Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146058.roa
File:                     AS146058.roa (raw, json)
Hash identifier:          Pt+EbdcLiEWgSF9V+xQ/LUb/jyZL2nyqEHWyQPJ7uMU=
Subject key identifier:   1D:15:F6:F5:A6:6F:55:CE:CC:09:A2:1B:3E:AE:C1:BF:12:E7:E4:8E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       163A8F892DB42BB51489A7A6B10F80FD10CEC3E6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146058.roa
Signing time:             Fri 22 May 2026 01:50:17 +0000
ROA not before:           Fri 22 May 2026 01:45:17 +0000
ROA not after:            Fri 21 May 2027 01:50:17 +0000
asID:                     146058
IP address blocks:        240a:ad50::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3a:8f:89:2d:b4:2b:b5:14:89:a7:a6:b1:0f:80:fd:10:ce:c3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:17 2026 GMT
            Not After : May 21 01:50:17 2027 GMT
        Subject: CN=1D15F6F5A66F55CECC09A21B3EAEC1BF12E7E48E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:b9:e3:cc:d6:8e:46:b2:1e:53:21:0b:68:
                    b1:3d:fc:71:19:e4:b3:b5:4a:a3:1f:cd:81:2f:36:
                    70:bb:d6:ae:5f:94:d7:c6:08:5a:c4:eb:9b:84:d6:
                    70:a3:da:9d:60:5c:71:5e:3c:37:b7:44:4f:f5:43:
                    1f:16:c1:4d:4f:a6:d8:84:b5:1a:11:96:f6:e8:f3:
                    73:25:6f:7a:6d:62:eb:c6:19:a3:4c:e0:c2:7c:bc:
                    a8:82:00:c9:e2:5a:53:00:54:00:85:df:6b:3a:3d:
                    e2:fe:2e:17:17:ff:6c:12:3d:04:2f:27:1a:74:0b:
                    e6:1d:38:40:b4:c9:73:cb:97:8e:2d:90:23:6c:57:
                    4a:03:f9:0a:c6:34:12:90:50:d4:82:dd:63:a2:6d:
                    ec:c0:4c:0f:96:52:ac:b0:bc:ba:6e:56:3f:5f:b7:
                    35:31:72:a2:ed:ae:a4:a3:c5:4d:51:52:4e:fb:13:
                    4b:9c:45:81:23:4c:5b:96:bf:e6:de:27:09:88:0b:
                    4e:7b:07:d6:95:59:4a:a5:58:95:80:82:a5:fe:39:
                    b5:f3:03:48:71:d6:e0:50:c4:80:d0:8c:a5:61:5c:
                    e1:45:6c:23:31:72:7a:dc:60:80:3f:81:4c:02:0d:
                    11:b8:d0:92:1a:e6:6d:b9:3f:43:7e:a5:06:c3:e9:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:15:F6:F5:A6:6F:55:CE:CC:09:A2:1B:3E:AE:C1:BF:12:E7:E4:8E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad50::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:7d:77:a8:b6:2e:82:11:8c:f0:47:ad:83:90:7d:08:37:bc:
         51:3e:63:26:ce:84:8b:a3:28:9c:a9:d6:e5:72:50:b3:9d:34:
         0e:c0:40:3d:a8:5a:3f:66:57:27:40:45:f1:86:c6:28:4d:5e:
         30:c5:19:a8:7b:41:4e:ee:7e:de:7d:12:bb:f4:fc:34:03:cc:
         00:24:53:22:c5:5d:d5:4a:cb:6d:5f:d5:2e:c5:18:7a:a1:fd:
         cc:46:c9:b9:2b:30:fd:5c:f8:2d:88:da:3a:d4:10:97:b2:b1:
         72:83:d5:84:ab:c3:86:7b:b2:b8:c2:b5:a2:eb:5c:e8:84:c0:
         6c:64:bd:d0:30:a3:76:01:06:c6:aa:f2:70:01:62:08:9a:5a:
         b8:ca:c9:c1:04:69:3f:fe:fe:6c:dd:dd:f6:0e:e3:42:ab:d4:
         3d:66:7f:03:bd:2e:df:28:9d:1f:f2:9d:ca:a4:c4:67:b4:e3:
         bf:a7:68:f4:d8:0e:6b:c0:a8:21:11:ac:db:5e:ad:69:03:11:
         99:99:fd:4f:7f:dd:1c:96:85:4a:c5:4e:37:48:90:2e:2c:9f:
         8d:91:b6:81:5b:19:3a:ed:c1:e3:67:76:fe:6e:bf:ee:c6:e8:
         4e:e2:3b:de:2e:4c:72:31:dd:94:76:fb:27:5d:45:ae:ef:3f:
         b1:14:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----