Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146172.roa
File:                     AS146172.roa (raw, json)
Hash identifier:          tx6ZiSfblTmXTWKTr8ZMTY/lZDMHXZuU/F3YN4S0tHE=
Subject key identifier:   6D:62:D3:F6:FE:91:5F:7A:37:18:3F:56:0A:B6:62:EC:EF:54:94:A0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       550D14A9FE5F3DEB1D4E9B0E575DCF276FA4491A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146172.roa
Signing time:             Fri 22 May 2026 02:47:30 +0000
ROA not before:           Fri 22 May 2026 02:42:30 +0000
ROA not after:            Fri 21 May 2027 02:47:30 +0000
asID:                     146172
IP address blocks:        240a:adc2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0d:14:a9:fe:5f:3d:eb:1d:4e:9b:0e:57:5d:cf:27:6f:a4:49:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:30 2026 GMT
            Not After : May 21 02:47:30 2027 GMT
        Subject: CN=6D62D3F6FE915F7A37183F560AB662ECEF5494A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:c0:c0:08:c8:cf:ab:b3:fc:b6:18:74:3f:
                    60:14:83:0f:e1:84:28:54:f5:50:4e:a9:85:a8:29:
                    e6:07:7f:42:73:e9:58:f1:7f:6a:4c:24:8e:22:2a:
                    1f:71:39:d0:c5:f0:6d:b9:8e:6f:9b:3b:ae:18:9d:
                    ea:80:53:c5:d5:21:bc:3f:5a:c6:aa:37:68:bf:bd:
                    46:25:b0:14:8c:21:5e:60:10:69:e4:28:5c:21:12:
                    c4:86:b9:b3:f8:38:8d:56:c4:6d:f3:ca:71:33:9a:
                    67:de:16:5a:dc:e5:51:b2:f0:64:b0:f4:f3:bf:79:
                    95:f9:8b:41:de:91:39:f4:49:fa:54:fe:2f:6e:78:
                    6c:de:a7:58:f0:af:86:03:90:23:8c:24:f3:c9:c7:
                    c7:b7:8c:0b:a7:74:08:d0:f4:c9:39:d5:f2:6c:cc:
                    6d:be:68:7a:0f:3c:cf:f5:d0:f1:0b:47:fd:5f:96:
                    45:ae:5d:c6:24:47:45:03:ba:2c:80:61:0b:e8:a8:
                    5d:eb:91:d4:53:27:21:7b:77:d2:9c:62:75:38:7c:
                    3e:ec:0a:c6:d9:f2:ca:d0:ea:90:af:85:67:ac:a2:
                    28:80:1e:a9:7b:24:d4:ae:70:02:b9:08:2d:8e:cf:
                    9f:8f:2b:95:7e:f8:a4:78:7f:b0:89:d0:cc:72:6c:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:62:D3:F6:FE:91:5F:7A:37:18:3F:56:0A:B6:62:EC:EF:54:94:A0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146172.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adc2::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:5a:9b:c7:d1:c5:13:8d:fe:1f:d4:b4:9b:44:6e:95:49:0d:
         b7:cc:f1:54:6f:0f:bd:19:e7:64:3c:10:27:73:18:2e:27:a3:
         b2:ff:16:e0:22:d8:93:ee:e1:60:13:af:de:76:0e:11:69:30:
         60:b0:c6:71:ce:02:27:fb:29:c5:4c:06:5d:d2:54:da:9a:75:
         73:fc:bd:51:4e:01:da:ce:90:cd:0b:fb:7a:86:9f:bb:e9:8a:
         64:ce:09:2d:2c:fb:5c:2f:9f:d1:0f:34:79:bd:be:b5:b6:57:
         73:95:c7:c1:bc:08:b7:c0:57:8c:a8:e5:dc:49:59:09:5f:89:
         4f:a9:94:99:0e:f6:18:05:34:53:77:99:b9:2e:8e:91:f7:b0:
         2c:c0:05:a2:68:60:35:44:38:f7:8b:5d:3f:ea:ab:fb:34:8f:
         d5:00:f2:6b:43:17:37:04:be:5a:30:7f:2c:ad:53:6d:4f:93:
         c2:65:90:b0:70:ce:32:52:61:16:96:3c:fd:0e:25:a1:4c:1f:
         ef:6d:e8:06:21:9c:94:d2:00:15:ea:75:68:41:43:ac:fd:5e:
         1d:fc:99:61:88:3a:19:62:44:4b:69:52:0d:25:74:b5:33:cd:
         ba:6d:58:a0:70:81:93:94:28:f8:34:93:93:3e:af:3a:82:13:
         3c:fc:a5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----