Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146617.roa
File:                     AS146617.roa (raw, json)
Hash identifier:          V0+/qOCkd9mLEdWBPzcHnSSlApfnXAiwaFBkVLaKWK4=
Subject key identifier:   6C:4A:1B:04:F7:E0:FB:95:80:2B:E4:8A:48:0B:07:34:6F:BF:45:57
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       14F25EECB171FD3D0812F0E204CD71D058B8DCA5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146617.roa
Signing time:             Mon 25 May 2026 02:22:12 +0000
ROA not before:           Mon 25 May 2026 02:17:12 +0000
ROA not after:            Mon 24 May 2027 02:22:12 +0000
asID:                     146617
IP address blocks:        240a:af7f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f2:5e:ec:b1:71:fd:3d:08:12:f0:e2:04:cd:71:d0:58:b8:dc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:12 2026 GMT
            Not After : May 24 02:22:12 2027 GMT
        Subject: CN=6C4A1B04F7E0FB95802BE48A480B07346FBF4557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:16:26:da:a5:f8:7c:2d:b7:5d:4a:5e:13:
                    e3:c0:1a:64:d5:1e:d3:2d:50:13:81:5e:e9:ae:9c:
                    bf:32:76:3c:5f:97:ea:6e:98:01:96:56:06:58:4e:
                    6f:f6:42:18:b7:2b:7d:6e:9a:f4:8f:4d:f4:9d:5e:
                    ca:d5:8a:9b:76:36:c1:8f:21:01:49:bd:03:97:05:
                    fa:5f:f3:91:63:cd:2f:0b:ea:b9:bc:a9:ed:53:de:
                    4e:26:a8:5d:30:02:67:c8:0f:f3:9f:db:0d:69:74:
                    c3:48:b9:2a:cd:2d:97:c7:d9:14:32:39:fa:04:c7:
                    29:f9:64:65:c6:49:50:77:fb:9c:74:71:0c:09:79:
                    60:5e:93:be:27:47:f8:31:cf:9d:dd:36:8c:e4:76:
                    08:f0:1f:dd:0e:16:73:96:2f:11:ab:83:66:48:2e:
                    2f:42:07:7a:f1:fe:72:ae:05:a1:f5:65:8d:af:c8:
                    17:da:0e:74:c9:51:25:a6:57:35:48:54:f0:a9:91:
                    46:33:b4:a6:d0:c3:97:57:e4:f9:64:f3:13:a3:6c:
                    35:6a:10:fb:8f:a3:9b:12:88:66:2e:20:9c:23:dc:
                    13:1b:24:9e:86:eb:39:0a:9f:64:a7:f8:b7:5a:7f:
                    14:96:7b:f6:f3:69:b0:b5:63:4a:b9:53:06:04:f6:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4A:1B:04:F7:E0:FB:95:80:2B:E4:8A:48:0B:07:34:6F:BF:45:57
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146617.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af7f::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:e8:84:d5:bd:f1:22:65:c1:78:fa:7b:cb:e0:b4:9e:1d:49:
         52:0e:3e:e4:06:fe:3d:42:61:dc:15:d6:fa:d7:ce:bd:66:8c:
         bf:02:3e:12:ab:e7:75:48:3c:db:6e:e2:ea:7f:cb:a0:fc:d8:
         a6:b9:a6:f7:7a:c6:71:d7:aa:db:75:98:83:e9:6b:75:a0:47:
         5b:68:d9:a9:82:a5:94:e0:38:87:35:a8:16:4e:41:bb:9f:26:
         fa:52:bc:75:bb:fd:ae:58:13:3b:52:8f:e3:6f:4d:8a:cc:2e:
         85:4e:07:25:65:16:e0:0a:3b:ec:1c:85:e3:bb:64:82:b4:93:
         ee:cc:7d:88:b3:1c:db:ff:ba:02:3b:45:07:fc:3f:58:0a:3b:
         27:c4:1d:b9:ff:5e:73:2e:d8:9c:0e:b7:e5:4e:44:b0:87:0b:
         c5:8e:3b:71:39:ea:6f:10:44:b7:80:23:60:a1:b0:97:93:3c:
         4c:ab:83:0f:5e:b3:88:9a:bd:b1:93:c6:08:07:8b:92:9b:eb:
         5e:9b:69:1f:dd:3f:b0:48:56:98:c5:80:b6:f4:a5:aa:a3:93:
         40:c3:52:a7:c4:7e:d0:e2:fd:37:90:bb:b8:2b:22:32:8b:c0:
         3a:cb:92:dc:48:ce:ea:8b:9c:d7:44:c9:dd:04:10:52:42:38:
         5e:a4:34:e3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFPJe7LFx/T0IEvDiBM1x0Fi43KUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MTJaFw0yNzA1MjQwMjIyMTJaMDMxMTAvBgNV
BAMTKDZDNEExQjA0RjdFMEZCOTU4MDJCRTQ4QTQ4MEIwNzM0NkZCRjQ1NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkhYm2qX4fC23XUpeE+PAGmTV
HtMtUBOBXumunL8ydjxfl+pumAGWVgZYTm/2Qhi3K31umvSPTfSdXsrVipt2NsGP
IQFJvQOXBfpf85FjzS8L6rm8qe1T3k4mqF0wAmfID/Of2w1pdMNIuSrNLZfH2RQy
OfoExyn5ZGXGSVB3+5x0cQwJeWBek74nR/gxz53dNozkdgjwH90OFnOWLxGrg2ZI
Li9CB3rx/nKuBaH1ZY2vyBfaDnTJUSWmVzVIVPCpkUYztKbQw5dX5Plk8xOjbDVq
EPuPo5sSiGYuIJwj3BMbJJ6G6zkKn2Sn+LdafxSWe/bzabC1Y0q5UwYE9habAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbEobBPfg+5WAK+SKSAsHNG+/RVcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvfzANBgkqhkiG9w0BAQsFAAOCAQEAMOiE
1b3xImXBePp7y+C0nh1JUg4+5Ab+PUJh3BXW+tfOvWaMvwI+EqvndUg8227i6n/L
oPzYprmm93rGcdeq23WYg+lrdaBHW2jZqYKllOA4hzWoFk5Bu58m+lK8dbv9rlgT
O1KP429NiswuhU4HJWUW4Ao77ByF47tkgrST7sx9iLMc2/+6AjtFB/w/WAo7J8Qd
uf9ecy7YnA635U5EsIcLxY47cTnqbxBEt4AjYKGwl5M8TKuDD16ziJq9sZPGCAeL
kpvrXptpH90/sEhWmMWAtvSlqqOTQMNSp8R+0OL9N5C7uCsiMovAOsuS3EjO6ouc
10TJ3QQQUkI4XqQ04w==
-----END CERTIFICATE-----