Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146721.roa
File:                     AS146721.roa (raw, json)
Hash identifier:          TrnUh9IJmSLnQhdiYJlQusO2GVDMtQp8HnewVCQ1s/Q=
Subject key identifier:   90:29:7F:FD:A4:1E:97:08:97:19:D3:BF:8F:A2:67:05:38:6A:15:47
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5C5BC4D57A3D2A8A461E88ABA040D6BBF5EBAE01
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146721.roa
Signing time:             Mon 25 May 2026 03:19:15 +0000
ROA not before:           Mon 25 May 2026 03:14:15 +0000
ROA not after:            Mon 24 May 2027 03:19:15 +0000
asID:                     146721
IP address blocks:        240a:afe7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5b:c4:d5:7a:3d:2a:8a:46:1e:88:ab:a0:40:d6:bb:f5:eb:ae:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:15 2026 GMT
            Not After : May 24 03:19:15 2027 GMT
        Subject: CN=90297FFDA41E97089719D3BF8FA26705386A1547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5a:5c:d6:0a:42:2b:0d:7a:ea:8e:fb:cc:ad:
                    81:b7:b2:31:df:af:53:57:68:e0:9e:ff:94:d4:d6:
                    e5:9b:8d:1d:bd:72:73:f2:65:cb:24:c2:b0:d9:10:
                    86:78:5c:c9:57:07:ea:18:6f:2b:17:7e:74:c1:65:
                    41:9f:0d:da:fa:8e:e7:ca:3c:22:45:78:c7:eb:21:
                    8e:83:80:2c:2b:11:65:ae:f8:ad:6c:1e:2e:95:e9:
                    1e:09:7c:88:60:6b:8e:87:e5:13:f9:c2:d3:25:b8:
                    81:ae:32:c2:4c:f3:25:59:d6:a0:dc:df:84:8d:21:
                    63:2e:0b:c8:9f:1a:69:95:cb:a6:f7:11:74:6e:49:
                    88:14:e1:04:6a:7f:2a:70:ba:aa:62:dc:29:e4:a0:
                    b1:4c:55:c5:66:b8:8e:d5:c0:5c:55:7a:ec:d9:3e:
                    7a:8c:91:bf:51:1c:4b:7c:e7:1c:e3:53:5f:cd:e4:
                    36:bb:89:23:24:40:12:ce:49:3a:a9:0e:c6:8d:4b:
                    93:4d:6d:c6:06:f2:2b:32:df:35:8b:9d:fa:81:92:
                    7e:17:06:9d:93:f6:d9:9a:de:fa:fc:33:bf:27:d0:
                    99:45:e2:54:b8:4a:a9:3d:47:2b:5f:63:22:93:2a:
                    de:ef:df:6b:a7:83:32:5c:22:43:5b:41:34:ad:eb:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:29:7F:FD:A4:1E:97:08:97:19:D3:BF:8F:A2:67:05:38:6A:15:47
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146721.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afe7::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:bd:c2:94:28:e3:78:97:ce:6a:c9:8f:8a:0f:a6:c2:48:eb:
         d6:ec:26:a4:24:b7:9a:41:a5:5c:ae:86:ce:61:15:eb:0d:7e:
         c2:c6:a6:b9:98:cd:7b:af:53:c8:b5:a0:e3:d1:e0:b9:e0:c9:
         6f:a6:8d:83:93:c6:a3:fb:16:4b:2e:9b:a8:10:b3:fd:90:33:
         e3:01:c9:ff:59:ef:68:24:04:8f:81:79:f3:72:cd:00:ce:e7:
         d7:0e:ac:68:01:80:ca:71:3a:5e:30:fe:ff:6b:2e:27:e6:29:
         3a:23:79:f3:a8:8f:08:2a:83:9d:f3:0d:54:36:69:10:28:44:
         be:73:51:ff:89:e4:e8:ce:78:48:0f:14:8b:d8:2d:41:d9:35:
         21:ae:26:b7:58:68:bf:52:c0:34:9d:1e:01:b9:f3:ae:91:c3:
         16:7e:73:d1:8e:e9:b4:3d:9a:93:0c:be:03:2e:44:84:1c:2b:
         c4:aa:02:7d:16:9a:55:2b:6b:6c:f5:09:ab:d7:1e:dc:f6:a3:
         0f:78:64:3f:72:83:63:83:ed:ca:ab:fa:f5:40:ff:29:b9:ea:
         75:97:ef:a0:cc:3f:b1:92:27:9f:1e:2d:a8:0e:4f:20:c4:74:
         88:95:a0:d7:2b:0d:91:1f:dc:e9:7e:08:43:56:e8:8a:00:01:
         9b:6e:fd:72
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXFvE1Xo9KopGHoiroEDWu/XrrgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MTVaFw0yNzA1MjQwMzE5MTVaMDMxMTAvBgNV
BAMTKDkwMjk3RkZEQTQxRTk3MDg5NzE5RDNCRjhGQTI2NzA1Mzg2QTE1NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkWlzWCkIrDXrqjvvMrYG3sjHf
r1NXaOCe/5TU1uWbjR29cnPyZcskwrDZEIZ4XMlXB+oYbysXfnTBZUGfDdr6jufK
PCJFeMfrIY6DgCwrEWWu+K1sHi6V6R4JfIhga46H5RP5wtMluIGuMsJM8yVZ1qDc
34SNIWMuC8ifGmmVy6b3EXRuSYgU4QRqfypwuqpi3CnkoLFMVcVmuI7VwFxVeuzZ
PnqMkb9RHEt85xzjU1/N5Da7iSMkQBLOSTqpDsaNS5NNbcYG8isy3zWLnfqBkn4X
Bp2T9tma3vr8M78n0JlF4lS4Sqk9RytfYyKTKt7v32ungzJcIkNbQTSt6+NlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUkCl//aQelwiXGdO/j6JnBThqFUcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NzIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqv5zANBgkqhkiG9w0BAQsFAAOCAQEABb3C
lCjjeJfOasmPig+mwkjr1uwmpCS3mkGlXK6GzmEV6w1+wsamuZjNe69TyLWg49Hg
ueDJb6aNg5PGo/sWSy6bqBCz/ZAz4wHJ/1nvaCQEj4F583LNAM7n1w6saAGAynE6
XjD+/2suJ+YpOiN586iPCCqDnfMNVDZpEChEvnNR/4nk6M54SA8Ui9gtQdk1Ia4m
t1hov1LANJ0eAbnzrpHDFn5z0Y7ptD2akwy+Ay5EhBwrxKoCfRaaVStrbPUJq9ce
3PajD3hkP3KDY4Ptyqv69UD/KbnqdZfvoMw/sZInnx4tqA5PIMR0iJWg1ysNkR/c
6X4IQ1boigABm279cg==
-----END CERTIFICATE-----