Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146247.roa
File:                     AS146247.roa (raw, json)
Hash identifier:          rsoNPSfkGHaYVZ6qpKA/dBRLsBFL+9QzfnUhuKQqpw0=
Subject key identifier:   A7:D5:3F:E0:7C:F6:E0:90:46:89:85:54:81:B7:79:88:A1:71:87:33
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6B5DC58614143377D7522DD79EBF7ECE6BFA3D61
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146247.roa
Signing time:             Fri 22 May 2026 06:58:33 +0000
ROA not before:           Fri 22 May 2026 06:53:33 +0000
ROA not after:            Fri 21 May 2027 06:58:33 +0000
asID:                     146247
IP address blocks:        240a:ae0d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5d:c5:86:14:14:33:77:d7:52:2d:d7:9e:bf:7e:ce:6b:fa:3d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:33 2026 GMT
            Not After : May 21 06:58:33 2027 GMT
        Subject: CN=A7D53FE07CF6E0904689855481B77988A1718733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:17:36:35:df:fb:2c:83:a1:f0:05:65:3c:
                    2b:21:98:d3:d1:55:2f:09:e5:c1:36:57:2e:55:51:
                    ea:a7:46:7d:92:5a:56:fd:ce:da:3d:a8:9f:d7:27:
                    c8:31:e0:0e:56:d6:21:0d:4b:59:82:7a:96:2e:89:
                    e3:47:fa:a2:86:1b:2d:b7:c9:99:0b:ec:e6:63:40:
                    2a:d8:8e:d7:2e:07:ae:98:5c:b5:20:93:4f:92:35:
                    f5:f7:bd:0e:32:97:5f:01:5b:0f:eb:7a:8d:37:e5:
                    45:c0:ca:92:f5:8e:df:68:b1:27:b4:a6:b1:ed:fa:
                    47:54:83:16:89:a4:18:b9:42:15:cc:80:8b:58:b5:
                    9c:9d:a5:4a:15:83:57:f2:19:46:8b:c0:c7:20:31:
                    07:75:5e:dc:e2:98:bd:6b:79:ea:af:3e:2d:26:54:
                    dc:42:bf:9f:78:5e:9d:82:fe:fb:91:ff:8b:b0:fa:
                    04:9d:f7:c7:28:f3:16:1a:ec:ca:90:f6:47:ad:72:
                    7e:95:de:4c:bc:51:55:9a:28:a3:c1:7f:ae:0e:d2:
                    75:b0:93:ea:68:f0:98:d8:fb:52:06:67:04:c8:cd:
                    a5:69:90:1b:7b:7d:91:7d:79:60:d8:d6:4e:a4:d7:
                    b4:3e:cb:70:0c:ec:33:db:34:dd:2d:67:46:eb:03:
                    0a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D5:3F:E0:7C:F6:E0:90:46:89:85:54:81:B7:79:88:A1:71:87:33
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146247.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae0d::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:16:18:48:7a:eb:21:3a:79:a9:fa:bd:71:a1:3f:91:3a:ca:
         81:26:df:32:31:b1:50:ca:12:1b:f8:c6:a9:8f:fe:98:d7:f2:
         f7:31:9a:3e:64:f6:f2:fb:27:d9:18:6d:24:5d:d3:c0:ef:b1:
         32:97:bc:8b:df:c2:6e:8e:ca:b5:51:4d:94:b3:52:8f:1e:ad:
         87:75:e0:ef:b6:3f:8e:9b:a6:e6:4d:63:14:04:6e:55:31:99:
         9f:63:7f:a1:e1:ed:db:1b:7f:9a:0b:8a:c2:ed:f8:07:65:82:
         cf:e1:bf:6f:c1:70:df:1c:51:8d:ca:a5:09:4f:ad:58:cf:b3:
         f6:25:1d:06:d1:3f:19:4e:19:f4:a6:93:3c:78:53:3a:a2:35:
         11:fe:6b:c7:87:77:1d:ac:b2:0b:f1:c3:57:f0:69:32:5b:d4:
         07:f9:da:f8:a6:9f:6a:04:9c:c0:a0:54:a3:30:70:e6:23:14:
         61:5c:9c:ec:9f:35:ef:0a:e7:59:ca:2a:68:7b:e0:e8:a9:2c:
         de:b7:fc:30:01:91:69:ed:dc:7b:38:44:ea:cc:94:a7:22:e0:
         13:1d:be:9d:a1:af:7c:02:51:09:b8:33:07:4c:91:14:68:17:
         b6:7e:b4:2f:3d:11:6a:e4:eb:f0:ac:a8:83:0d:75:cf:08:e7:
         ca:70:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----