Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146711.roa
File:                     AS146711.roa (raw, json)
Hash identifier:          VGOZ/rAs+H93iywNBk4B4sHS+kj0vqx0pC3MyWDWNPs=
Subject key identifier:   6B:A7:AD:EC:25:82:FD:55:92:09:F2:86:0A:49:B2:09:5F:12:DB:36
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       667BE4B8D34498BDA9BCAFA2F585A857D60DD171
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146711.roa
Signing time:             Mon 25 May 2026 03:19:31 +0000
ROA not before:           Mon 25 May 2026 03:14:31 +0000
ROA not after:            Mon 24 May 2027 03:19:31 +0000
asID:                     146711
IP address blocks:        240a:afdd::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7b:e4:b8:d3:44:98:bd:a9:bc:af:a2:f5:85:a8:57:d6:0d:d1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:31 2026 GMT
            Not After : May 24 03:19:31 2027 GMT
        Subject: CN=6BA7ADEC2582FD559209F2860A49B2095F12DB36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8d:48:ab:4a:f2:bf:ec:93:aa:54:ab:64:72:
                    88:5b:2f:f0:97:28:5c:7c:27:f7:fc:51:93:d7:16:
                    1f:58:6e:f6:13:61:ea:78:b6:ca:fd:7b:f0:d7:11:
                    d1:23:9f:32:b7:9f:9f:f1:da:d3:5e:b9:a8:60:3d:
                    33:a2:b3:3f:03:11:af:39:ed:a9:d5:19:53:65:ea:
                    74:2d:c7:b2:23:42:4c:9a:a7:0f:d8:ae:8f:26:16:
                    bc:c2:32:f2:c5:f7:a6:ec:cb:0e:55:9c:9e:22:cb:
                    5a:9d:a0:88:d1:6f:77:1c:f2:2e:4c:c2:83:c5:aa:
                    72:f0:9a:c3:f8:61:d0:6c:a1:d6:92:2c:35:a9:dd:
                    69:1c:e8:c1:29:30:29:42:9f:ef:74:70:be:7c:8b:
                    cd:d8:6a:fc:39:90:6f:d1:6f:3c:8d:92:42:be:cf:
                    96:54:48:dd:8d:49:7a:c2:ba:53:68:68:5b:65:19:
                    1c:1a:d0:34:7e:ab:e3:57:e4:cc:75:f0:ea:71:79:
                    2b:69:23:f1:ed:86:50:86:55:e5:1a:5f:c2:08:66:
                    4c:e8:78:30:95:3c:1c:93:37:e2:e0:ff:cd:22:67:
                    f5:fe:ad:e7:47:33:0b:83:c1:e9:ad:16:44:ee:d6:
                    8b:96:ba:8c:40:a5:8c:31:85:b5:36:6c:cf:74:4c:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A7:AD:EC:25:82:FD:55:92:09:F2:86:0A:49:B2:09:5F:12:DB:36
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146711.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afdd::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:93:be:7f:6b:01:be:e5:12:ae:22:62:a9:c1:ec:7a:9d:12:
         b6:0e:9c:4f:78:14:29:fe:4a:e3:aa:05:6e:37:bd:2f:1b:f5:
         28:c4:a0:64:5d:04:da:94:66:b7:d9:2a:c3:8a:28:be:80:4c:
         8a:79:d2:78:28:de:75:76:31:db:a3:ea:b8:93:0a:c2:4f:bc:
         2f:49:fc:e0:00:f3:1e:ed:fe:c8:76:ed:17:2a:e6:6d:21:4c:
         ea:96:cf:3c:5c:e8:f5:da:30:09:76:65:a0:59:64:be:81:14:
         12:b9:aa:d0:32:63:4b:5b:d0:fb:56:b4:90:0f:e4:1b:93:25:
         4a:e5:3a:ba:34:8f:33:d2:8a:73:3f:af:4b:9f:a8:ff:6d:b1:
         ba:fb:7d:56:81:f4:24:bd:df:98:8e:54:5f:3a:db:31:1a:87:
         c5:1e:9e:04:88:1e:88:04:e3:e8:13:2d:6a:af:53:5d:fb:23:
         be:2a:77:a2:05:f8:7c:b0:b9:67:c3:72:b0:bf:65:b2:83:b0:
         59:30:46:53:a2:ef:b3:78:d3:70:0d:b9:6e:44:0f:cf:bd:c7:
         b1:41:46:2b:af:81:31:ff:eb:79:ac:2d:f4:4a:9b:9c:d0:8a:
         f5:b0:db:ac:09:c5:87:6f:60:c9:7d:11:fc:74:8d:92:8b:61:
         27:6c:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----