Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146214.roa
File:                     AS146214.roa (raw, json)
Hash identifier:          Pp06WeSIH9pq4uV4gOnzg9g2uSXYwCDmj0vcWb1M09A=
Subject key identifier:   86:D7:23:51:E2:69:8B:C9:3F:A7:DF:22:41:1E:54:DF:05:BF:15:9E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       30BC213CAD15F1AA93F387CA219163484A9BE854
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146214.roa
Signing time:             Mon 25 May 2026 01:20:31 +0000
ROA not before:           Mon 25 May 2026 01:15:31 +0000
ROA not after:            Mon 24 May 2027 01:20:31 +0000
asID:                     146214
IP address blocks:        240a:adec::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bc:21:3c:ad:15:f1:aa:93:f3:87:ca:21:91:63:48:4a:9b:e8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:31 2026 GMT
            Not After : May 24 01:20:31 2027 GMT
        Subject: CN=86D72351E2698BC93FA7DF22411E54DF05BF159E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:b6:13:b0:e4:02:4a:4c:e0:1d:b1:56:5b:
                    c6:42:4b:18:1c:7f:a8:ba:f8:61:dc:3d:57:37:d0:
                    3b:98:8a:f4:c2:77:2c:48:32:e3:b2:ee:10:a7:25:
                    e5:96:4e:3c:56:24:f6:94:cf:c3:d5:d0:1b:e4:91:
                    79:04:16:c3:2a:3f:e0:ea:6b:42:a0:7a:0a:11:c7:
                    7d:5e:2a:45:29:35:31:8f:7a:ed:0d:05:9f:aa:4c:
                    9b:d1:1b:52:8f:39:0b:14:7f:1d:fc:91:d4:11:84:
                    d0:64:43:44:fa:7d:50:0e:82:19:c0:4b:9d:f9:0d:
                    66:0e:11:ea:2c:79:d8:f2:aa:1e:8c:d4:37:91:96:
                    ec:3b:40:22:4c:7b:dc:54:46:96:ab:c4:a4:ae:b7:
                    79:db:89:13:eb:eb:ce:7e:16:34:1c:a4:0c:50:31:
                    f8:db:18:74:d9:cf:72:eb:9d:99:c7:68:ff:ba:a2:
                    59:a7:bd:64:8b:d7:1e:38:a6:19:14:1c:55:1b:9d:
                    3c:7c:fb:ac:1d:03:f9:32:05:77:90:ad:69:a5:88:
                    fd:12:a8:69:56:74:23:6a:92:94:be:0d:d7:0e:10:
                    cc:bf:d6:b4:2c:54:9c:c6:b4:92:bf:35:31:bf:af:
                    26:5a:44:2e:52:e2:bd:30:eb:68:60:8a:bf:fc:f6:
                    ec:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D7:23:51:E2:69:8B:C9:3F:A7:DF:22:41:1E:54:DF:05:BF:15:9E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146214.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:adec::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:10:24:2c:3e:1f:e0:80:1d:31:7b:34:7d:52:a4:56:54:9e:
         9e:54:3f:65:77:90:9e:4c:7a:61:55:9e:9c:66:25:26:5c:bf:
         f7:30:a9:3e:a2:17:bd:99:6b:f1:7e:d7:b3:bc:37:30:c2:90:
         fc:28:e5:32:96:3d:d3:2d:59:c2:39:d2:07:25:7e:16:93:6f:
         b3:b3:2b:03:c8:9a:cc:29:2d:2e:09:2b:16:d8:07:4c:b1:5c:
         03:7b:06:30:e2:75:e7:82:32:67:5c:49:79:d7:b0:f0:26:ce:
         0f:d6:2d:2f:3e:01:66:f9:7a:22:a7:30:17:eb:cd:fe:2f:58:
         71:ee:97:df:df:43:e6:d2:32:af:9e:de:0a:85:e9:38:b3:5c:
         52:9b:79:12:3b:85:97:78:24:62:b3:07:57:18:93:13:3e:2b:
         09:25:dd:5e:1e:e2:31:c6:50:5d:2e:4e:54:e5:19:67:45:f8:
         33:cb:e0:25:e2:63:1c:57:cc:d6:1c:1c:31:38:41:97:95:71:
         35:e9:4d:d6:c3:95:86:08:1a:7b:3a:49:d1:a4:45:cb:a9:63:
         4e:8f:f6:48:4b:3c:87:72:f8:bc:fd:e6:28:a6:eb:54:07:36:
         1e:d1:09:e1:9c:5f:67:1d:df:a0:04:48:3d:4c:0b:ab:aa:ae:
         f8:d5:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----