Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146577.roa
File:                     AS146577.roa (raw, json)
Hash identifier:          0n7XOMfac/uE98R1pDseU6ruiau/2GsxQLGVB3CUjFA=
Subject key identifier:   4B:2C:60:A2:64:25:18:5D:9A:7E:45:34:E1:A0:72:52:B5:EE:EB:3A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2C735E9759D10AD08885D2FF4EFD13A06A563536
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146577.roa
Signing time:             Fri 22 May 2026 04:08:05 +0000
ROA not before:           Fri 22 May 2026 04:03:05 +0000
ROA not after:            Fri 21 May 2027 04:08:05 +0000
asID:                     146577
IP address blocks:        240a:af57::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:73:5e:97:59:d1:0a:d0:88:85:d2:ff:4e:fd:13:a0:6a:56:35:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:05 2026 GMT
            Not After : May 21 04:08:05 2027 GMT
        Subject: CN=4B2C60A26425185D9A7E4534E1A07252B5EEEB3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:51:16:9b:29:ca:94:f8:f3:31:44:07:d2:3e:
                    c2:32:1e:66:e9:ca:35:c1:f4:ab:a1:6d:1c:cf:0b:
                    52:2a:6f:a6:34:5f:5e:d2:2d:3b:f8:60:a0:bd:e7:
                    ce:12:9e:a2:22:2e:a0:ac:c3:8f:93:bc:12:cf:1a:
                    07:01:dc:4a:7a:a1:fb:e1:1f:9d:75:1b:ee:20:74:
                    02:9f:ff:b4:6d:5b:8b:64:2a:dd:51:6d:97:67:af:
                    3b:0d:d7:a9:33:39:e9:82:06:ef:2f:1f:59:68:97:
                    49:c5:66:0b:e0:c4:76:2e:25:d2:b1:2c:ec:30:31:
                    6b:f7:29:01:c3:ad:1b:ba:80:18:19:c9:6f:80:5c:
                    d5:dc:7e:7a:8e:22:05:4e:be:33:06:58:c1:75:44:
                    89:95:ba:15:6f:6c:60:8f:54:fc:0b:19:27:d9:49:
                    2f:65:df:0b:ea:3b:f2:3f:35:64:0b:9b:42:b6:13:
                    f2:9e:a3:54:25:82:ee:41:07:c1:9f:43:3b:86:58:
                    58:de:ea:60:23:6a:f8:f9:9d:2e:01:33:f0:52:41:
                    58:aa:2b:a8:57:b7:30:5c:90:d5:20:3f:c9:bf:56:
                    ec:20:f0:81:79:9b:9c:44:8c:5d:ca:17:57:34:75:
                    0b:1c:54:73:85:4b:65:8e:4b:c5:69:34:9a:96:9f:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2C:60:A2:64:25:18:5D:9A:7E:45:34:E1:A0:72:52:B5:EE:EB:3A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146577.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af57::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:fb:ef:e3:46:95:74:56:56:9a:0b:52:52:a4:0e:66:89:b0:
         3a:bb:ea:48:20:ee:8b:67:eb:12:98:13:37:b7:0f:3d:0c:86:
         36:d6:97:22:2d:34:b2:24:fc:e5:94:bc:29:6e:37:eb:0f:47:
         b7:f5:75:94:70:c5:bb:21:dd:26:33:e2:79:d5:8b:f4:f6:c0:
         a9:62:33:bd:11:c1:98:1d:89:90:e5:91:44:71:90:f4:00:59:
         2d:40:3a:b4:31:8c:f6:07:df:ee:9e:0d:1b:c6:20:82:ad:64:
         00:42:8e:64:0d:f9:17:79:b2:31:7a:64:85:2a:68:d3:72:ef:
         07:31:bf:61:b7:31:c3:2c:a1:16:e3:77:a8:70:e0:77:ba:a1:
         b8:fb:09:f9:41:e4:c2:77:2e:6f:5e:a9:94:3e:a2:65:f9:05:
         ac:ff:97:38:aa:2d:6b:7f:7c:3b:ea:00:e8:3e:1a:ab:21:4c:
         37:a2:ec:83:77:a7:4a:11:db:e5:ea:dc:59:6b:4c:04:84:93:
         e7:bf:f8:81:35:d0:64:d3:96:cc:bc:d1:66:8e:f2:45:cc:78:
         58:91:31:37:15:75:6b:d6:37:ce:09:7b:f3:61:31:6b:20:fd:
         df:aa:c0:7f:d4:71:22:3b:5b:2c:1f:95:74:09:c0:17:90:cd:
         2d:39:40:d3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULHNel1nRCtCIhdL/Tv0ToGpWNTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMDVaFw0yNzA1MjEwNDA4MDVaMDMxMTAvBgNV
BAMTKDRCMkM2MEEyNjQyNTE4NUQ5QTdFNDUzNEUxQTA3MjUyQjVFRUVCM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiURabKcqU+PMxRAfSPsIyHmbp
yjXB9KuhbRzPC1Iqb6Y0X17SLTv4YKC9584SnqIiLqCsw4+TvBLPGgcB3Ep6ofvh
H511G+4gdAKf/7RtW4tkKt1RbZdnrzsN16kzOemCBu8vH1lol0nFZgvgxHYuJdKx
LOwwMWv3KQHDrRu6gBgZyW+AXNXcfnqOIgVOvjMGWMF1RImVuhVvbGCPVPwLGSfZ
SS9l3wvqO/I/NWQLm0K2E/Keo1Qlgu5BB8GfQzuGWFje6mAjavj5nS4BM/BSQViq
K6hXtzBckNUgP8m/Vuwg8IF5m5xEjF3KF1c0dQscVHOFS2WOS8VpNJqWn4C1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUSyxgomQlGF2afkU04aByUrXu6zowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTc3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvVzANBgkqhkiG9w0BAQsFAAOCAQEAF/vv
40aVdFZWmgtSUqQOZomwOrvqSCDui2frEpgTN7cPPQyGNtaXIi00siT85ZS8KW43
6w9Ht/V1lHDFuyHdJjPiedWL9PbAqWIzvRHBmB2JkOWRRHGQ9ABZLUA6tDGM9gff
7p4NG8Yggq1kAEKOZA35F3myMXpkhSpo03LvBzG/YbcxwyyhFuN3qHDgd7qhuPsJ
+UHkwncub16plD6iZfkFrP+XOKota398O+oA6D4aqyFMN6Lsg3enShHb5ercWWtM
BIST57/4gTXQZNOWzLzRZo7yRcx4WJExNxV1a9Y3zgl782ExayD936rAf9RxIjtb
LB+VdAnAF5DNLTlA0w==
-----END CERTIFICATE-----