Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146611.roa
File:                     AS146611.roa (raw, json)
Hash identifier:          UeXTElEARCosl+unNsVYerW5WTD61gOQ/w53NTQns3E=
Subject key identifier:   9A:86:34:A0:52:C6:85:F8:76:A9:40:6D:15:68:97:9C:1D:9B:7B:1E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       262620B15CCA7ED4042B7C2EF8865E907966EC57
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146611.roa
Signing time:             Fri 22 May 2026 07:41:24 +0000
ROA not before:           Fri 22 May 2026 07:36:24 +0000
ROA not after:            Fri 21 May 2027 07:41:24 +0000
asID:                     146611
IP address blocks:        240a:af79::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:26:20:b1:5c:ca:7e:d4:04:2b:7c:2e:f8:86:5e:90:79:66:ec:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:24 2026 GMT
            Not After : May 21 07:41:24 2027 GMT
        Subject: CN=9A8634A052C685F876A9406D1568979C1D9B7B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c6:dd:fb:f2:50:b9:c6:0e:a1:cb:e7:5a:bf:
                    b5:79:bd:87:0e:05:99:56:06:9b:79:09:a8:9b:dd:
                    d9:81:2c:f0:52:6c:a9:0a:3c:48:02:f2:27:5e:0a:
                    79:21:df:d4:53:a9:8e:15:47:79:89:93:50:30:ed:
                    02:90:90:d1:95:2d:81:e8:0e:58:ba:96:49:f5:7b:
                    f1:a9:3c:a1:46:87:2e:f8:e6:79:0a:47:81:41:14:
                    f4:1d:45:87:6a:cc:34:dd:a8:c7:a0:de:69:5e:18:
                    cd:bb:55:52:bf:90:7e:ae:bb:37:b5:36:c0:07:3a:
                    51:b0:f9:d4:5d:a3:10:e9:1d:46:ac:f4:2f:72:2e:
                    99:14:f4:9b:3e:20:86:fe:71:aa:b5:1c:f1:15:8a:
                    55:de:0e:d2:c8:ce:4b:30:4d:cb:20:ce:bd:f8:33:
                    7f:a2:56:9d:6a:09:5c:4c:e2:e7:c3:f1:9b:c8:53:
                    a9:b6:bc:93:f5:fa:b3:43:31:90:2d:5f:26:3f:10:
                    89:c5:f3:5d:26:1c:4c:c8:83:be:43:50:7a:d6:30:
                    2c:bd:ac:dd:43:ec:99:9a:59:75:b6:09:10:e5:b5:
                    ad:ff:d6:0b:df:6d:23:8f:49:44:bf:61:8a:88:d3:
                    34:52:84:9b:f1:e7:44:86:96:90:cc:a0:d5:be:e6:
                    de:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:86:34:A0:52:C6:85:F8:76:A9:40:6D:15:68:97:9C:1D:9B:7B:1E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146611.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af79::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:50:01:6e:49:30:e4:f1:07:e2:34:d4:93:0d:95:4f:03:0a:
         9c:49:ae:46:c8:2d:94:71:5f:43:af:a4:f3:bc:8d:d1:6a:a5:
         a9:5b:bc:b6:ad:a8:9d:0f:94:6c:81:6a:e1:cb:12:4e:0b:85:
         be:45:c5:0e:39:8c:89:8f:24:2c:02:03:a7:c3:b3:32:fd:de:
         79:1d:b3:39:88:79:d6:46:a3:c6:3d:16:72:ad:6e:11:90:6f:
         e7:d8:02:dc:dd:37:d9:d9:f0:6f:6a:7a:bd:46:92:aa:16:99:
         dc:df:df:a8:f8:b0:78:3f:01:cf:aa:8b:71:6b:8b:d9:83:d7:
         0b:d9:c3:86:1b:37:de:d9:d0:26:f0:13:88:f5:4d:5d:e6:2b:
         c7:ee:e9:46:ce:93:d9:9c:c6:25:5a:77:f6:bf:65:d5:c4:96:
         2a:1d:73:e6:0a:f8:6e:c6:8a:16:f7:c8:c0:b6:8a:f8:6c:ad:
         dc:c6:51:e5:e2:3c:ba:e9:b4:a5:f1:96:42:3e:6d:83:a3:43:
         05:46:3f:19:2a:29:33:96:a0:e8:38:7c:88:35:6d:dc:2b:cf:
         84:08:da:e1:fb:b7:37:f7:b5:e4:b3:fa:0f:96:46:65:a0:2e:
         02:e9:a5:1f:d5:4b:2e:23:57:26:3d:08:e2:73:02:24:f4:51:
         76:b7:4a:0a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJiYgsVzKftQEK3wu+IZekHlm7FcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM2MjRaFw0yNzA1MjEwNzQxMjRaMDMxMTAvBgNV
BAMTKDlBODYzNEEwNTJDNjg1Rjg3NkE5NDA2RDE1Njg5NzlDMUQ5QjdCMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfxt378lC5xg6hy+dav7V5vYcO
BZlWBpt5Caib3dmBLPBSbKkKPEgC8ideCnkh39RTqY4VR3mJk1Aw7QKQkNGVLYHo
Dli6lkn1e/GpPKFGhy745nkKR4FBFPQdRYdqzDTdqMeg3mleGM27VVK/kH6uuze1
NsAHOlGw+dRdoxDpHUas9C9yLpkU9Js+IIb+caq1HPEVilXeDtLIzkswTcsgzr34
M3+iVp1qCVxM4ufD8ZvIU6m2vJP1+rNDMZAtXyY/EInF810mHEzIg75DUHrWMCy9
rN1D7JmaWXW2CRDlta3/1gvfbSOPSUS/YYqI0zRShJvx50SGlpDMoNW+5t7rAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUmoY0oFLGhfh2qUBtFWiXnB2bex4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqveTANBgkqhkiG9w0BAQsFAAOCAQEAJ1AB
bkkw5PEH4jTUkw2VTwMKnEmuRsgtlHFfQ6+k87yN0WqlqVu8tq2onQ+UbIFq4csS
TguFvkXFDjmMiY8kLAIDp8OzMv3eeR2zOYh51kajxj0Wcq1uEZBv59gC3N032dnw
b2p6vUaSqhaZ3N/fqPiweD8Bz6qLcWuL2YPXC9nDhhs33tnQJvATiPVNXeYrx+7p
Rs6T2ZzGJVp39r9l1cSWKh1z5gr4bsaKFvfIwLaK+Gyt3MZR5eI8uum0pfGWQj5t
g6NDBUY/GSopM5ag6Dh8iDVt3CvPhAja4fu3N/e15LP6D5ZGZaAuAumlH9VLLiNX
Jj0I4nMCJPRRdrdKCg==
-----END CERTIFICATE-----