Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146101.roa
File:                     AS146101.roa (raw, json)
Hash identifier:          nJoO71ql6tsMWBqOZKBivbY9HAQOU/N9s1YW2/mvUiQ=
Subject key identifier:   DB:90:19:CB:9C:20:B1:FE:8C:DE:5D:00:EF:34:8D:71:50:01:E5:C9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7AF4D8074D958D552527A33B2A6833AFEACF5AA5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146101.roa
Signing time:             Fri 22 May 2026 06:27:59 +0000
ROA not before:           Fri 22 May 2026 06:22:59 +0000
ROA not after:            Fri 21 May 2027 06:27:59 +0000
asID:                     146101
IP address blocks:        240a:ad7b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f4:d8:07:4d:95:8d:55:25:27:a3:3b:2a:68:33:af:ea:cf:5a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:59 2026 GMT
            Not After : May 21 06:27:59 2027 GMT
        Subject: CN=DB9019CB9C20B1FE8CDE5D00EF348D715001E5C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7f:b1:31:94:c5:c7:81:ed:45:36:2e:75:e7:
                    48:f7:e3:3b:35:92:18:45:1f:8d:26:8f:59:71:f9:
                    af:8b:0c:a8:32:48:cf:13:c7:f9:7e:c5:c8:cd:5d:
                    64:b2:84:55:31:1e:e6:44:8e:e0:8d:88:92:02:67:
                    44:d1:0d:1d:96:b4:5b:64:b8:f3:1b:4a:c7:46:f4:
                    a3:52:20:54:37:61:d3:10:8f:f6:ea:6b:24:6b:80:
                    28:8d:3c:f1:9c:1b:e5:13:f3:d7:58:1c:35:0c:11:
                    c5:9e:ee:87:09:be:8f:13:ec:7c:c4:25:25:07:d8:
                    87:95:ea:cd:71:25:01:8e:f8:c2:93:e3:a2:17:c7:
                    42:77:7f:09:6a:b5:5d:9e:4d:03:e0:94:10:33:8d:
                    e3:c7:a2:4d:fe:3e:74:d8:2a:95:5c:e6:1c:c2:fc:
                    c8:60:98:e1:87:8f:a1:92:27:2c:24:b6:da:c2:2b:
                    f5:8c:26:61:83:1f:1b:37:cf:be:e5:01:2f:95:58:
                    c7:9c:2d:c7:ab:12:09:05:8d:7a:6c:c9:be:69:89:
                    dd:c4:88:4e:91:9e:89:1b:0c:cb:64:5a:3c:56:79:
                    91:bb:b8:6c:33:13:61:93:7a:92:9e:35:9d:0a:19:
                    d6:17:2d:60:64:4e:ff:69:10:81:6b:0b:54:d2:97:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:90:19:CB:9C:20:B1:FE:8C:DE:5D:00:EF:34:8D:71:50:01:E5:C9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146101.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad7b::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:64:9a:79:ec:34:4e:1f:23:0b:59:d8:4f:6a:88:a1:bb:b7:
         b6:f5:db:1c:bd:0f:e7:5f:38:f9:59:ea:56:ee:c3:92:5a:f9:
         80:da:65:27:2c:4e:9d:08:3b:67:95:e5:dc:30:b0:44:4d:6e:
         46:c2:4f:e6:38:26:f3:0f:bf:d1:79:56:d5:74:fc:c0:bf:31:
         81:2f:17:a5:3a:22:e4:a9:bb:e8:87:ee:85:14:28:0e:fa:ef:
         96:f9:85:3c:58:9c:52:48:0d:d9:5a:03:ac:7b:61:83:a4:4c:
         e5:c3:7e:90:77:b9:0a:a9:18:15:b2:2c:ac:2e:67:5c:64:a2:
         31:dc:73:ce:d1:71:a6:24:89:fd:ae:2a:00:71:5d:94:a5:2a:
         c4:96:31:f8:34:cb:f1:c0:17:eb:20:20:a4:d9:59:9e:2b:f1:
         7a:22:6c:0d:1d:11:61:9d:9a:08:a2:a3:bf:98:37:9e:c9:02:
         cc:f6:4c:2a:27:e4:19:20:3b:db:20:84:80:a8:3c:07:2f:3e:
         e6:04:32:12:4f:08:99:fd:dd:0c:70:06:cf:5e:8f:68:89:af:
         a6:be:9a:a2:34:7d:f4:df:c5:2a:90:40:55:d1:57:12:c6:80:
         e5:07:2a:06:d5:86:66:66:ec:71:ce:2b:c3:72:75:01:90:1e:
         b7:2c:98:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----