Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146211.roa
File:                     AS146211.roa (raw, json)
Hash identifier:          fPWbAXRPg9Z19TqajkLbA0iSx5Q6QLxaxOHLaHYzKDQ=
Subject key identifier:   09:64:75:59:21:94:8B:62:51:58:08:BF:04:80:C7:C6:C8:AA:86:D8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7F5084CDAAC7B29FC13AC95EEB51D9B3596A3277
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146211.roa
Signing time:             Tue 26 May 2026 06:30:54 +0000
ROA not before:           Tue 26 May 2026 06:25:54 +0000
ROA not after:            Tue 25 May 2027 06:30:54 +0000
asID:                     146211
IP address blocks:        240a:ade9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:50:84:cd:aa:c7:b2:9f:c1:3a:c9:5e:eb:51:d9:b3:59:6a:32:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:54 2026 GMT
            Not After : May 25 06:30:54 2027 GMT
        Subject: CN=0964755921948B62515808BF0480C7C6C8AA86D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:db:c4:41:2c:67:af:44:fb:91:06:1a:f4:
                    d4:d3:5e:43:dc:af:a8:4e:dd:39:36:2c:81:db:81:
                    0c:cc:1b:04:05:40:36:a8:e2:35:21:b1:23:1b:9a:
                    6d:33:5b:69:36:47:9e:70:80:03:e7:5e:4c:f8:1d:
                    ba:fe:15:51:ee:60:72:ce:0d:a1:e0:d7:7f:cc:57:
                    f4:2c:bd:4f:ec:54:c4:94:17:ad:2e:87:90:ad:bb:
                    57:80:da:88:da:79:d4:4a:a0:d5:0e:c4:4f:42:a7:
                    f8:49:3e:89:20:98:d7:26:1d:90:68:e2:75:6f:e8:
                    5e:48:ae:8b:9d:fa:fc:0f:37:bd:90:39:35:4a:46:
                    a6:f9:a5:6b:f7:4d:0a:54:20:08:e3:e6:35:57:d9:
                    cb:3b:8a:e9:ba:7f:05:f5:30:39:66:36:e0:b1:19:
                    0c:fe:3e:65:84:34:08:8a:b7:a0:ad:ff:3b:bd:76:
                    c7:0b:eb:59:bf:3a:18:80:30:5d:2b:b7:ec:3f:b1:
                    ad:41:ff:73:2b:bb:06:16:b5:70:15:eb:18:38:bc:
                    d5:2c:b5:3f:38:55:62:52:c9:c0:b3:4c:76:a4:53:
                    b0:96:ae:b3:fe:5d:fc:fc:49:ff:5c:7f:74:3e:af:
                    27:90:e8:a2:24:33:d3:4f:c9:a5:43:8d:b3:2e:80:
                    8b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:64:75:59:21:94:8B:62:51:58:08:BF:04:80:C7:C6:C8:AA:86:D8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146211.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ade9::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:6c:83:8e:e0:a2:28:9e:7f:0a:3a:53:d4:d9:e9:57:40:73:
         34:9b:99:e2:83:35:12:4a:bf:97:81:0b:9d:e3:ad:67:5d:5d:
         45:0c:c8:cc:2d:2a:05:5f:38:3b:63:f4:d1:d9:c1:27:dd:38:
         29:b8:ea:4e:d0:22:a8:fe:f0:a4:77:b0:5c:02:e3:da:af:fd:
         5f:ef:fe:68:e8:a4:43:e2:01:cd:9e:fe:4a:17:15:1d:ca:93:
         d5:b7:12:41:55:69:0d:24:c7:a9:db:e7:0a:54:69:e3:05:68:
         cf:ff:47:d7:da:82:db:2c:00:55:b4:82:42:68:d0:cb:f7:9d:
         ab:32:70:46:1f:c4:99:22:7e:41:a8:a5:5a:b4:da:c6:d4:98:
         43:1d:cf:ce:c0:a6:1f:4d:8c:ac:25:07:4d:03:3c:f2:80:31:
         15:de:77:4b:1a:8f:d9:15:83:70:16:be:0e:7b:91:97:d1:5a:
         ca:a3:7c:ff:02:f4:8a:a8:4a:ac:d0:09:23:17:7b:32:ca:8c:
         bf:54:ab:58:92:6c:18:c7:58:59:c4:75:2d:05:9c:83:fa:e4:
         78:0b:6e:e2:3b:b2:5b:68:c0:c3:2b:56:2b:60:fe:08:ab:df:
         78:e7:3b:08:38:84:bc:3b:a6:71:7a:eb:14:7a:01:33:c8:83:
         25:82:48:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----