Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146678.roa
File:                     AS146678.roa (raw, json)
Hash identifier:          ehdXETpDB/S9iVGYmLJ8R6m2L9SXDtyFdy8HwxNZZJg=
Subject key identifier:   76:65:AD:55:D3:41:24:AC:F5:F6:5E:9F:59:2D:37:EC:80:83:AF:86
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2A7F5B2F270AB264A3386526BB133343AAAA7FF3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146678.roa
Signing time:             Mon 25 May 2026 01:50:54 +0000
ROA not before:           Mon 25 May 2026 01:45:54 +0000
ROA not after:            Mon 24 May 2027 01:50:54 +0000
asID:                     146678
IP address blocks:        240a:afbc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7f:5b:2f:27:0a:b2:64:a3:38:65:26:bb:13:33:43:aa:aa:7f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:45:54 2026 GMT
            Not After : May 24 01:50:54 2027 GMT
        Subject: CN=7665AD55D34124ACF5F65E9F592D37EC8083AF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:87:e7:5f:68:4a:58:bd:20:0a:68:8d:16:
                    c5:6f:13:de:bd:8a:6c:dd:b3:47:14:e6:69:ae:00:
                    13:c0:ed:d5:48:b4:65:ec:93:67:ae:cd:d3:50:5b:
                    4c:82:45:18:75:13:36:0d:78:3b:fa:4e:73:f6:e3:
                    dc:33:9a:af:51:b2:62:ed:c7:fc:76:f4:de:72:d6:
                    7c:e1:8b:0b:de:5a:08:2a:16:82:03:a2:7d:64:97:
                    e1:12:5f:c6:45:71:ed:01:57:65:2f:75:a0:20:2c:
                    3a:81:67:73:b6:5d:96:16:af:db:36:7c:ba:1f:16:
                    26:0f:24:4e:d0:0c:c3:98:3c:74:75:1a:34:04:ce:
                    63:4c:dc:ad:19:1a:7e:e4:bc:87:58:82:82:7b:e3:
                    ab:be:ea:69:bc:a4:69:22:50:1b:17:30:6a:07:e9:
                    65:a8:86:19:71:9d:38:40:2c:2f:e8:f6:02:a8:e0:
                    a7:ad:4b:b7:ec:7b:ae:e4:2c:a0:27:22:b0:d2:49:
                    10:4a:d1:2e:d4:a2:f7:43:6f:45:50:23:39:16:52:
                    e2:37:4a:d6:16:bc:37:92:d7:c6:e2:b8:fa:a2:d9:
                    b5:75:01:28:f5:a6:da:15:a3:9a:56:b6:db:57:84:
                    f4:38:72:9a:1b:95:36:50:e4:32:76:8d:5a:ca:97:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:65:AD:55:D3:41:24:AC:F5:F6:5E:9F:59:2D:37:EC:80:83:AF:86
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146678.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:16:29:c6:b8:64:ad:fc:9e:ce:26:b7:3c:33:01:7c:d4:d6:
         f1:77:be:d5:cd:15:81:7a:4b:30:cc:38:fd:21:f9:8e:68:02:
         1f:6d:4b:ec:ca:5d:26:4c:53:20:03:0a:78:e8:90:a0:49:3d:
         61:d4:1a:5a:c1:61:33:54:bc:00:71:40:03:63:6e:eb:4e:da:
         30:41:33:4d:72:09:71:a8:7c:fc:cb:f3:cc:97:c8:e2:88:c2:
         e9:96:13:e6:9f:13:f6:7b:97:ea:d0:8a:9c:d3:e8:10:54:b0:
         84:8c:4d:40:34:6f:54:8c:02:64:8f:49:0b:cd:2e:96:31:26:
         fe:21:bc:3d:13:99:6d:91:2f:13:4d:48:9b:93:d9:c8:1b:b0:
         08:f0:ac:6e:f8:81:e9:49:f2:a7:7f:c7:4a:31:2e:73:c5:9a:
         40:4e:1a:f3:b3:96:32:ab:ba:ab:a8:57:80:c7:f4:82:ff:23:
         6f:8a:c4:b0:2e:76:ff:50:9c:23:38:e2:7d:5f:29:7f:0b:aa:
         ba:ed:cb:f9:14:72:ad:34:0e:59:78:1a:71:30:59:6d:41:7a:
         d1:ec:18:2d:58:3d:b6:b7:2c:ff:f7:6d:e3:f9:88:e2:d6:86:
         69:5d:61:39:3e:71:8c:35:d3:19:21:ad:9c:1f:4b:3e:ef:b6:
         3b:36:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----