Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146203.roa
File:                     AS146203.roa (raw, json)
Hash identifier:          xjII+ip9jJcsd+b7AybSHjWslHrFmDNUoPjw16XHEqo=
Subject key identifier:   A8:C8:48:2D:B2:77:7C:99:30:EC:49:97:39:49:41:93:E9:6F:B8:2F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       02D70CCA94957E0F77F89D47617252A111CB55EB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146203.roa
Signing time:             Fri 22 May 2026 07:08:40 +0000
ROA not before:           Fri 22 May 2026 07:03:40 +0000
ROA not after:            Fri 21 May 2027 07:08:40 +0000
asID:                     146203
IP address blocks:        240a:ade1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d7:0c:ca:94:95:7e:0f:77:f8:9d:47:61:72:52:a1:11:cb:55:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:40 2026 GMT
            Not After : May 21 07:08:40 2027 GMT
        Subject: CN=A8C8482DB2777C9930EC499739494193E96FB82F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:68:53:0e:92:d3:aa:dd:89:f3:7c:a3:4e:
                    27:1d:64:5b:c3:7a:d9:bb:d3:2f:7c:3a:1d:7f:74:
                    0f:1b:61:a1:d5:cb:71:e2:bb:6d:7a:9c:fd:01:e3:
                    99:25:99:38:52:f3:33:88:a6:ad:c6:38:da:82:47:
                    fc:63:f4:be:d8:f6:a8:40:f0:d2:cf:7c:5e:4a:e1:
                    06:ce:28:3f:a9:03:e1:a0:96:1c:b1:64:95:c4:9b:
                    11:5b:04:72:c8:0c:18:39:71:11:4b:3d:2d:23:fe:
                    57:04:4e:74:d0:18:2e:29:d9:43:d3:60:cf:f9:eb:
                    a5:92:52:6e:14:ee:3d:9e:03:65:fb:82:bb:15:f2:
                    8e:55:41:3a:9e:af:ff:10:5a:23:b0:13:43:e6:78:
                    04:3f:97:ec:11:2e:9e:84:3e:fb:ce:99:bc:1c:94:
                    f7:df:dd:67:7a:52:f0:c5:c2:a8:7f:6a:d9:18:cf:
                    ad:fa:8a:9c:b4:d9:70:73:e4:26:02:35:6c:82:bf:
                    f4:41:ef:3a:ad:b5:c5:7d:3f:55:31:03:d8:b3:b9:
                    a6:83:1c:72:29:e9:65:79:90:7b:74:e9:59:d1:63:
                    25:06:08:bc:b8:99:51:3d:d2:7e:32:23:cc:84:b5:
                    21:c8:97:49:dc:1b:e3:48:14:f6:cb:0c:ea:ec:72:
                    40:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C8:48:2D:B2:77:7C:99:30:EC:49:97:39:49:41:93:E9:6F:B8:2F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146203.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ade1::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:0b:da:ad:2d:a7:69:30:17:8c:ec:b8:be:87:73:6a:e6:2b:
         81:36:6e:03:0b:7e:fc:41:c5:ad:05:c1:69:e1:71:20:9d:92:
         ae:9b:fb:78:d8:2a:34:c4:f5:4a:46:b9:c2:9a:ff:76:5b:0d:
         b7:0d:61:4b:30:54:de:17:be:10:71:aa:97:8c:2c:5b:0d:b3:
         0e:79:c8:6e:c7:0b:c9:47:68:a6:d7:28:a5:84:f1:4d:0a:cb:
         37:0c:c0:d8:91:5d:c7:be:1d:fd:43:72:c3:2e:21:70:15:a9:
         04:5e:1d:b4:3d:22:63:9d:b8:6e:80:55:51:22:49:99:0d:dc:
         14:b1:cc:e3:a8:0d:11:66:64:dc:23:15:12:b2:e6:21:6f:6a:
         b4:8d:e3:e1:7e:10:a2:b9:b1:d8:ad:89:8f:66:35:e0:ce:88:
         a0:b4:c3:af:2b:e7:03:ca:f6:3e:66:87:b8:8b:d7:6b:fc:66:
         6b:3b:a3:48:ca:d3:de:b9:7b:22:68:7e:e7:40:46:54:7f:0c:
         e7:61:19:6a:44:7e:30:5c:f5:a8:b5:52:1a:83:4d:d8:a2:14:
         8a:46:e3:af:9b:bd:c4:34:72:aa:d1:14:c8:c1:cb:b4:90:e1:
         9a:c0:ae:54:79:b5:73:9d:f4:31:e9:6e:18:f9:94:c2:cb:95:
         72:4f:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----