Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146206.roa
File:                     AS146206.roa (raw, json)
Hash identifier:          YFMAYsqiRB4e25qNHlF+e1AFyjNGhYoJOaNoZkccPU0=
Subject key identifier:   C6:49:E5:47:4D:FF:D7:12:89:0F:03:EA:75:9D:D6:D5:4A:62:E9:B6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5528DE8892AA4A31E6AF141BA0EF8879B856C271
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146206.roa
Signing time:             Mon 25 May 2026 01:38:34 +0000
ROA not before:           Mon 25 May 2026 01:33:34 +0000
ROA not after:            Mon 24 May 2027 01:38:34 +0000
asID:                     146206
IP address blocks:        240a:ade4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:28:de:88:92:aa:4a:31:e6:af:14:1b:a0:ef:88:79:b8:56:c2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:34 2026 GMT
            Not After : May 24 01:38:34 2027 GMT
        Subject: CN=C649E5474DFFD712890F03EA759DD6D54A62E9B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:7c:3e:53:37:b6:d7:ad:b8:66:32:61:d0:
                    83:1d:da:bb:c7:cd:66:de:57:85:9e:dc:1e:e5:17:
                    18:db:d7:a4:f5:c3:f7:18:c1:a7:6b:f2:3c:c9:07:
                    09:b0:46:5a:d3:31:f5:13:8b:52:d4:be:63:f3:52:
                    04:5a:49:28:37:fd:74:a9:e0:c1:9e:97:99:90:9a:
                    ce:71:0b:f0:4b:90:61:8e:06:01:df:07:ca:53:54:
                    46:11:f7:fb:a6:27:69:58:73:b9:bc:21:4e:e5:63:
                    24:fb:01:4d:58:be:df:34:80:03:1b:d8:07:d1:2f:
                    57:2d:8d:78:e1:ab:e3:47:af:c5:c2:1b:c8:2a:99:
                    24:d9:50:93:be:ab:89:dc:f9:cc:f8:d5:60:14:8b:
                    92:65:66:28:b7:f6:e4:fc:b3:5f:f0:1a:67:9a:1b:
                    52:80:40:02:08:fc:1a:6e:82:a5:c1:ca:e3:05:16:
                    5c:0b:60:a1:08:af:af:5b:a2:c6:a8:46:36:97:94:
                    53:cb:73:12:77:c5:a3:e6:54:32:4f:bf:62:85:48:
                    0f:e7:36:13:7b:76:6b:bf:8c:06:59:1c:e0:48:09:
                    29:fc:3e:90:4a:07:6c:d3:fa:cd:e9:0c:7a:b3:73:
                    73:46:04:9b:df:bf:8a:44:6f:ad:6b:8e:e5:6b:34:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:49:E5:47:4D:FF:D7:12:89:0F:03:EA:75:9D:D6:D5:4A:62:E9:B6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146206.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ade4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:43:31:41:a6:65:0a:35:4e:a3:3b:1e:a4:ba:9c:9e:bf:0e:
         94:ea:22:e3:6e:ee:df:41:bb:01:a3:bf:d0:a8:37:f6:08:75:
         f2:25:50:3c:34:a6:e7:bd:cd:cb:6d:16:94:89:6e:c3:54:61:
         da:4a:92:0c:b3:2f:f6:22:a5:a3:35:dd:62:b1:b4:37:a3:ef:
         c6:02:a2:a5:28:75:3f:b0:8b:37:69:c4:f0:6f:7f:a8:6b:13:
         04:17:ff:bb:42:10:bf:2a:d4:f6:f9:67:ba:1f:d5:95:a0:3b:
         19:f7:b4:54:63:0c:01:c0:06:fb:55:81:ed:10:3e:23:c6:99:
         c3:7b:a5:ed:42:f3:92:56:ca:71:51:61:7e:d1:d0:f8:26:23:
         8c:3a:1c:45:e9:a1:78:8a:0f:4f:43:84:89:62:78:be:83:ab:
         88:4a:e2:aa:60:34:7a:89:35:ad:92:87:66:26:5b:d1:f2:5f:
         65:5c:76:6b:51:6a:62:65:32:fe:30:ff:71:72:7f:e6:28:5f:
         cd:36:d6:ff:67:f7:b4:78:21:72:cc:6c:76:2d:56:8e:7b:96:
         dd:11:41:ef:40:fb:89:9b:a7:9d:b8:63:bf:ae:04:ca:1a:f6:
         2f:8d:c9:ff:cb:4b:2a:67:db:21:b2:1e:bf:2d:49:c7:68:68:
         70:5f:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----