Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146025.roa
File:                     AS146025.roa (raw, json)
Hash identifier:          VWtHQHabBG0DG02KBPe8kbgJHvs2Ri9EHNrMSdrhc6E=
Subject key identifier:   C3:A1:03:BD:93:B7:70:A3:79:15:5D:94:FD:15:65:5C:8B:B6:17:D6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       52CA48B500559BAD896DF2236553D685FD6E4A9E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146025.roa
Signing time:             Fri 22 May 2026 04:27:04 +0000
ROA not before:           Fri 22 May 2026 04:22:04 +0000
ROA not after:            Fri 21 May 2027 04:27:04 +0000
asID:                     146025
IP address blocks:        240a:ad2f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ca:48:b5:00:55:9b:ad:89:6d:f2:23:65:53:d6:85:fd:6e:4a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:04 2026 GMT
            Not After : May 21 04:27:04 2027 GMT
        Subject: CN=C3A103BD93B770A379155D94FD15655C8BB617D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6a:7f:fb:27:bc:34:73:9c:9b:5d:32:55:1c:
                    d7:b2:70:67:f4:23:2d:21:a6:9a:4b:24:04:19:9c:
                    9c:89:2a:ff:ea:25:df:eb:ce:32:ed:df:55:32:8a:
                    f0:4a:3c:2e:b9:77:7d:6b:67:d4:59:f4:4c:14:72:
                    48:64:1e:86:86:43:cb:40:af:71:05:7d:1a:58:35:
                    0f:2e:73:c9:e0:96:85:57:4e:3c:e8:d6:d0:f7:c0:
                    45:12:50:f8:fb:1f:9e:7b:c9:60:96:bc:36:21:9a:
                    8d:9b:c0:b9:d0:25:6d:78:21:a8:cc:09:27:76:2f:
                    5f:72:a3:c9:de:dd:c2:74:d9:83:36:6a:f1:8c:9c:
                    90:ce:e9:f2:ed:9d:41:4c:5a:7e:15:6e:5d:b7:d4:
                    73:f5:74:43:09:20:c0:ec:6f:3d:e4:b8:40:31:fa:
                    77:81:68:c5:b5:47:d9:07:e0:42:61:27:a9:74:00:
                    06:e1:0f:2c:dc:9d:5d:e5:f3:b2:2a:8f:9f:db:2a:
                    59:7b:3c:90:da:2f:f2:ac:cd:fa:4b:4d:48:85:02:
                    3e:4f:61:87:d6:c5:45:05:2d:2b:5e:a0:30:9c:04:
                    2d:24:2b:8b:62:c3:3a:14:35:b0:d5:60:7e:70:df:
                    67:69:d2:0f:ff:42:6c:c9:4f:b5:d0:cf:b1:22:46:
                    d7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A1:03:BD:93:B7:70:A3:79:15:5D:94:FD:15:65:5C:8B:B6:17:D6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad2f::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:77:07:ad:b1:e1:f2:8b:45:00:5b:ce:3e:05:21:71:85:cc:
         08:47:64:8f:3e:d4:82:c3:c4:8c:17:9f:70:56:6a:da:25:e1:
         b4:15:e8:5c:9b:16:df:09:d4:da:c9:c9:17:6b:4c:e9:f5:ac:
         f9:1d:42:f7:1a:68:09:1d:7f:5f:1e:89:7e:9c:4e:fc:5c:45:
         1a:ba:c0:98:a8:66:c0:bf:7a:d2:50:63:75:cc:be:10:09:29:
         50:69:f9:32:56:e6:e7:14:fe:ec:19:80:30:ea:73:24:20:14:
         0a:9b:ee:c0:64:bb:fe:c9:32:f0:be:74:6a:37:1a:97:91:2c:
         18:1a:27:94:91:aa:40:5c:38:40:ae:c7:21:df:2d:cb:9b:bc:
         8f:a7:91:84:98:e1:bf:df:7f:a6:c7:21:1f:3c:e2:db:28:64:
         61:bc:b6:e0:03:82:2f:66:ff:da:75:ad:4c:81:79:91:dd:41:
         7c:1b:8e:0a:a4:ea:62:4d:8a:bd:a8:df:fb:fa:5f:40:49:0f:
         9d:db:98:62:e5:f5:33:48:88:bd:ea:c3:a2:f5:5d:67:e8:d1:
         b6:1b:1f:15:d9:70:5c:06:b5:d8:1e:e7:10:b8:4a:28:3e:11:
         6f:7d:8e:e4:82:8d:47:c2:82:5f:c7:1d:ff:e5:d7:3f:62:82:
         48:7b:69:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----