Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146661.roa
File:                     AS146661.roa (raw, json)
Hash identifier:          NHb5hmVyHzUR8j1ogHzVUs+WguKCw9c7PzCNcMsXVU0=
Subject key identifier:   26:C2:EE:CB:64:60:D0:B2:FC:D2:60:56:99:09:BF:3F:18:34:A3:C5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       74926E7E7786AA34477FFA051A201CF4983C4121
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146661.roa
Signing time:             Tue 26 May 2026 06:31:00 +0000
ROA not before:           Tue 26 May 2026 06:26:00 +0000
ROA not after:            Tue 25 May 2027 06:31:00 +0000
asID:                     146661
IP address blocks:        240a:afab::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:92:6e:7e:77:86:aa:34:47:7f:fa:05:1a:20:1c:f4:98:3c:41:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:26:00 2026 GMT
            Not After : May 25 06:31:00 2027 GMT
        Subject: CN=26C2EECB6460D0B2FCD260569909BF3F1834A3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:61:30:f9:16:97:5a:21:71:da:47:f7:5a:02:
                    04:6f:af:e1:0e:e6:da:24:68:ad:d4:75:c9:b3:45:
                    63:0a:fa:6c:44:4e:8b:3c:a4:76:0f:67:9f:74:33:
                    99:f8:30:ef:4f:45:ce:77:dd:7e:59:e0:7f:ec:5c:
                    ff:82:a5:e7:c1:ad:dc:68:4f:e6:3d:0c:8d:94:9c:
                    00:79:bc:f1:b0:fa:7a:03:01:1d:b3:59:cf:52:61:
                    92:ed:de:06:6d:3f:26:54:fc:5f:e5:18:a6:2e:1e:
                    49:6e:bc:fc:28:45:49:0d:42:8a:7b:88:61:de:f3:
                    3f:12:0f:54:40:5c:f6:ea:ed:13:60:7b:c3:0e:a3:
                    0d:96:e3:30:55:a9:64:d7:07:9e:f4:34:b1:dd:a4:
                    95:49:92:2b:6c:5e:dc:22:32:c6:cc:30:14:b6:d3:
                    a7:ee:1b:be:3c:d6:8a:83:5e:3a:2e:4d:cc:7d:3e:
                    65:71:ae:76:37:a6:39:b8:a9:85:47:6d:d6:25:ed:
                    94:fa:58:42:65:23:2d:23:9c:bb:a0:20:c0:6a:21:
                    0e:34:4f:2b:02:56:55:25:3e:60:51:4a:49:42:39:
                    36:5c:ff:4c:60:66:26:50:72:4c:50:be:29:2c:93:
                    6a:76:2a:b1:69:fe:e5:0c:75:7d:77:4e:52:fe:29:
                    5f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C2:EE:CB:64:60:D0:B2:FC:D2:60:56:99:09:BF:3F:18:34:A3:C5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146661.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afab::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:72:06:7e:63:24:7a:8d:64:6d:fa:a6:f1:35:d4:cb:b6:40:
         83:9a:86:68:05:74:56:fe:4e:6e:10:db:26:82:76:e3:9b:65:
         13:72:81:f3:42:1f:93:56:be:68:17:20:9b:c6:3c:de:52:8c:
         19:41:41:ff:7d:08:90:b4:9b:f6:c9:17:27:ce:89:98:5f:4a:
         e6:6e:7e:c2:15:d5:5b:70:0c:b2:46:83:30:a9:8d:99:d6:71:
         4f:93:89:f6:dc:8d:0a:07:76:8f:f4:d3:9e:36:6a:36:f3:48:
         42:83:ff:65:8f:a7:b4:d9:2c:bc:05:fa:59:46:08:39:4c:4d:
         73:9c:70:2e:ec:ca:0d:38:58:30:e9:7d:cb:7c:d5:d1:01:aa:
         a0:6a:c2:df:d3:e3:b2:a8:e8:45:16:34:9f:b1:f7:e4:18:3a:
         a8:10:74:f8:6a:2d:8d:ff:9c:6c:bd:a3:17:25:26:15:e4:cf:
         02:6c:c3:be:0b:37:e1:ff:7f:ae:3b:13:a4:1f:93:99:20:a5:
         75:79:52:5e:35:42:43:cf:c0:84:90:a6:30:63:5c:37:1b:63:
         92:61:50:11:62:44:96:26:97:7e:87:e0:df:92:81:4b:fb:a8:
         35:7e:d3:aa:27:5c:6c:b0:a8:b5:79:af:10:0e:0f:ec:9a:45:
         80:4c:ed:6f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdJJufneGqjRHf/oFGiAc9Jg8QSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI2MDBaFw0yNzA1MjUwNjMxMDBaMDMxMTAvBgNV
BAMTKDI2QzJFRUNCNjQ2MEQwQjJGQ0QyNjA1Njk5MDlCRjNGMTgzNEEzQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVYTD5FpdaIXHaR/daAgRvr+EO
5tokaK3UdcmzRWMK+mxETos8pHYPZ590M5n4MO9PRc533X5Z4H/sXP+CpefBrdxo
T+Y9DI2UnAB5vPGw+noDAR2zWc9SYZLt3gZtPyZU/F/lGKYuHkluvPwoRUkNQop7
iGHe8z8SD1RAXPbq7RNge8MOow2W4zBVqWTXB570NLHdpJVJkitsXtwiMsbMMBS2
06fuG7481oqDXjouTcx9PmVxrnY3pjm4qYVHbdYl7ZT6WEJlIy0jnLugIMBqIQ40
TysCVlUlPmBRSklCOTZc/0xgZiZQckxQviksk2p2KrFp/uUMdX13TlL+KV/HAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUJsLuy2Rg0LL80mBWmQm/Pxg0o8UwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvqzANBgkqhkiG9w0BAQsFAAOCAQEAW3IG
fmMkeo1kbfqm8TXUy7ZAg5qGaAV0Vv5ObhDbJoJ245tlE3KB80Ifk1a+aBcgm8Y8
3lKMGUFB/30IkLSb9skXJ86JmF9K5m5+whXVW3AMskaDMKmNmdZxT5OJ9tyNCgd2
j/TTnjZqNvNIQoP/ZY+ntNksvAX6WUYIOUxNc5xwLuzKDThYMOl9y3zV0QGqoGrC
39PjsqjoRRY0n7H35Bg6qBB0+Gotjf+cbL2jFyUmFeTPAmzDvgs34f9/rjsTpB+T
mSCldXlSXjVCQ8/AhJCmMGNcNxtjkmFQEWJEliaXfofg35KBS/uoNX7TqidcbLCo
tXmvEA4P7JpFgEztbw==
-----END CERTIFICATE-----