Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146657.roa
File:                     AS146657.roa (raw, json)
Hash identifier:          a6FZaRyw/lq8GHVOQ/2T6czjEZnPp8iZcGyZmFJR5UE=
Subject key identifier:   51:EE:99:5D:17:56:A9:9A:80:8F:E9:C9:B9:CF:6E:57:21:04:30:DD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       446CCC069D1A4C508A1E6657358DBA74693526F5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146657.roa
Signing time:             Mon 25 May 2026 01:20:33 +0000
ROA not before:           Mon 25 May 2026 01:15:33 +0000
ROA not after:            Mon 24 May 2027 01:20:33 +0000
asID:                     146657
IP address blocks:        240a:afa7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6c:cc:06:9d:1a:4c:50:8a:1e:66:57:35:8d:ba:74:69:35:26:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:33 2026 GMT
            Not After : May 24 01:20:33 2027 GMT
        Subject: CN=51EE995D1756A99A808FE9C9B9CF6E57210430DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fb:fe:47:f7:6d:f3:65:00:f0:3f:a7:e1:75:
                    37:8c:d2:a8:ec:d0:c8:ae:86:b4:51:97:90:1c:16:
                    57:51:f4:90:9a:70:52:92:35:37:ca:5e:74:e5:3e:
                    7e:b2:0a:0a:3d:f4:d2:e3:e0:21:c8:63:92:5a:0a:
                    1d:6f:ee:e6:4b:57:0b:26:eb:64:69:d0:7d:ba:f2:
                    5c:43:db:9d:bd:6c:6b:1e:61:66:70:9c:a4:b6:08:
                    b0:6b:6a:28:b3:21:8f:60:9d:fc:af:e9:17:a0:a3:
                    db:81:ac:74:60:d8:61:48:b9:8e:c4:03:1c:d0:10:
                    d2:6e:9f:7c:f7:24:e4:f8:05:5c:e2:d2:18:de:9b:
                    36:e8:4f:cc:97:1e:ad:7d:e3:ed:a0:bc:7c:ac:fc:
                    55:ef:1c:8c:5e:cf:11:52:3c:e8:01:28:78:dc:ca:
                    98:d1:3b:1e:a1:40:41:c1:c8:12:d4:5f:27:8d:72:
                    e8:3c:f6:ab:01:86:a1:6d:a4:de:6e:42:0e:66:aa:
                    cc:49:6d:4e:d1:53:f5:e7:97:02:39:25:e0:5b:37:
                    a8:90:9e:6b:37:8b:d3:dc:0d:84:4d:a0:77:fd:1f:
                    db:38:fa:5a:aa:6d:a4:7a:a7:26:f5:db:1a:18:7f:
                    95:e0:0f:df:ab:25:17:dd:99:9c:8e:61:bb:02:ca:
                    ad:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EE:99:5D:17:56:A9:9A:80:8F:E9:C9:B9:CF:6E:57:21:04:30:DD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146657.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afa7::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:10:e4:4e:3b:92:85:ea:a2:be:d7:5b:86:bf:b7:81:b6:93:
         60:c0:de:01:e5:52:ff:cd:95:6e:ae:cd:f4:78:e0:55:ee:0d:
         b3:ce:46:b7:3e:62:95:0a:c0:2b:ba:d0:13:3e:2b:ce:43:f8:
         10:46:05:14:15:05:ab:6c:49:1e:19:b8:a3:4d:34:d8:f1:23:
         3d:ff:74:87:d4:78:b3:e6:df:dd:ec:87:5f:55:c0:9d:6e:d6:
         91:b0:22:39:03:bb:69:b7:a7:2c:df:89:a5:57:c4:7f:7b:99:
         07:fb:2b:2e:e1:7e:cf:94:7e:40:06:c1:8a:e0:55:7c:71:6d:
         2c:3b:af:53:eb:fe:02:0c:b7:31:85:c5:ff:7f:1a:62:d5:5a:
         3c:11:18:d1:1b:fe:a6:6d:13:06:b9:bb:fb:16:63:0b:67:78:
         0f:21:6e:b8:aa:5d:f4:c8:fd:3d:20:c7:ce:78:86:46:56:a3:
         ac:ba:e9:f6:f8:bd:65:dc:9c:6e:15:c4:e6:91:8a:6b:c4:57:
         88:60:03:4f:fd:1a:33:9c:fb:a9:2f:84:d9:19:ac:5e:0f:a3:
         de:9b:70:2f:7d:10:fa:3d:0f:f5:7c:e3:32:e0:92:b6:50:22:
         25:4d:6e:c9:09:45:e1:a8:0f:05:6a:4b:d8:57:1c:6a:60:7b:
         f1:cb:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----