Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146162.roa
File:                     AS146162.roa (raw, json)
Hash identifier:          b0oL8zhPmm2BWda9o+j8guTfNmcrbSTkT/H0owf5nIQ=
Subject key identifier:   74:6E:B8:D4:A2:6C:8D:F4:39:9B:CE:86:50:B1:B2:03:BD:58:2D:36
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5C09B7DF9B376DE64C4CDCF1C1C83ACAC09DDC1D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146162.roa
Signing time:             Tue 26 May 2026 01:13:05 +0000
ROA not before:           Tue 26 May 2026 01:08:05 +0000
ROA not after:            Tue 25 May 2027 01:13:05 +0000
asID:                     146162
IP address blocks:        240a:adb8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:09:b7:df:9b:37:6d:e6:4c:4c:dc:f1:c1:c8:3a:ca:c0:9d:dc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:05 2026 GMT
            Not After : May 25 01:13:05 2027 GMT
        Subject: CN=746EB8D4A26C8DF4399BCE8650B1B203BD582D36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:90:4d:0e:8c:96:ba:91:fe:2e:2a:59:06:
                    f2:e0:db:fc:37:9e:4d:dd:f2:2d:2a:a5:75:c6:6a:
                    51:a2:94:5b:a9:a0:84:01:ed:6f:bd:eb:52:9f:53:
                    c4:ec:95:81:c6:08:92:ff:c4:d6:eb:84:5d:c2:15:
                    bc:2b:7c:1d:85:3b:47:42:b2:44:32:ac:26:8b:b2:
                    01:af:2b:f3:de:24:6f:31:38:7f:bd:4f:64:e0:56:
                    ec:5d:3d:82:a0:c0:99:44:2b:26:16:87:6f:1e:34:
                    a1:af:6e:34:fb:f0:5a:0f:57:5f:49:d7:7f:64:80:
                    5a:c1:5d:5b:91:fb:f9:0f:97:91:0f:68:8f:d2:ca:
                    02:8d:83:b7:94:73:77:76:1e:04:42:84:2f:a6:87:
                    53:64:53:20:6c:94:54:a6:3d:f4:36:5d:c8:18:3c:
                    cd:5b:8c:62:59:22:98:27:c9:1c:17:b8:43:d2:6e:
                    79:a6:56:92:21:86:f0:f5:8c:89:c4:99:ec:47:66:
                    c0:d7:f5:03:14:c9:cc:96:10:01:53:55:00:aa:c0:
                    57:7e:48:6b:92:07:01:b2:23:59:8c:34:fc:92:48:
                    18:62:7e:a6:0d:82:a2:8d:26:24:5f:d5:8a:4a:05:
                    ac:c1:e3:48:77:a6:8e:b2:5f:b6:d8:3a:71:6c:3d:
                    60:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6E:B8:D4:A2:6C:8D:F4:39:9B:CE:86:50:B1:B2:03:BD:58:2D:36
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146162.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:3b:c2:07:a7:45:6a:b2:19:e1:6b:3b:49:e1:b1:05:f3:ad:
         ae:8a:39:b5:7d:4b:88:b2:3a:31:16:67:13:db:a1:03:85:40:
         08:8b:8c:e1:04:b0:0b:31:56:ff:3e:be:c4:3a:33:29:f9:64:
         4f:a9:d9:8f:53:68:be:cb:01:fc:3e:ea:c8:6a:fe:f5:3a:65:
         dd:8a:c5:d7:50:06:50:c2:4d:aa:92:8b:16:27:82:17:78:d3:
         02:49:84:96:87:56:3f:34:33:06:f9:16:b0:06:f3:8e:e7:36:
         4c:1d:ba:77:23:eb:05:a7:65:8c:96:0e:17:88:9c:cd:cc:a8:
         2e:fb:a8:41:f5:8e:50:45:79:2e:d9:9e:6c:c5:cf:41:cb:50:
         54:99:48:ec:ff:c2:03:24:cc:c6:61:19:8c:e0:bd:9d:13:54:
         d3:b0:13:8c:53:39:aa:8c:a9:fc:d6:4f:c5:ee:85:67:72:b9:
         f9:22:46:1e:f0:1f:12:41:46:fd:09:db:54:a0:2a:6e:54:7c:
         32:52:0d:a5:8d:39:bd:37:c8:ec:64:09:9e:73:e4:09:80:96:
         61:a0:6f:c1:40:f6:8c:33:af:7a:42:00:a4:45:91:d5:6e:94:
         8f:28:e0:fb:c1:87:df:84:a9:4a:02:a3:07:f0:e5:1e:93:e2:
         b3:b7:b9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----