Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146068.roa
File:                     AS146068.roa (raw, json)
Hash identifier:          LqZG4AoXtdxl2DBR1LbxfmzAR8rvr/dDYYLCHnZ5A/g=
Subject key identifier:   EA:CE:89:9A:68:30:93:B2:8E:58:64:2F:24:0F:0F:51:1E:45:09:A6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       39A9223671A28C7692B12B12E4AEB21DA97D8B1C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146068.roa
Signing time:             Fri 22 May 2026 02:47:26 +0000
ROA not before:           Fri 22 May 2026 02:42:26 +0000
ROA not after:            Fri 21 May 2027 02:47:26 +0000
asID:                     146068
IP address blocks:        240a:ad5a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a9:22:36:71:a2:8c:76:92:b1:2b:12:e4:ae:b2:1d:a9:7d:8b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:26 2026 GMT
            Not After : May 21 02:47:26 2027 GMT
        Subject: CN=EACE899A683093B28E58642F240F0F511E4509A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d0:6e:99:23:cc:e7:4b:7d:05:84:8b:90:4f:
                    e0:45:75:75:3b:ba:6a:12:f7:56:8f:83:68:c9:6a:
                    9d:ed:d2:2a:fd:35:f2:61:60:26:97:8e:68:2c:bf:
                    18:2f:60:0b:be:2f:d3:98:d7:3b:c7:a5:28:17:88:
                    e5:21:5f:05:d2:ce:bb:d9:d8:4c:9b:3f:8a:76:3e:
                    c7:95:e3:e4:9b:58:71:4e:01:57:2f:c6:42:51:7f:
                    c0:1b:b9:00:86:5b:e9:ef:2b:04:3c:98:c2:0f:7a:
                    41:d2:fc:cd:ee:10:ca:56:27:a8:14:38:82:41:ec:
                    36:53:14:9a:ba:f8:a8:2d:f1:2f:fb:55:4c:ff:b4:
                    75:25:44:b2:b8:51:31:00:c3:20:e5:d9:5b:93:b6:
                    6e:00:0c:fa:44:36:19:40:73:45:5a:36:09:88:50:
                    a9:cd:cc:30:1c:b1:9a:6d:63:45:a4:d3:eb:32:f7:
                    15:d0:14:fd:14:68:2d:ce:2c:5e:d4:a3:fa:f3:40:
                    0e:3f:1a:86:b9:65:e0:c8:5c:27:b0:51:2b:03:03:
                    3b:ef:6d:58:98:fc:5a:55:22:3b:35:4d:41:5f:d9:
                    7e:68:f7:bc:ca:be:f7:f8:f4:50:a5:9d:eb:fa:c7:
                    33:4c:a2:f5:bd:f2:b5:87:6b:d3:77:9b:07:fa:84:
                    7e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CE:89:9A:68:30:93:B2:8E:58:64:2F:24:0F:0F:51:1E:45:09:A6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146068.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad5a::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:9a:1c:98:23:ad:df:d6:60:ad:d3:bc:dc:53:f2:74:79:d4:
         0a:03:cf:13:13:33:99:3a:7d:50:52:1b:14:64:83:cb:cc:52:
         54:cd:91:50:02:37:a3:a2:45:e4:e1:73:3d:e2:8e:d8:ce:37:
         70:fe:76:eb:67:5a:8b:c6:0e:f1:d4:7f:cf:cc:e8:af:a5:d5:
         a4:a3:39:49:77:02:61:2a:6e:8c:a2:28:0a:0b:c8:08:ea:2a:
         ab:ca:ef:9b:17:e3:81:d5:72:ef:be:fd:3b:02:e1:2b:3f:9c:
         cb:c0:74:1a:87:9f:26:2b:88:34:a2:e7:64:96:ae:95:0b:28:
         12:3e:7a:33:a9:85:2b:85:7c:1e:62:e0:29:31:12:38:15:dc:
         69:1d:4f:f9:83:36:8f:71:a0:2a:12:86:73:99:cf:bb:48:e8:
         f6:c0:60:55:2a:bc:e1:ee:ae:a1:79:c7:b1:f8:8f:1b:ae:fd:
         9d:a3:7e:a8:62:f2:d8:64:b0:05:c1:5d:65:b2:48:0a:bb:7e:
         49:75:2b:c5:2d:dc:9e:ae:19:de:6d:1b:97:eb:3e:2c:60:9e:
         72:e5:a5:5f:c0:0f:ec:b5:ac:e3:07:e7:3c:46:56:87:08:ec:
         0a:ba:3c:c8:63:f9:8d:48:94:c2:3f:a1:c6:6c:ee:3e:9c:ad:
         6d:d7:ec:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----