Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146197.roa
File:                     AS146197.roa (raw, json)
Hash identifier:          R5PTrbXxTz8vwpqQa/r1qOwVfdJnotjISvjsyGrICE0=
Subject key identifier:   CD:CD:08:0A:B2:87:9E:06:7C:91:10:7B:62:24:B9:76:4C:17:23:C8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       63F104DF87AFA52D46F14CC1A76F0CDD5CA01EC6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146197.roa
Signing time:             Fri 22 May 2026 07:24:44 +0000
ROA not before:           Fri 22 May 2026 07:19:44 +0000
ROA not after:            Fri 21 May 2027 07:24:44 +0000
asID:                     146197
IP address blocks:        240a:addb::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f1:04:df:87:af:a5:2d:46:f1:4c:c1:a7:6f:0c:dd:5c:a0:1e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:44 2026 GMT
            Not After : May 21 07:24:44 2027 GMT
        Subject: CN=CDCD080AB2879E067C91107B6224B9764C1723C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:89:a1:aa:07:18:d2:b7:52:e8:ae:3f:8b:
                    a3:4a:16:6e:05:17:6d:f8:3a:30:d7:e8:6f:04:fa:
                    46:7a:50:9d:d0:a1:3d:5e:3e:55:5b:6a:d0:3b:0d:
                    25:35:a2:76:2d:d6:ae:b8:a9:83:ee:f5:6a:82:d0:
                    cd:8e:e4:37:fc:1a:a2:58:0d:0d:31:6b:ab:29:4b:
                    9a:e3:b6:5f:33:95:52:c5:5c:71:fa:54:ce:93:91:
                    8f:99:26:c3:1e:5b:0a:2a:91:a0:82:a9:58:24:4e:
                    24:ba:6b:b7:dd:8c:dd:f5:98:72:f5:67:e9:4c:1c:
                    2a:be:3c:0b:71:59:f5:a2:41:20:a3:ab:30:44:9b:
                    5d:e7:9f:df:3e:f3:ee:dc:af:3a:87:d9:60:79:ef:
                    ea:c2:94:83:49:3d:9c:7c:04:11:45:c7:ab:b0:92:
                    07:b7:5b:e3:04:c1:e3:23:ea:37:6e:1a:4f:01:6d:
                    7c:97:ba:7f:61:01:ae:45:d1:f4:4f:b3:99:09:fc:
                    d0:a2:95:ba:9f:7d:40:7a:6b:33:a4:07:87:a0:99:
                    c1:b7:c0:2f:7e:c9:3a:82:5a:44:ac:14:6d:ad:14:
                    71:53:19:d2:a0:c0:3c:1e:1d:9e:86:cc:f5:ac:72:
                    d3:11:9a:0a:2a:32:9c:ce:5f:8c:ac:c2:bd:4d:86:
                    92:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CD:08:0A:B2:87:9E:06:7C:91:10:7B:62:24:B9:76:4C:17:23:C8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146197.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:addb::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:b8:b7:0a:bb:a0:7a:a0:51:c0:24:ee:f6:41:ed:44:68:2d:
         d5:28:8a:3e:d0:00:47:17:e2:19:b5:70:3c:90:a1:f1:b1:0e:
         4d:fe:a6:a3:ab:86:6e:20:99:c1:1a:83:28:1c:67:e3:8d:ad:
         78:3b:fb:b0:47:25:0a:52:00:4d:e9:58:c8:7b:1b:be:51:ee:
         5f:f0:a3:9c:44:56:02:bf:26:16:2d:8a:eb:34:1c:e7:38:c2:
         c2:bf:ff:f6:6e:1d:f9:9e:69:03:6b:80:92:08:92:c9:fb:a4:
         cd:94:9e:6f:2e:fb:48:b7:09:fd:be:1d:85:e7:e6:ec:ba:76:
         7c:4e:71:7e:a7:66:a9:21:a7:70:fe:7c:13:a0:04:d3:93:16:
         b7:28:ab:30:8c:80:da:3d:41:af:a0:bd:22:f3:93:d7:15:6e:
         5d:70:10:3a:64:ad:58:ba:5c:8e:d4:b2:72:6c:ca:70:0f:41:
         a7:bd:27:e4:44:f9:3e:e2:95:02:a6:b9:12:d1:d3:7c:98:85:
         25:f9:60:ee:b9:a8:f7:85:cc:96:95:ab:87:8a:9b:6e:f1:fc:
         6b:c4:87:af:1a:3e:48:da:e0:98:fb:db:47:44:2a:87:17:45:
         55:a9:d5:7e:cb:3c:38:f6:46:e8:1c:09:6c:44:c1:94:60:c3:
         6a:9b:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----