Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146136.roa
File:                     AS146136.roa (raw, json)
Hash identifier:          4rMGRJnAHa3dC4ybT61j83/UR5dMi3ABX9q9PRqBXRU=
Subject key identifier:   E1:49:06:E6:28:E3:59:41:47:C9:3B:8C:EF:5D:FD:51:A1:42:0F:BE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5C0A40E0885999EE5C36EAC6169F98370C9F4738
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146136.roa
Signing time:             Tue 26 May 2026 06:30:30 +0000
ROA not before:           Tue 26 May 2026 06:25:30 +0000
ROA not after:            Tue 25 May 2027 06:30:30 +0000
asID:                     146136
IP address blocks:        240a:ad9e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0a:40:e0:88:59:99:ee:5c:36:ea:c6:16:9f:98:37:0c:9f:47:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:30 2026 GMT
            Not After : May 25 06:30:30 2027 GMT
        Subject: CN=E14906E628E3594147C93B8CEF5DFD51A1420FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:48:06:6e:c2:52:de:72:71:71:b8:0f:a5:
                    87:84:1d:c6:98:5a:9e:31:58:1f:5e:7f:50:8c:e7:
                    27:0d:20:bf:44:73:85:62:49:83:c3:27:17:68:6e:
                    6f:d8:dd:80:ba:7e:5d:45:64:68:8f:45:05:04:60:
                    f5:21:e6:48:92:d1:33:00:0c:f4:85:6c:53:9c:66:
                    61:bf:78:49:d9:7c:f1:0c:8f:06:5f:5d:ea:0b:c0:
                    8f:76:25:32:70:a9:39:9f:1b:51:12:b2:d2:5c:60:
                    74:a5:6f:57:c6:9c:dd:3c:93:12:c4:0d:29:b0:9d:
                    9d:8e:fe:47:ba:e7:00:00:5c:a4:4f:1e:86:ff:76:
                    ea:7a:8a:04:aa:ff:a3:bf:19:02:e0:54:12:92:12:
                    ba:db:eb:87:b4:a5:ef:3a:ae:f3:c9:dd:64:18:15:
                    a3:77:e0:6a:bc:b4:29:0b:ea:e1:8d:fc:b7:27:0a:
                    65:3a:3c:b6:bc:d2:2f:9a:46:e0:02:7d:fa:48:ef:
                    36:7f:dd:32:8b:2e:d4:6f:f6:99:6b:9b:57:8e:e9:
                    fe:da:53:35:6b:dd:d9:7a:94:f6:b4:3d:a7:14:ec:
                    51:4a:4c:5f:ff:f4:50:6a:73:68:aa:68:db:20:41:
                    e0:65:32:d0:78:32:06:96:ff:34:af:9e:fb:89:43:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:49:06:E6:28:E3:59:41:47:C9:3B:8C:EF:5D:FD:51:A1:42:0F:BE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad9e::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:e6:91:dd:2f:c8:a1:b1:01:2c:35:db:b7:62:08:23:ef:88:
         6b:e7:ba:73:81:b5:a8:09:7d:e0:26:e9:92:e8:82:0a:c5:76:
         2f:14:f2:75:d3:30:48:fd:4a:f7:d6:58:4f:83:82:39:c1:68:
         b2:b2:91:79:30:91:0d:d0:17:1f:84:db:c0:ba:de:de:c8:90:
         c7:f8:92:ab:5b:fe:fc:e7:7d:0c:9d:c5:49:e7:e5:6a:d9:ee:
         88:da:57:1d:f8:8d:98:82:7f:90:21:ef:6c:48:7e:77:1c:51:
         20:9c:8c:52:77:39:74:23:36:1c:61:6d:ac:ca:07:04:76:06:
         a1:ee:83:78:5a:cf:47:04:7e:77:79:71:04:31:85:99:ba:b4:
         8d:7b:b4:fc:8d:ba:3a:ac:36:ba:5d:4f:85:48:f7:5d:71:25:
         9d:1e:07:aa:65:f9:5d:44:f4:9a:ad:26:2f:1f:40:20:de:99:
         cf:0b:f8:9e:78:04:a1:2d:77:5e:d0:0b:56:f5:9e:fd:ee:39:
         9e:44:d4:18:48:b1:23:4f:cd:59:4e:3b:73:f0:c8:63:dc:b8:
         29:da:14:91:74:7a:57:76:41:a0:17:09:83:ad:4d:3e:68:a1:
         f9:af:a7:b9:3b:0b:97:01:88:0b:4b:36:53:55:ce:da:30:d9:
         99:e3:1f:8b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXApA4IhZme5cNurGFp+YNwyfRzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1MzBaFw0yNzA1MjUwNjMwMzBaMDMxMTAvBgNV
BAMTKEUxNDkwNkU2MjhFMzU5NDE0N0M5M0I4Q0VGNURGRDUxQTE0MjBGQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAkUgGbsJS3nJxcbgPpYeEHcaY
Wp4xWB9ef1CM5ycNIL9Ec4ViSYPDJxdobm/Y3YC6fl1FZGiPRQUEYPUh5kiS0TMA
DPSFbFOcZmG/eEnZfPEMjwZfXeoLwI92JTJwqTmfG1ESstJcYHSlb1fGnN08kxLE
DSmwnZ2O/ke65wAAXKRPHob/dup6igSq/6O/GQLgVBKSErrb64e0pe86rvPJ3WQY
FaN34Gq8tCkL6uGN/LcnCmU6PLa80i+aRuACffpI7zZ/3TKLLtRv9plrm1eO6f7a
UzVr3dl6lPa0PacU7FFKTF//9FBqc2iqaNsgQeBlMtB4MgaW/zSvnvuJQ9ALAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU4UkG5ijjWUFHyTuM7139UaFCD74wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtnjANBgkqhkiG9w0BAQsFAAOCAQEAWuaR
3S/IobEBLDXbt2III++Ia+e6c4G1qAl94CbpkuiCCsV2LxTyddMwSP1K99ZYT4OC
OcFosrKReTCRDdAXH4TbwLre3siQx/iSq1v+/Od9DJ3FSeflatnuiNpXHfiNmIJ/
kCHvbEh+dxxRIJyMUnc5dCM2HGFtrMoHBHYGoe6DeFrPRwR+d3lxBDGFmbq0jXu0
/I26Oqw2ul1PhUj3XXElnR4HqmX5XUT0mq0mLx9AIN6Zzwv4nngEoS13XtALVvWe
/e45nkTUGEixI0/NWU47c/DIY9y4KdoUkXR6V3ZBoBcJg61NPmih+a+nuTsLlwGI
C0s2U1XO2jDZmeMfiw==
-----END CERTIFICATE-----