Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146151.roa
File:                     AS146151.roa (raw, json)
Hash identifier:          oI8jxyA5hi2oPaz2WQnkMNB0fArket+t63JPzwX8geA=
Subject key identifier:   3E:94:B3:C3:AE:84:D4:D9:B6:2F:1C:C5:A5:53:76:8A:1D:F0:29:83
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       27B113D4803AC4EBBE1ABB190FEF32A196FD7415
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146151.roa
Signing time:             Tue 26 May 2026 06:31:04 +0000
ROA not before:           Tue 26 May 2026 06:26:04 +0000
ROA not after:            Tue 25 May 2027 06:31:04 +0000
asID:                     146151
IP address blocks:        240a:adad::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b1:13:d4:80:3a:c4:eb:be:1a:bb:19:0f:ef:32:a1:96:fd:74:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:26:04 2026 GMT
            Not After : May 25 06:31:04 2027 GMT
        Subject: CN=3E94B3C3AE84D4D9B62F1CC5A553768A1DF02983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:ea:62:8b:24:c5:e2:f6:be:58:47:17:e8:
                    92:34:6a:b6:c4:66:bf:9e:f5:04:eb:d4:cc:f5:16:
                    8c:7a:43:d1:13:00:d8:30:ca:6c:03:b0:35:20:f5:
                    cd:af:2b:5d:ea:3b:a7:fd:18:3e:0e:76:dd:5f:3e:
                    e2:a5:c0:97:10:7c:a1:46:9c:99:3d:7d:7e:61:69:
                    c1:eb:d1:0b:04:97:fe:f6:30:83:b9:66:31:11:da:
                    5a:e2:b4:1f:f8:7c:e2:56:54:c6:f6:63:06:71:a6:
                    05:35:91:be:f2:5d:88:f6:d1:4d:50:f0:c9:72:1a:
                    43:ef:19:f2:cc:70:91:13:48:78:e2:ff:b7:7f:7d:
                    3e:09:1e:58:23:a4:00:fd:eb:64:bc:5c:62:46:b1:
                    ca:2b:de:ad:fc:54:c3:7c:9f:cf:d3:41:dc:fc:dd:
                    4e:4d:d8:d4:e9:c1:16:78:72:82:6e:43:6b:19:38:
                    e3:ac:6d:98:4b:e9:f2:86:af:6e:01:c9:bd:b7:5c:
                    92:4a:85:96:15:94:39:a3:04:6d:58:e7:ce:d7:23:
                    57:8e:b8:6f:8f:05:30:82:7e:34:2a:ac:c8:10:ec:
                    48:53:7c:ba:ff:54:70:5a:bf:fe:21:d3:df:15:51:
                    ca:ee:99:a9:9b:c9:43:94:06:df:e2:4e:4f:6f:17:
                    17:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:94:B3:C3:AE:84:D4:D9:B6:2F:1C:C5:A5:53:76:8A:1D:F0:29:83
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146151.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adad::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:d0:f7:c2:af:0c:d5:56:48:1f:d2:51:7e:b4:a1:38:ae:ab:
         59:39:9d:cf:09:1f:bf:32:a2:11:7c:eb:ae:2d:48:10:34:bd:
         5a:98:f5:ea:ae:4e:8b:1d:1c:5d:ee:4e:31:d6:85:d8:81:0a:
         52:b2:0b:71:2a:6e:a6:a2:45:ff:67:b7:e1:3f:ee:45:a2:54:
         4a:4d:15:e8:4e:75:23:9d:f1:77:02:d4:a6:03:ec:1b:99:00:
         e8:68:5b:43:50:ec:3d:12:93:6e:c6:2b:1e:f0:78:90:22:2f:
         dc:80:42:b7:e5:0c:d5:e7:10:76:0d:05:55:77:19:79:59:2f:
         89:e6:68:c2:c6:6f:15:ec:07:fe:dc:30:88:48:64:92:60:80:
         54:20:1e:51:6c:28:7e:8c:15:39:0c:75:f1:aa:30:5a:db:b1:
         d7:09:dd:55:91:4e:cb:b5:9a:f4:dc:9c:65:44:d6:86:2a:f5:
         88:c7:6a:04:6a:53:5c:ac:bc:7c:11:b9:e4:36:bb:93:20:37:
         6f:63:78:e9:67:4a:f1:4d:36:8b:a4:1b:e2:cd:6a:d4:d1:de:
         39:22:b6:a8:78:4b:3f:7a:10:53:fe:dd:22:39:7b:e5:7e:78:
         76:f5:67:f1:f7:66:28:f7:df:c7:ed:29:54:c4:c4:c0:4f:a9:
         42:ca:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----