Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146137.roa
File:                     AS146137.roa (raw, json)
Hash identifier:          reri6yWuuWFSu496Xr2RW9KU9bRaxLkC7GOXNYs54Po=
Subject key identifier:   7D:B0:6A:E4:CD:E8:12:5F:0F:99:55:45:20:8D:C4:D8:EF:F2:E0:3B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3F3608AF3BB1BC9BBF4E0819C34FAF0A85FFD03E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146137.roa
Signing time:             Mon 25 May 2026 01:50:57 +0000
ROA not before:           Mon 25 May 2026 01:45:57 +0000
ROA not after:            Mon 24 May 2027 01:50:57 +0000
asID:                     146137
IP address blocks:        240a:ad9f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:36:08:af:3b:b1:bc:9b:bf:4e:08:19:c3:4f:af:0a:85:ff:d0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:45:57 2026 GMT
            Not After : May 24 01:50:57 2027 GMT
        Subject: CN=7DB06AE4CDE8125F0F995545208DC4D8EFF2E03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:5c:2a:a6:d2:52:0d:bb:89:56:88:e6:0b:
                    7b:de:ea:0d:dd:03:c3:82:87:2c:16:1c:f3:d7:e3:
                    f4:2d:78:db:b9:9c:1d:8f:0c:f8:37:d9:df:a7:f2:
                    3d:d9:30:48:bc:51:7b:06:f1:fa:f8:4a:12:4c:b4:
                    39:2a:2e:7e:1c:99:a2:bb:15:f6:f9:75:24:6c:32:
                    ac:c0:43:79:18:18:ce:94:a9:ca:18:32:90:58:00:
                    62:dd:52:34:86:6c:fb:0e:69:e9:11:ae:46:48:68:
                    2d:00:fe:f6:ff:09:02:2d:d1:eb:a4:0f:55:be:9f:
                    bd:29:43:d6:1e:77:fa:64:39:c8:22:1a:82:e6:4d:
                    cc:b5:c7:f7:19:86:21:06:90:c3:f3:c1:fb:95:50:
                    0d:5d:4a:54:07:9b:2d:ac:ba:31:42:e6:83:1d:1c:
                    0f:73:3f:3e:a7:ee:95:ac:a5:09:da:af:c8:83:17:
                    d6:5e:21:3e:8b:6f:3c:d7:35:6a:aa:a9:bc:93:08:
                    45:e8:8d:a2:9f:60:e4:fe:46:17:5f:f3:b9:02:f3:
                    cd:b1:5e:07:d8:eb:65:57:be:80:9e:e9:28:b6:14:
                    14:ac:df:ff:b9:3c:7b:65:92:d4:94:74:0e:6f:ec:
                    b7:31:6a:f5:b3:c7:9b:02:42:f7:a5:0f:40:29:de:
                    ef:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B0:6A:E4:CD:E8:12:5F:0F:99:55:45:20:8D:C4:D8:EF:F2:E0:3B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad9f::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:ad:fc:f3:6e:77:f3:89:24:15:80:de:94:88:39:19:4f:cb:
         55:9c:54:0d:37:9e:39:f5:0f:94:3f:69:93:46:38:5d:36:72:
         3b:8d:8b:b2:8f:2c:48:5c:b0:f9:b0:30:de:db:2c:41:ea:05:
         09:55:8d:c5:63:ce:fd:5a:59:69:dd:64:93:71:02:88:8d:fd:
         15:f3:8a:41:b0:23:fe:22:fc:ed:4b:2d:2c:dc:07:fa:01:d3:
         48:70:7f:e4:88:ff:bf:c5:99:99:08:bb:88:76:2c:3d:2c:cc:
         1d:34:a7:4a:2b:cf:6d:00:4c:d3:68:5a:0b:98:df:5b:d3:e0:
         7d:eb:67:1f:c7:d6:1c:be:b3:10:ff:19:9a:c4:cd:71:63:bc:
         5c:66:bd:69:b9:1c:bc:a7:15:e8:37:89:ff:8a:f5:44:5c:19:
         21:56:ca:33:62:6a:5d:e9:00:fe:c9:6b:fa:ae:4a:09:0e:79:
         99:4d:aa:e7:8a:3b:55:a9:76:a8:a0:86:5f:0c:19:60:f8:12:
         c8:7b:65:bd:58:5e:3e:9a:63:d6:7c:4b:ca:68:e4:c3:15:43:
         97:7b:64:e6:28:11:a3:1f:84:a2:77:58:ac:90:40:86:5a:2c:
         d9:7d:30:5d:1e:a9:a1:f3:27:75:02:63:19:9e:da:a6:d5:0e:
         1a:67:e9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----