8:83:eb:8a:92:57:9e:2a:69:d8:9c:e4:45:b7:
         93:3c:ba:99:9a:0b:74:2a:c3:65:d6:3e:72:f3:b3:b0:20:84:
         a8:5a:b1:cd:fb:4d:b8:fa:f8:a0:31:a7:54:bc:98:bc:38:85:
         94:73:19:25:15:7a:36:6f:51:08:ea:61:30:94:2d:a3:a1:b2:
         b1:9b:b9:35:76:5b:78:1a:66:bb:32:43:cc:51:82:ff:00:ec:
         76:6a:68:40:38:aa:60:c8:0e:8c:cb:8d:fa:94:d1:ec:7f:47:
         b0:87:a0:2b:0a:9f:36:9a:b6:63:63:53:48:d1:50:d4:49:8b:
         96:f0:4d:93:25:00:7e:b7:34:03:01:ab:92:e0:59:4a:20:1e:
         63:62:ec:aa:8e:1b:78:24:b4:2e:d9:a7:9c:54:73:6b:86:24:
         4c:22:1c:b6:9e:48:68:8a:e5:53:65:b3:cb:2b:18:4a:d0:0f:
         5b:ef:73:c8:e1:42:8b:cf:5d:fe:cc:42:34:85:c9:73:d6:09:
         68:b1:91:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----