Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146659.roa
File:                     AS146659.roa (raw, json)
Hash identifier:          E6d8nklSYuhsZDSnbq1vKVGp33d3phSn4l1zuX8vex4=
Subject key identifier:   7A:C0:F4:9B:DC:85:B6:2D:2A:74:8E:97:D0:61:BD:FF:36:5C:8E:6E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2B35B0ECCF92349E64A162EDC7D0A7DEDAED28FB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146659.roa
Signing time:             Fri 22 May 2026 07:08:44 +0000
ROA not before:           Fri 22 May 2026 07:03:44 +0000
ROA not after:            Fri 21 May 2027 07:08:44 +0000
asID:                     146659
IP address blocks:        240a:afa9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:35:b0:ec:cf:92:34:9e:64:a1:62:ed:c7:d0:a7:de:da:ed:28:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:44 2026 GMT
            Not After : May 21 07:08:44 2027 GMT
        Subject: CN=7AC0F49BDC85B62D2A748E97D061BDFF365C8E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:9e:c8:16:84:cf:d5:63:65:12:85:e6:3d:
                    ff:a0:81:bb:d9:b0:f3:b2:2b:f9:22:10:d7:79:eb:
                    78:68:17:e6:43:b4:bb:1c:c9:72:43:e5:11:6d:ce:
                    63:cb:50:36:5d:b9:b2:9d:a4:11:13:be:f3:e1:b6:
                    1c:f7:5a:18:ac:1b:8c:45:f1:e1:d6:b9:e8:89:79:
                    c1:cc:5c:b6:7e:58:2a:3d:73:6b:fd:54:bb:78:67:
                    8d:18:76:9a:e5:25:94:3e:16:2a:98:ad:cc:a8:bb:
                    fc:6f:ed:ea:ba:9e:f6:47:95:62:01:38:f9:44:2a:
                    2f:7a:f8:35:63:c4:24:38:54:a9:14:eb:f2:58:22:
                    cb:bd:62:17:28:87:12:45:7b:ef:62:9e:df:52:3d:
                    aa:ba:b9:53:a9:bb:f4:59:8c:6b:df:3a:f9:e1:67:
                    8f:5a:6e:72:96:fe:a6:9f:4c:4d:aa:62:ac:24:d7:
                    11:2f:de:1f:73:2e:54:1c:ec:d6:e1:00:17:6f:1e:
                    a9:15:37:12:9a:88:98:ac:9f:7f:c1:f0:41:ff:86:
                    a9:0d:06:75:54:8c:43:b0:ed:7e:48:ae:12:dc:30:
                    f5:f7:67:bd:62:69:3d:7b:cc:a4:ad:cf:05:b0:dd:
                    a5:9e:43:bd:d6:2a:b5:90:57:4f:4c:3e:b2:a7:2b:
                    71:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C0:F4:9B:DC:85:B6:2D:2A:74:8E:97:D0:61:BD:FF:36:5C:8E:6E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146659.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afa9::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:ed:26:69:b1:dd:8d:53:e5:92:73:ca:e3:33:99:de:e9:e6:
         23:2a:20:65:15:58:b6:ee:00:9f:29:27:87:ab:79:3a:67:9e:
         20:42:c3:0c:a9:f2:a2:ba:21:80:d3:ee:c0:33:bc:a9:dc:8d:
         1a:7a:4b:dd:64:6d:3b:1c:49:0d:52:38:e7:b7:a1:4c:24:6e:
         7a:23:bd:07:19:c6:0e:6f:7e:2c:ca:45:19:9f:92:e9:a3:98:
         e5:2f:4e:38:44:ce:2f:be:e0:a6:c3:c2:58:0f:7c:1a:32:61:
         e1:8c:3c:ee:3c:02:68:9a:6b:be:6a:7a:30:84:2b:c3:33:a7:
         6f:dc:d3:d8:47:39:b7:5f:b7:1f:a0:f6:37:c5:09:e7:74:b8:
         fa:6c:52:35:1c:ff:9e:6f:02:4d:c5:ff:20:87:d5:88:dc:da:
         ce:68:80:e4:88:40:53:37:1e:b2:d6:29:f4:ad:8f:66:8b:16:
         c0:8b:a4:f3:6b:c5:55:24:c6:af:65:82:2e:19:d9:ab:06:f5:
         ab:46:45:6c:5d:40:c7:f2:8d:bf:fc:23:27:5a:24:d2:c5:66:
         73:b1:65:c8:62:78:37:82:93:20:8a:a5:07:50:78:e5:66:f4:
         7d:7b:24:da:7b:ca:56:97:7c:68:5c:0f:d7:56:8e:94:16:87:
         c3:c2:9a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----