Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146593.roa
File:                     AS146593.roa (raw, json)
Hash identifier:          NYuL1K9jwu5Fb9L395624gKTawaLA6JgcjOxbVl2+F4=
Subject key identifier:   C3:A8:1E:1B:45:18:A7:7A:A2:FB:C2:10:35:6A:D1:68:0A:5C:D6:AA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       79A05ECC8546BC9AFD68B62D70CD880A43409397
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146593.roa
Signing time:             Mon 25 May 2026 06:49:14 +0000
ROA not before:           Mon 25 May 2026 06:44:14 +0000
ROA not after:            Mon 24 May 2027 06:49:14 +0000
asID:                     146593
IP address blocks:        240a:af67::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a0:5e:cc:85:46:bc:9a:fd:68:b6:2d:70:cd:88:0a:43:40:93:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:14 2026 GMT
            Not After : May 24 06:49:14 2027 GMT
        Subject: CN=C3A81E1B4518A77AA2FBC210356AD1680A5CD6AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:11:58:65:19:ef:a7:71:57:2f:21:d9:fb:
                    05:c8:63:6f:e9:1c:6c:61:e2:8d:79:dd:fc:ee:9f:
                    c6:ae:8e:ee:fe:8f:94:4f:c1:ba:09:c3:65:56:24:
                    5f:e8:20:67:e7:7b:2d:ac:b2:5e:d5:66:12:3a:c8:
                    c8:b1:69:6c:8a:17:08:4e:fe:67:05:6e:cc:7a:c9:
                    c3:1c:cd:29:3f:e5:53:20:8c:fb:5d:30:64:bf:63:
                    51:c8:56:b0:fb:cb:e6:7e:94:21:c1:9d:17:8d:db:
                    72:03:c1:77:cf:39:36:97:be:d3:e5:1b:8a:4b:6f:
                    c1:da:dc:36:74:82:50:0f:46:b4:05:ed:5e:cd:3b:
                    88:98:27:52:5a:f5:33:cd:0e:c9:34:ff:78:09:b1:
                    9a:e5:6b:f5:73:c2:e4:c6:70:d8:ed:71:1b:10:60:
                    2d:ea:ad:40:a4:ac:78:c4:df:d1:3a:53:88:4b:1c:
                    01:c5:14:ab:99:06:3a:8a:a2:e0:12:f8:1d:15:3b:
                    64:59:5a:7d:d0:cd:cb:de:b6:75:4e:77:92:49:69:
                    fc:69:bc:c2:86:98:c0:0a:49:1a:10:44:d9:f0:9d:
                    fb:5c:b7:58:43:87:cf:55:c1:20:75:1d:e9:28:82:
                    4b:71:50:07:ba:74:7c:44:f6:e8:c5:1e:52:cb:ce:
                    3c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A8:1E:1B:45:18:A7:7A:A2:FB:C2:10:35:6A:D1:68:0A:5C:D6:AA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146593.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af67::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:1a:8d:4e:bf:46:21:79:f9:61:40:d4:8b:a0:ac:37:86:62:
         08:74:67:a4:0c:67:8f:fb:04:62:07:51:88:a7:fe:34:d8:52:
         14:2e:a3:d6:d7:56:33:03:c7:ff:3e:25:c3:29:94:bd:17:db:
         8f:66:6f:21:93:0e:19:5c:3a:b2:7b:0c:ff:3e:c6:61:e2:b1:
         b5:28:ae:7d:b9:2f:0f:8f:ae:a0:d7:18:43:0d:89:75:df:ff:
         34:f1:e8:53:ab:7b:d2:79:73:e2:ec:c3:22:74:66:0b:12:ce:
         65:15:ba:c1:1c:3f:d1:41:c2:9a:58:75:c3:25:0d:31:f6:14:
         16:71:82:42:31:9d:b5:2c:64:8a:ff:d0:d2:7a:66:e3:60:51:
         a6:c6:7d:60:b4:f2:e6:08:0b:92:be:e1:11:08:bf:40:4a:ab:
         c3:41:b3:25:4f:b0:9c:07:45:a5:f7:1f:66:fc:34:aa:fa:d1:
         ae:df:66:d8:cb:dc:85:c0:ce:ac:6d:35:5b:08:a3:c8:d1:90:
         dc:31:05:d5:63:92:c5:d2:97:13:6a:66:49:c5:79:41:3a:0f:
         f5:d3:aa:ae:55:4f:61:b2:65:a1:a4:29:f0:e0:44:a5:a7:84:
         53:f4:e4:2a:e2:01:db:ae:fc:eb:91:c1:f9:2d:93:83:4a:38:
         cf:04:3f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----