Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146012.roa
File:                     AS146012.roa (raw, json)
Hash identifier:          ldHQp68SlZn2UAbWBs0R1ADBdHKe2NEl8fSTz+fj/Tw=
Subject key identifier:   8A:1C:3C:90:14:F2:BE:F1:4F:3D:63:CF:1C:F4:34:E8:AA:25:3E:84
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0E53B48A21E80B91F3F20E1BD7C6FF80BFA5E1A8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146012.roa
Signing time:             Mon 25 May 2026 06:49:11 +0000
ROA not before:           Mon 25 May 2026 06:44:11 +0000
ROA not after:            Mon 24 May 2027 06:49:11 +0000
asID:                     146012
IP address blocks:        240a:ad22::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:53:b4:8a:21:e8:0b:91:f3:f2:0e:1b:d7:c6:ff:80:bf:a5:e1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:11 2026 GMT
            Not After : May 24 06:49:11 2027 GMT
        Subject: CN=8A1C3C9014F2BEF14F3D63CF1CF434E8AA253E84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:97:89:0e:e5:86:69:5e:74:f2:5e:ee:eb:
                    7f:14:8f:e1:c3:37:b0:57:90:77:51:f3:d2:87:fe:
                    d1:36:8c:26:1a:3f:9a:eb:eb:fe:c6:5b:5d:4e:4b:
                    08:ca:3c:07:4f:f7:e4:7c:bb:57:39:d2:97:90:92:
                    7c:f2:b0:a5:4f:c3:db:90:af:48:a2:88:74:65:8d:
                    5e:92:c1:b5:51:fd:ff:22:14:65:a8:33:5e:7d:b8:
                    c4:39:4f:41:92:55:6b:02:92:5e:04:91:e8:3f:03:
                    89:f1:16:c0:0c:68:e0:14:6c:72:1e:35:b8:34:21:
                    ae:c0:9e:fb:65:a2:1f:a1:ae:08:e3:df:44:81:15:
                    fa:45:b4:82:03:4f:a4:e6:a4:b3:9f:07:ce:df:3c:
                    ff:50:78:4d:c0:cf:a7:dc:3e:e2:62:d9:38:15:f4:
                    c6:a8:01:7a:33:18:a5:9f:dc:fc:5b:aa:bc:49:ca:
                    d6:4a:d2:e9:d4:a2:70:4e:50:db:ad:98:20:35:c8:
                    02:d8:c0:81:37:77:4e:df:de:69:87:fd:03:29:b0:
                    97:82:e7:01:89:8f:ae:4d:08:7f:ae:66:70:11:c5:
                    a4:0c:b5:b0:3f:0c:70:e4:07:20:c8:d4:44:a7:9b:
                    e9:0c:3f:5f:49:e4:60:f7:a0:cf:36:80:27:06:f4:
                    38:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1C:3C:90:14:F2:BE:F1:4F:3D:63:CF:1C:F4:34:E8:AA:25:3E:84
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146012.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad22::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:cb:37:e6:94:7d:16:60:3b:95:55:b1:d0:3a:6d:cb:c8:2f:
         83:20:1a:cd:d0:54:fa:9a:13:a6:92:29:28:77:b9:12:af:24:
         43:18:8b:98:ed:8d:2d:fe:20:b2:df:e3:20:74:f4:34:c5:4c:
         76:4e:cd:f4:a7:fc:a7:16:40:5d:a5:aa:c4:23:6e:d6:5d:a2:
         14:2d:d4:7e:31:f4:b1:16:b9:e1:43:4d:6e:3c:7e:42:c3:e2:
         6e:7f:37:3f:a9:24:8f:13:03:20:69:65:cf:8c:d6:46:6d:6a:
         40:b0:84:b3:8b:8d:63:6b:42:83:ed:fd:2f:44:8e:8a:dd:2a:
         64:89:49:ba:f8:d2:21:19:58:90:d2:d7:c9:9e:2e:c6:01:f7:
         40:ea:4c:d3:6f:cc:8c:34:73:c3:90:98:50:2e:6e:d1:62:34:
         80:b7:a6:46:f3:94:d8:bc:57:0e:46:01:74:cb:e6:fd:d8:5b:
         8c:64:df:a9:1a:2b:b3:12:cf:e0:a2:08:b4:20:7b:a7:12:32:
         a9:53:1c:9d:1e:48:cc:45:67:e6:10:29:7b:e4:ca:da:90:fb:
         97:48:a6:45:ad:47:64:f4:71:6b:9e:e9:bc:9b:e5:37:e6:47:
         35:f1:82:74:88:41:f1:50:0d:a2:19:c9:d8:6c:3d:a7:90:6b:
         3a:ce:30:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----