Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146031.roa
File:                     AS146031.roa (raw, json)
Hash identifier:          6dY21uqZqbOIkzfqf7ZPT1qPXlNiE/6FIRxbc2gvQ3Q=
Subject key identifier:   DF:EB:DE:C5:12:95:D3:9F:8B:AC:38:54:BD:4D:E6:66:0E:1C:A9:F9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       21D05058ADA51DC86A3CD4DA6F114DA1FFB09B6D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146031.roa
Signing time:             Mon 25 May 2026 01:51:27 +0000
ROA not before:           Mon 25 May 2026 01:46:27 +0000
ROA not after:            Mon 24 May 2027 01:51:27 +0000
asID:                     146031
IP address blocks:        240a:ad35::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d0:50:58:ad:a5:1d:c8:6a:3c:d4:da:6f:11:4d:a1:ff:b0:9b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:27 2026 GMT
            Not After : May 24 01:51:27 2027 GMT
        Subject: CN=DFEBDEC51295D39F8BAC3854BD4DE6660E1CA9F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:88:c5:a9:4d:e8:46:cd:3d:01:39:96:7b:
                    39:d7:81:c9:3e:00:47:40:ff:ba:f9:59:e9:12:04:
                    6b:67:1d:c8:b1:4f:43:97:ed:17:c3:88:17:c7:1d:
                    46:d8:65:4d:bf:3a:71:68:bf:05:ca:a5:a5:44:9c:
                    85:df:85:59:21:5c:a9:4e:53:d4:a1:2a:58:e9:56:
                    33:81:78:ca:20:fb:75:68:28:fa:33:88:ee:f1:3a:
                    ed:ea:e5:5e:ce:99:90:14:9b:48:21:a3:8e:f5:30:
                    90:9a:9a:97:17:d4:ae:53:b8:85:b1:93:c5:f4:54:
                    b0:8e:f9:5d:91:9d:f8:04:f2:55:87:4b:17:e3:f7:
                    f7:d9:14:e0:3c:c1:39:4a:64:c8:b2:5b:ff:eb:f0:
                    32:a2:3d:e8:35:be:bf:b8:69:36:52:a4:c3:cd:07:
                    37:92:84:7a:07:57:35:17:94:6f:4b:92:d4:1e:3f:
                    d8:65:c3:5f:e3:d3:8c:fc:ea:12:55:a8:e7:9a:80:
                    24:59:87:74:d8:5a:6f:8a:29:3a:78:c0:70:59:d0:
                    ef:1c:b2:58:36:37:6a:97:6e:6b:50:51:1a:96:6d:
                    90:fb:05:6c:9d:ea:e0:2e:90:ba:4b:95:8b:4f:64:
                    e5:64:22:dc:a7:00:ad:90:ea:b4:fe:72:0b:3c:1d:
                    44:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EB:DE:C5:12:95:D3:9F:8B:AC:38:54:BD:4D:E6:66:0E:1C:A9:F9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad35::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:88:d7:9f:7b:93:85:e9:b9:ed:ec:16:e2:37:3c:5e:55:32:
         14:4a:32:de:3d:c5:dc:bf:1b:33:35:11:89:21:63:87:5a:29:
         0a:04:01:c2:69:4b:71:48:55:a1:cc:67:37:cc:c1:5f:89:c3:
         77:db:31:1c:dc:b9:00:58:a8:8e:b7:98:ca:6b:ca:64:ee:18:
         b5:8d:25:d4:00:e9:0d:c0:03:1c:63:e9:2b:99:0d:6b:66:26:
         a8:8d:f7:84:ed:b5:a6:42:7f:7d:a1:a9:c5:b5:1e:4d:c9:7f:
         be:d6:3e:50:df:16:1e:07:f2:19:4c:79:7c:c7:16:4d:d0:72:
         a9:90:d4:f1:19:a1:87:d4:4a:5a:fb:88:37:92:18:de:ba:4f:
         4b:a3:b6:30:ce:38:72:d0:94:0f:6c:45:65:d6:6d:1f:6b:b4:
         04:b7:4b:12:6c:85:89:8f:13:41:26:31:e3:68:36:d3:79:bd:
         9e:ae:02:ba:8d:c6:5d:b4:9a:69:19:3a:14:29:40:ce:29:ab:
         f8:85:91:78:17:f2:af:b7:87:b7:42:6a:37:84:b5:83:df:6a:
         b1:27:df:19:fe:6a:8d:87:9d:0e:57:8e:7f:b0:4e:4e:83:21:
         a3:fc:43:06:4f:42:8b:2c:42:7f:71:02:f3:f0:8e:65:dc:05:
         57:3a:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----