Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146671.roa
File:                     AS146671.roa (raw, json)
Hash identifier:          25vi8fkUASoh+UgDSHUF+xC01pGMITMzq7uFf8WJ0pg=
Subject key identifier:   C8:28:6B:BE:FC:FF:81:4E:CB:F9:FF:82:C7:A7:60:26:05:80:B2:FB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       412F4E0F3B3233195371AB3A7D6E251C603BEB5B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146671.roa
Signing time:             Fri 22 May 2026 01:50:43 +0000
ROA not before:           Fri 22 May 2026 01:45:43 +0000
ROA not after:            Fri 21 May 2027 01:50:43 +0000
asID:                     146671
IP address blocks:        240a:afb5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2f:4e:0f:3b:32:33:19:53:71:ab:3a:7d:6e:25:1c:60:3b:eb:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:43 2026 GMT
            Not After : May 21 01:50:43 2027 GMT
        Subject: CN=C8286BBEFCFF814ECBF9FF82C7A760260580B2FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7a:b7:51:06:b1:5a:7f:1b:df:b2:ed:dc:20:
                    54:d9:bc:aa:ee:e4:38:14:63:da:43:77:e2:a2:bf:
                    f3:79:64:61:32:b1:da:ef:c6:e9:13:43:e9:d1:03:
                    20:c2:35:0a:7d:65:55:64:f9:af:e5:43:5c:33:87:
                    53:10:16:b4:8f:d0:78:03:09:7a:ce:2f:11:1f:1f:
                    04:36:fc:6a:bf:ca:4b:29:04:cd:4c:18:99:1f:d6:
                    16:da:7c:3c:09:49:4a:98:7c:43:52:11:77:31:ea:
                    57:f6:94:c6:5d:94:9e:62:38:6d:3f:e9:8b:ab:94:
                    e2:1d:55:f4:dd:a4:10:fc:b7:4f:fb:bf:dd:24:cc:
                    d8:63:29:af:cc:e0:67:a5:cc:4c:96:04:71:bb:74:
                    29:79:10:6c:db:11:44:d6:8e:63:6a:34:63:98:1b:
                    79:53:0a:69:de:33:3e:bf:d3:4e:73:a0:bc:42:b3:
                    f0:b4:d9:a0:d5:a5:a6:c8:ab:2d:40:6a:08:75:8c:
                    83:3e:d5:01:ab:6e:53:c2:e1:fc:fd:57:87:44:32:
                    fa:43:00:34:e1:89:8c:58:95:fa:7b:96:4f:12:4d:
                    d3:4b:17:4d:c4:6b:20:ae:1c:79:45:0b:ef:62:03:
                    35:5d:a8:89:a0:72:5e:79:39:33:ff:00:4c:34:22:
                    df:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:28:6B:BE:FC:FF:81:4E:CB:F9:FF:82:C7:A7:60:26:05:80:B2:FB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146671.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afb5::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:81:9c:4e:6e:e0:bc:67:ab:39:14:a2:f1:a3:1d:23:7c:70:
         09:6c:2b:2d:47:65:7a:87:d1:ef:93:89:f3:a6:10:fb:0c:5b:
         9b:d4:02:5a:5f:d5:54:f5:51:4a:e8:6c:a0:96:47:9a:a3:30:
         74:07:e3:e7:df:c6:1f:df:2e:8b:23:4b:9e:89:d5:d4:a7:b7:
         b4:81:64:a5:55:79:67:50:f1:a3:1e:78:b0:0f:c4:df:e6:f6:
         2f:f6:34:74:48:1c:ac:d8:5f:7c:63:b9:dc:2d:90:f0:19:8e:
         62:f2:1b:80:fc:c1:42:df:a4:c5:8e:8b:76:86:92:a6:1f:bb:
         17:dc:cf:48:2d:20:40:46:2d:9a:30:d2:e5:9a:57:a4:1d:83:
         eb:5f:3d:58:60:9b:7c:ca:67:cf:af:5e:38:f2:b2:0e:42:e1:
         a1:e7:e5:71:6b:18:ff:51:e8:07:c6:a1:4b:ca:5d:84:af:19:
         6d:d5:1b:9a:9e:00:0f:e6:5b:e9:e5:6e:0c:da:f0:cd:bd:1d:
         78:81:ae:f4:5b:77:47:85:37:4e:dc:ff:24:66:96:01:94:b1:
         e8:20:92:a2:9b:2f:b9:64:d7:f2:2b:32:4d:a2:dd:0b:1d:53:
         b6:9f:b3:21:0e:c8:95:ed:03:4d:67:4e:30:4a:06:c7:bd:5b:
         77:8a:7a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----