Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146100.roa
File:                     AS146100.roa (raw, json)
Hash identifier:          fnbHSr/DT0k93kCiJ/2N5ZvbeBMYqPHgu7lv9+tjz+o=
Subject key identifier:   12:DA:11:75:14:27:54:1C:01:03:D9:38:26:EB:D1:42:FF:62:67:E4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6B2E694F0852CF0AE002895BB56FE71425FAD258
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146100.roa
Signing time:             Tue 26 May 2026 03:17:08 +0000
ROA not before:           Tue 26 May 2026 03:12:08 +0000
ROA not after:            Tue 25 May 2027 03:17:08 +0000
asID:                     146100
IP address blocks:        240a:ad7a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2e:69:4f:08:52:cf:0a:e0:02:89:5b:b5:6f:e7:14:25:fa:d2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:08 2026 GMT
            Not After : May 25 03:17:08 2027 GMT
        Subject: CN=12DA11751427541C0103D93826EBD142FF6267E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:07:42:d6:11:7f:71:83:ab:1a:51:98:df:59:
                    5a:e2:93:67:3f:b5:b9:f9:89:be:17:68:b8:3b:54:
                    18:d0:ff:c6:a6:46:b1:72:2c:bf:35:d5:6a:5f:91:
                    91:f8:fd:c3:6c:09:a1:90:f6:fc:23:4d:94:da:9b:
                    f4:a1:53:3e:f4:76:e8:dd:7c:8e:88:bd:ce:da:55:
                    54:1b:a1:05:df:ae:4e:9c:4b:f5:0f:38:72:c0:f7:
                    85:08:b0:0e:cc:32:c1:21:cd:ed:fe:60:79:33:ea:
                    fc:9b:74:b4:fc:e3:f7:f2:2e:25:c9:ce:8c:39:97:
                    1f:f6:2b:4f:7c:e8:10:4e:7e:a3:fe:93:1a:02:ea:
                    a6:65:b7:0e:01:59:a3:8b:d1:22:0a:ad:62:3f:dd:
                    c0:0c:3a:1a:2c:60:cd:cf:72:49:73:da:14:86:4e:
                    ef:27:67:89:86:e9:44:ed:26:51:cd:c2:28:93:81:
                    2e:a7:0d:91:cc:d2:ea:a8:2c:58:71:6f:03:ce:df:
                    d1:9f:b9:51:59:59:dd:4b:59:99:fd:73:00:b7:20:
                    c3:2c:8c:a6:2d:dd:37:6c:85:1f:54:79:7c:6a:ce:
                    fc:af:d3:1f:e6:ff:0e:91:2f:68:23:ab:00:6b:99:
                    6a:18:e5:d1:96:d7:c0:f5:ba:bd:ea:8e:91:02:25:
                    c9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DA:11:75:14:27:54:1C:01:03:D9:38:26:EB:D1:42:FF:62:67:E4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad7a::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:b0:2c:d8:68:22:cf:10:ca:c4:ca:f8:07:61:31:aa:01:9a:
         18:28:86:3c:53:60:6b:53:d7:ac:a8:50:d9:ac:fd:99:12:a2:
         c1:8c:d2:f5:d8:b3:37:39:4c:56:78:1e:db:64:78:02:68:2a:
         9a:30:b4:d1:e0:26:9d:b9:0c:a4:ce:a7:89:9a:4a:02:aa:d4:
         ba:40:13:e3:58:dc:bf:f1:78:99:4d:20:e4:2f:e2:47:63:54:
         85:6f:d8:bd:33:40:d2:f4:17:28:83:60:e6:ef:24:ee:0a:5a:
         51:64:bf:a3:f4:c4:71:dc:d6:64:3e:67:e2:3b:fa:27:0e:28:
         8c:01:2d:33:b2:27:ec:b9:a5:5c:fb:23:06:d6:0f:9e:a7:21:
         0e:f9:18:3c:79:86:9c:ed:2a:74:b3:22:ac:fc:2a:fc:7a:e0:
         68:74:21:14:df:03:cd:14:70:ec:38:83:ab:6e:2d:93:81:df:
         4c:a2:97:58:4d:49:83:c0:df:c6:ba:6e:4c:1f:fc:6c:17:55:
         33:73:9b:f4:7b:dc:e5:28:0b:d7:5a:c2:0f:a6:fd:01:9b:26:
         3b:0d:b4:40:3c:aa:6a:8d:05:8d:79:7d:93:09:ea:95:33:11:
         06:dd:3d:80:8c:c1:f0:2f:60:ca:74:53:be:c9:1d:8d:4a:ca:
         03:e0:39:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----