Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146057.roa
File:                     AS146057.roa (raw, json)
Hash identifier:          kVMq8XcIC3aIQ6TZMYliFo+CT6SLwRoDxMgg5z6HmQE=
Subject key identifier:   E4:B0:8F:AB:35:5A:FF:B8:82:86:42:BB:F5:7D:8E:F7:0E:56:B7:4E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       64B9C9473C9A44C32BD7CFCB9BE1329057F902F5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146057.roa
Signing time:             Mon 25 May 2026 01:50:56 +0000
ROA not before:           Mon 25 May 2026 01:45:56 +0000
ROA not after:            Mon 24 May 2027 01:50:56 +0000
asID:                     146057
IP address blocks:        240a:ad4f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b9:c9:47:3c:9a:44:c3:2b:d7:cf:cb:9b:e1:32:90:57:f9:02:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:45:56 2026 GMT
            Not After : May 24 01:50:56 2027 GMT
        Subject: CN=E4B08FAB355AFFB8828642BBF57D8EF70E56B74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:00:95:7f:fb:9c:8e:90:9c:6f:5a:d7:8b:
                    c7:39:84:9b:ae:28:df:87:84:9a:4d:7c:f2:2d:56:
                    de:a1:16:fd:0e:71:e4:5b:86:ef:da:95:fd:44:e6:
                    07:aa:e4:79:19:c5:bd:62:5b:2f:0d:07:d5:c8:dc:
                    a6:51:0b:d9:06:d6:e5:d9:2a:13:a6:e7:d4:70:8d:
                    91:77:5a:0e:46:fd:6a:a8:69:ac:0e:82:b5:7e:bb:
                    f8:92:e0:8d:c8:58:9a:11:2b:cf:a0:c5:f3:ef:c3:
                    58:07:67:22:3f:bb:f9:58:3e:32:77:97:34:69:06:
                    d5:a1:a6:1e:ef:dd:c1:ad:6f:29:20:c8:e4:3d:48:
                    03:43:ea:53:e1:51:35:af:53:f9:e2:42:e4:ac:e0:
                    c4:d8:9f:65:d8:1e:08:72:f3:73:c8:33:48:ff:81:
                    41:2b:a5:22:06:a7:fc:ee:f1:df:fa:1e:99:5b:4a:
                    7b:5c:7d:2c:ec:de:87:a4:e9:67:16:7d:d5:25:94:
                    b2:a6:4d:44:56:8e:db:b6:ed:18:39:03:70:cb:97:
                    56:c2:6f:f8:d7:96:36:26:44:00:df:00:6b:41:ec:
                    4f:c4:77:d3:9c:c3:b0:36:3c:12:88:5f:53:4a:1a:
                    40:a0:95:65:62:63:6d:24:3a:1b:2e:65:78:ca:57:
                    f6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B0:8F:AB:35:5A:FF:B8:82:86:42:BB:F5:7D:8E:F7:0E:56:B7:4E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146057.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad4f::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:2e:fe:88:a0:85:3b:ad:2b:c6:f1:54:d8:9d:54:a4:12:a1:
         5b:6f:79:e0:d2:78:a6:5e:89:de:6e:87:19:9f:f3:83:07:a4:
         82:7c:bf:57:ca:6d:fa:f8:fe:00:5b:8a:09:21:6e:a4:86:55:
         33:b1:b6:08:1d:fd:c7:59:fb:84:1f:51:25:c1:80:ff:e0:d7:
         cf:78:3f:52:f4:f1:13:e8:64:37:09:04:0c:73:40:20:95:07:
         03:48:10:dc:c4:c8:01:b1:a8:62:5e:a3:b3:22:8e:f4:9b:5a:
         c3:90:a7:13:33:27:d6:e7:26:37:9b:ab:5d:bb:22:ca:e5:42:
         e7:30:94:1f:a2:70:4c:6d:c8:3e:15:fa:81:43:26:cb:13:fc:
         a4:bd:33:09:1e:35:3a:56:1f:11:03:ff:35:07:8f:70:cc:f0:
         a9:d0:26:46:85:84:e2:01:c7:74:fe:00:f0:e7:11:99:6e:83:
         84:7b:b1:e4:1d:4c:96:1a:a8:31:43:86:a4:f5:48:ce:44:2d:
         18:43:27:ee:ab:40:01:e1:cf:fd:41:7f:12:f7:26:18:a1:2e:
         bb:26:77:d0:d1:93:15:c5:61:ba:9b:e0:ac:0c:d5:95:88:12:
         cd:41:6a:77:53:6c:48:95:75:a4:45:0a:8b:a4:77:4e:e7:0d:
         4d:9c:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----