Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146018.roa
File:                     AS146018.roa (raw, json)
Hash identifier:          FziWUypJGXwl1hUscxOIzoad5A/q21BTKWNnZIw/z4o=
Subject key identifier:   50:F4:C3:CE:09:C7:44:49:C5:24:79:C9:58:8B:BC:8B:3D:94:5C:CB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       58A8AAA0C759B8CA077A3C24F52BBE8001873558
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146018.roa
Signing time:             Mon 25 May 2026 01:20:09 +0000
ROA not before:           Mon 25 May 2026 01:15:09 +0000
ROA not after:            Mon 24 May 2027 01:20:09 +0000
asID:                     146018
IP address blocks:        240a:ad28::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a8:aa:a0:c7:59:b8:ca:07:7a:3c:24:f5:2b:be:80:01:87:35:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:09 2026 GMT
            Not After : May 24 01:20:09 2027 GMT
        Subject: CN=50F4C3CE09C74449C52479C9588BBC8B3D945CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:af:a4:8f:21:9b:03:83:c8:03:92:ab:4c:
                    e8:74:22:4b:59:a0:c3:77:64:69:29:81:ec:88:47:
                    2f:32:66:33:7d:e4:41:da:6f:a2:2c:38:42:f3:3c:
                    f4:02:cc:2c:84:0e:16:a9:42:44:8c:07:37:df:45:
                    04:64:46:d7:ec:70:55:56:49:ff:43:ba:eb:28:a5:
                    e5:e9:65:96:19:ab:e9:30:93:89:17:37:b5:7e:cb:
                    44:62:fa:92:9b:f0:49:ba:a0:85:a0:ad:fb:29:f5:
                    f7:ec:6b:72:cd:8d:92:41:5b:a7:8a:9b:aa:b9:21:
                    94:44:b6:c7:74:59:37:b7:be:1e:03:79:91:f6:15:
                    85:1e:c2:36:47:7f:29:7c:61:c0:d9:e9:4e:66:61:
                    7e:48:41:56:49:12:c3:05:b1:82:0d:6a:e1:bb:b9:
                    b5:11:e7:0c:d6:66:96:f3:30:b7:ff:58:f4:18:ca:
                    e3:06:d6:ef:16:70:03:da:a5:0c:a3:5e:5c:89:59:
                    de:1b:a3:0d:10:e6:f7:b8:0e:a0:30:25:06:9e:c9:
                    b5:e9:33:80:b1:b8:c7:be:8a:eb:49:44:26:c5:bc:
                    93:bc:37:2b:f3:7a:94:c3:18:f1:8b:c4:f9:9b:be:
                    4f:4f:0b:81:06:d9:50:db:62:e3:d3:a7:00:2d:31:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F4:C3:CE:09:C7:44:49:C5:24:79:C9:58:8B:BC:8B:3D:94:5C:CB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad28::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:cb:d0:79:8c:92:23:7a:1c:6f:fd:28:4b:2f:f6:cc:8b:55:
         7d:88:04:fe:81:ef:f4:02:56:89:53:0b:1a:b3:05:e0:38:a8:
         fd:47:9d:6f:f8:dc:f2:2f:37:be:13:ea:e4:e1:fd:fb:04:af:
         f5:36:bc:2d:a7:b3:ae:71:96:2c:25:96:b6:30:3e:8e:82:a1:
         e4:40:0c:1c:5a:8a:14:2b:ac:ba:70:f2:09:94:9d:5a:9a:75:
         c6:04:35:d6:3b:62:f5:86:6f:4d:1b:bd:f0:18:e4:04:d4:d4:
         0d:86:f5:df:78:c8:f3:28:75:e8:20:33:1c:69:d3:5a:f6:c7:
         4f:86:c9:3b:15:f9:72:d9:e3:e4:77:20:23:d4:8d:54:c8:1c:
         aa:8e:16:0d:d8:f5:67:3f:0d:b5:27:06:f5:0d:58:e8:fe:94:
         d6:ff:0e:91:7c:2a:af:14:f9:b5:40:a0:6e:9a:27:75:b3:37:
         82:cf:a6:2d:e6:03:0d:f3:11:ec:84:f6:fc:fa:80:0f:a9:14:
         5d:ec:e9:ec:4e:47:ea:a5:37:82:f8:f0:cb:55:1d:bb:1e:23:
         70:4c:c8:30:ea:5e:bd:a6:27:8a:7a:08:8a:9d:9c:89:a8:3c:
         3f:3c:d2:af:9f:19:e4:11:cc:bb:7f:36:e6:fa:c5:56:49:ad:
         56:a4:72:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----