Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146051.roa
File:                     AS146051.roa (raw, json)
Hash identifier:          nt3uK+YpEtGCNyVLZ2jK19JKc0+99DRHLFbNQmiAF2E=
Subject key identifier:   88:6E:91:22:BB:BD:4B:5F:23:06:87:52:F4:43:47:F4:4C:33:14:AA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       326C69DF09B2D548420767BA71D0A94C127C8C90
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146051.roa
Signing time:             Mon 25 May 2026 01:20:12 +0000
ROA not before:           Mon 25 May 2026 01:15:12 +0000
ROA not after:            Mon 24 May 2027 01:20:12 +0000
asID:                     146051
IP address blocks:        240a:ad49::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6c:69:df:09:b2:d5:48:42:07:67:ba:71:d0:a9:4c:12:7c:8c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:12 2026 GMT
            Not After : May 24 01:20:12 2027 GMT
        Subject: CN=886E9122BBBD4B5F23068752F44347F44C3314AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:51:32:17:2d:f3:3d:cd:7d:89:10:8f:60:
                    49:1b:ea:c0:e6:6f:12:b6:49:af:f1:52:68:ad:26:
                    8f:03:83:28:61:16:0c:7e:52:5c:76:da:a1:11:26:
                    47:49:88:12:7f:4b:ce:88:f4:d9:02:bf:90:0a:0e:
                    58:77:bb:59:ad:47:f1:80:9f:76:61:e6:88:ad:85:
                    c0:bd:b3:d4:05:02:57:5d:b4:7f:2b:7c:f3:a0:01:
                    02:f0:8a:6c:47:4e:a9:fa:74:27:c6:c1:e2:bf:8f:
                    6e:ae:8a:48:4e:1b:02:ec:85:23:4d:18:eb:d5:32:
                    41:1c:b3:53:ae:f9:69:ac:46:77:85:2b:66:bd:83:
                    b2:51:60:49:34:24:22:90:84:cb:e6:a9:42:32:a7:
                    35:eb:9b:37:48:ca:de:95:96:03:50:8b:17:4f:c9:
                    a0:55:2e:50:65:c2:24:f3:c1:3d:f5:a3:a1:ce:9b:
                    fb:d9:72:cc:e0:2c:0a:e2:aa:77:fe:7a:54:ad:c3:
                    2c:ab:b4:81:f1:9d:b9:e1:63:73:08:f3:87:0b:d1:
                    f5:38:23:7e:e1:a3:bf:3a:3e:e2:1e:db:61:f7:0d:
                    0a:c0:b3:73:a7:50:9f:e0:0a:ba:dd:67:84:33:46:
                    f9:c3:15:2a:33:8d:84:c1:ce:88:83:5b:00:1e:b1:
                    6e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6E:91:22:BB:BD:4B:5F:23:06:87:52:F4:43:47:F4:4C:33:14:AA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146051.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad49::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:33:ef:ef:d4:1f:56:13:78:8f:7d:88:af:c0:d2:0c:f0:
         84:3a:97:25:b4:db:b8:e3:fd:58:79:c8:44:8f:65:81:f6:6c:
         41:08:ec:49:3a:e0:23:b7:f6:1b:16:6f:cb:0e:53:e0:73:65:
         ba:e4:3d:8c:e4:e6:45:0d:ac:03:45:da:72:74:14:ce:f5:63:
         3d:01:e6:a9:b8:3a:0b:a0:6e:ec:60:92:45:ff:78:58:42:2a:
         e6:47:d8:0f:49:e9:05:95:2b:e9:20:4f:b5:db:c5:66:7c:b9:
         5d:9c:bd:44:e2:18:13:54:fc:67:c6:b1:64:81:59:67:0b:93:
         58:82:e7:2a:88:4b:a8:5d:6e:e6:5b:00:17:6a:95:be:48:6e:
         96:52:fd:3c:80:8c:06:4a:f3:14:ad:e6:c2:92:32:c0:55:2e:
         36:10:c2:b1:15:62:e7:69:df:19:f5:a1:15:66:7d:94:af:6f:
         34:df:e6:6c:a2:bf:b0:2b:78:16:ea:32:07:90:c6:87:d2:80:
         a7:ac:70:63:e9:c7:2d:69:b4:d7:ba:2e:2a:e3:8a:60:fb:b5:
         fe:54:5f:8a:ff:a7:da:5f:c2:f9:3a:a1:39:b0:fe:a6:1f:9f:
         4f:89:fe:94:24:33:16:d5:d3:f5:23:aa:50:13:3e:3e:b2:23:
         ff:84:f9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----