Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146239.roa
File:                     AS146239.roa (raw, json)
Hash identifier:          NdEKDSbGtVDZwkROGUBqe+DT3bGpGTEl2U56rS7V1cA=
Subject key identifier:   2D:0F:FF:BA:A5:99:C9:3F:54:19:4E:C9:F7:E4:3B:2C:37:27:39:CA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7179C32ADF403CC648CFAE78101CF3B9CBBAE427
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146239.roa
Signing time:             Tue 26 May 2026 06:12:35 +0000
ROA not before:           Tue 26 May 2026 06:07:35 +0000
ROA not after:            Tue 25 May 2027 06:12:35 +0000
asID:                     146239
IP address blocks:        240a:ae05::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:79:c3:2a:df:40:3c:c6:48:cf:ae:78:10:1c:f3:b9:cb:ba:e4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:35 2026 GMT
            Not After : May 25 06:12:35 2027 GMT
        Subject: CN=2D0FFFBAA599C93F54194EC9F7E43B2C372739CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ff:77:2a:31:d1:bb:1c:5d:bf:bf:fc:43:01:
                    4a:fb:f0:d7:5a:0c:49:87:00:41:6b:82:7b:fb:11:
                    5d:93:60:e7:2b:79:fb:99:2b:48:1e:32:76:1d:1e:
                    9c:f2:f1:84:46:3c:46:53:87:5f:f9:46:a2:48:ab:
                    d7:39:ba:8e:16:85:55:b7:59:eb:9c:24:71:9d:63:
                    8b:ed:fc:53:2c:d1:32:43:42:bd:9e:f8:65:08:9b:
                    26:02:e0:26:ab:24:06:0d:95:fa:2b:e8:3d:d5:01:
                    d6:43:cf:8e:8b:21:4c:83:8f:76:94:ae:7a:3f:1f:
                    d0:a3:29:86:68:78:61:d8:e6:63:b7:39:b6:c5:86:
                    d5:06:83:ae:d1:d5:8e:06:d0:df:54:7e:d3:b3:a5:
                    41:de:39:ef:61:f7:77:7c:00:c7:4c:77:85:55:ce:
                    3b:75:9a:26:fa:5c:f7:7b:e0:64:98:c5:df:44:92:
                    e3:4b:2d:f8:a9:45:c0:0a:30:6b:df:a8:b4:86:1f:
                    0f:43:f5:90:90:b9:37:4a:f7:59:27:0d:9c:24:72:
                    af:b7:44:be:c2:d7:66:e6:14:57:dd:04:f4:a4:4b:
                    f4:10:50:e8:4d:0d:02:e5:f8:02:aa:73:4f:c8:ee:
                    ca:7f:75:68:17:64:55:43:e2:b6:f8:c7:b6:ad:26:
                    67:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0F:FF:BA:A5:99:C9:3F:54:19:4E:C9:F7:E4:3B:2C:37:27:39:CA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae05::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:80:82:91:4b:59:eb:2a:e4:9f:f9:2c:95:d5:b0:56:eb:b2:
         fe:c3:a3:ea:23:80:f0:03:12:c6:d8:5a:23:5f:1c:f1:56:57:
         a0:ee:f8:b8:9f:4f:f3:19:5b:92:c1:7b:eb:4a:a9:4e:fe:cb:
         3e:d9:d0:6d:2a:c8:c8:cf:41:3d:7a:e1:4a:0b:16:38:13:94:
         a5:4b:35:94:79:30:5b:46:e8:07:ff:39:7c:bd:9e:25:80:76:
         b0:ee:7f:eb:e6:53:25:07:e1:bc:78:03:28:6c:5f:81:d4:54:
         29:4f:eb:59:c1:ef:c7:f5:57:89:28:4b:af:58:38:8a:c2:3a:
         0f:b8:4c:25:20:8b:e9:6e:62:68:2a:c5:1c:3c:7d:9c:fb:03:
         d4:d3:5b:0d:8a:7e:e1:b9:79:76:a6:35:d2:b3:10:26:a8:11:
         f2:c0:6a:29:6a:a3:74:51:b7:fc:7d:84:d6:d7:f8:f0:4f:34:
         ad:47:1c:97:48:14:8c:d8:34:b6:b4:28:f9:3c:92:e6:60:87:
         bc:95:04:9e:f2:bb:49:e6:bd:51:45:94:45:ad:6c:76:92:f5:
         f4:f8:e1:2b:d1:23:ff:2a:94:7c:19:4d:64:32:90:15:48:f2:
         89:3a:ef:5b:6f:47:74:9c:05:3f:c3:b1:60:2d:f2:c0:5d:a3:
         99:56:25:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----