Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146199.roa
File:                     AS146199.roa (raw, json)
Hash identifier:          iE5Oz/JbU14sny9303QuV+943F3ar1XzBRW5eH5HJsw=
Subject key identifier:   42:23:49:64:69:ED:38:F4:D3:C4:54:C7:E1:26:9A:92:4D:1A:09:BB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       38EA4DB91DDB1C668184B10DE93ABD24C33704CA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146199.roa
Signing time:             Fri 22 May 2026 06:58:28 +0000
ROA not before:           Fri 22 May 2026 06:53:28 +0000
ROA not after:            Fri 21 May 2027 06:58:28 +0000
asID:                     146199
IP address blocks:        240a:addd::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ea:4d:b9:1d:db:1c:66:81:84:b1:0d:e9:3a:bd:24:c3:37:04:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:28 2026 GMT
            Not After : May 21 06:58:28 2027 GMT
        Subject: CN=4223496469ED38F4D3C454C7E1269A924D1A09BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:06:d3:f7:96:92:ca:da:f1:fe:5c:69:02:
                    9f:f9:70:95:40:10:7e:98:d9:34:0c:a0:bf:c4:27:
                    4e:ce:49:e4:5b:fd:3f:56:fa:e1:92:d7:8b:3e:a6:
                    ec:d6:2e:fd:f2:49:20:8f:4b:5f:2c:7c:2a:af:a4:
                    50:b7:81:6c:78:bb:e5:ae:08:3f:33:89:b9:1a:27:
                    0b:3c:e2:57:48:62:bc:30:62:80:b1:73:ef:ab:44:
                    fc:f9:fb:b9:90:1a:20:d5:48:ad:a2:5e:55:85:c8:
                    d5:81:b2:ee:dc:ea:a3:8b:6b:94:87:73:09:d9:28:
                    20:e1:15:9b:68:bf:70:32:0f:4e:7f:cc:56:01:42:
                    50:5f:6d:e8:89:99:ad:76:4b:48:df:d8:a9:f3:74:
                    8b:c5:5a:f0:cd:81:75:6f:72:b2:fd:73:d8:1b:f7:
                    59:bb:f2:de:71:aa:53:cd:e6:94:26:e2:ab:a5:04:
                    c6:39:1c:25:19:01:6c:94:4d:aa:4c:b0:91:4d:78:
                    bf:5a:5d:32:9c:0a:6c:4a:79:d4:f0:d7:50:31:16:
                    2c:c5:84:fa:35:c0:5c:37:56:99:c0:06:16:55:bb:
                    b6:a4:fd:40:e2:da:47:ee:5b:39:32:74:7d:a8:da:
                    4d:51:73:fa:ca:6b:b9:bb:c3:b5:96:51:ac:71:43:
                    18:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:23:49:64:69:ED:38:F4:D3:C4:54:C7:E1:26:9A:92:4D:1A:09:BB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:addd::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:a4:5c:27:a1:79:12:8e:a7:cf:77:93:45:9e:91:35:1f:1e:
         59:07:60:2c:8d:91:1e:75:0d:24:0f:d2:9d:84:ab:76:9e:5e:
         39:86:69:ca:bd:a9:32:9d:fc:57:a6:ba:b9:c8:e1:df:7e:2f:
         e2:21:7a:8e:74:0d:13:64:45:66:e8:92:a5:9d:bf:f9:21:b9:
         7c:e5:ee:e4:55:72:42:70:4f:56:a0:79:d8:96:16:1d:2d:44:
         f9:b5:c8:dc:a4:99:66:ef:54:ad:b6:80:d1:6a:14:aa:3f:8d:
         df:e4:46:b5:91:c6:70:26:88:8b:90:34:63:62:a2:bd:e1:73:
         90:1e:c1:f8:d2:fd:05:d1:91:b4:d9:9f:50:4c:66:c5:eb:eb:
         b8:be:8b:68:95:0a:b9:a9:6d:a0:ef:88:d1:79:6d:ff:64:b7:
         8f:b7:97:97:98:6c:37:fa:81:01:c5:35:b1:00:7e:1b:76:61:
         b3:2d:ff:b4:d6:d4:e7:47:f7:73:31:29:bc:d8:db:de:43:fa:
         a1:57:b7:09:05:c3:f2:ac:c0:9a:ba:d9:4c:9a:94:04:a0:9b:
         78:1e:88:c0:01:70:98:8a:ac:04:fb:94:97:09:12:dd:31:85:
         72:3b:c2:c2:6f:0a:f7:c2:4b:b4:b7:4f:cb:ad:7d:e6:35:39:
         14:8b:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----