Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146707.roa
File:                     AS146707.roa (raw, json)
Hash identifier:          TtIpdJYUbanu/CWfAVhFUqpHlockEzAqiqD9MnJTbeI=
Subject key identifier:   6D:13:96:91:B8:B6:B7:1C:32:A7:D6:C2:3B:8A:F6:AC:67:3C:55:A8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       632074FFB0627D609CD2738F82A9EBC8A1AD908C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146707.roa
Signing time:             Fri 22 May 2026 06:46:07 +0000
ROA not before:           Fri 22 May 2026 06:41:07 +0000
ROA not after:            Fri 21 May 2027 06:46:07 +0000
asID:                     146707
IP address blocks:        240a:afd9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:20:74:ff:b0:62:7d:60:9c:d2:73:8f:82:a9:eb:c8:a1:ad:90:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:07 2026 GMT
            Not After : May 21 06:46:07 2027 GMT
        Subject: CN=6D139691B8B6B71C32A7D6C23B8AF6AC673C55A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e3:a6:d1:5f:13:ec:5a:0b:06:77:dd:c6:7a:
                    27:74:50:e0:4a:59:4e:da:19:9f:f1:7b:00:19:01:
                    cd:da:d8:d7:02:a0:8b:ae:9a:4c:11:ea:74:73:7a:
                    d3:cb:6c:ae:6e:b8:dd:84:bc:e5:6c:f6:97:8a:bd:
                    ea:f4:01:81:d7:5e:24:2c:5a:f0:f9:27:c2:a2:ae:
                    b2:24:95:47:c7:63:cf:fc:13:57:31:b7:3f:9e:27:
                    38:cd:83:a1:e7:22:33:d6:c3:37:0e:95:83:0c:82:
                    7d:44:48:b3:d2:76:cc:35:c9:c7:b4:5e:09:c8:e5:
                    26:6c:ab:ad:a2:fa:1a:31:2a:08:78:d5:8d:b2:a2:
                    6e:ee:20:e3:78:18:48:fd:18:88:37:16:7e:6e:b5:
                    3c:4c:92:6c:1f:b6:3f:22:05:79:1c:e3:d1:0a:2f:
                    cc:ca:d3:8e:de:b2:ea:89:4e:9e:c4:2d:a1:04:b4:
                    d0:bf:1a:0c:9b:c6:86:64:8f:fe:e8:b2:49:05:9c:
                    70:dd:93:e9:49:79:45:9e:c8:2c:c6:f0:fa:b7:eb:
                    1a:eb:46:f1:5e:5c:3b:47:3a:39:df:9e:2c:85:3a:
                    1f:9d:8d:5d:fc:2c:54:6d:d4:19:ce:b6:ab:d2:07:
                    51:8b:32:bf:db:81:91:2c:86:11:89:39:f3:de:8e:
                    00:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:13:96:91:B8:B6:B7:1C:32:A7:D6:C2:3B:8A:F6:AC:67:3C:55:A8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146707.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afd9::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:76:73:c6:07:51:08:e9:26:20:0b:df:8b:c9:19:f3:01:33:
         ac:cf:42:37:06:d0:1b:e7:e6:dc:d2:85:35:10:45:b4:10:f4:
         10:f8:5f:5d:39:87:ec:01:f6:79:5c:ff:1b:9e:35:b9:5f:d1:
         8a:d2:d1:9a:e0:3b:b7:93:fd:07:58:0e:b0:61:8f:6e:ea:92:
         08:9b:bb:63:2a:8a:b7:66:68:ad:8c:c0:cc:be:2c:65:41:ca:
         ed:13:4e:dc:8f:6c:1e:0f:fa:39:e5:58:87:01:63:0c:70:40:
         17:7f:ca:28:88:50:aa:03:7f:70:6c:d2:84:06:28:ab:8a:bf:
         29:af:bc:27:d0:b2:27:01:1e:be:5b:87:9e:39:b7:1b:9e:40:
         77:92:35:56:78:15:b8:fb:54:5c:21:0b:17:3b:ae:24:d8:ae:
         8c:ba:69:3c:e3:de:72:74:34:da:5f:5f:e2:ca:5b:f1:1a:6f:
         92:1a:98:6e:15:53:01:d3:bc:28:51:7d:ac:32:0c:12:9d:e7:
         a0:6b:b7:2d:9d:e7:52:ca:ab:cc:12:d6:d5:4a:f5:90:86:b8:
         9d:26:bc:7b:11:cb:2a:c0:28:51:5f:34:96:fc:a3:36:08:1f:
         58:30:71:8c:b2:8d:15:8a:5b:63:da:f5:21:a9:a5:d5:6d:05:
         5e:21:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----