Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146277.roa
File:                     AS146277.roa (raw, json)
Hash identifier:          +gvbV5UCJyRN1rvJf0Frs6r7ZtMyCp2mWtci7/W3TII=
Subject key identifier:   EC:C4:14:C9:F7:3D:0D:2F:D9:A7:0D:1D:4D:0D:19:1C:EA:7B:8F:77
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0EE12D21E3146B732F20F4E5B52441B1CFEA9A5C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146277.roa
Signing time:             Fri 22 May 2026 07:24:59 +0000
ROA not before:           Fri 22 May 2026 07:19:59 +0000
ROA not after:            Fri 21 May 2027 07:24:59 +0000
asID:                     146277
IP address blocks:        240a:ae2b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e1:2d:21:e3:14:6b:73:2f:20:f4:e5:b5:24:41:b1:cf:ea:9a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:59 2026 GMT
            Not After : May 21 07:24:59 2027 GMT
        Subject: CN=ECC414C9F73D0D2FD9A70D1D4D0D191CEA7B8F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b3:ce:cb:2a:14:e3:31:e3:0c:ae:ba:97:4d:
                    11:33:7b:e7:fd:76:fb:60:59:a1:ac:5a:7c:fa:a8:
                    25:26:31:9a:6c:17:26:0c:84:df:2d:5b:29:e3:09:
                    cb:2a:05:da:f6:dd:01:8f:61:35:4e:8e:c9:72:b9:
                    cd:39:06:db:92:5d:e5:66:3b:1c:0a:c1:09:cc:0f:
                    59:bf:93:24:9f:c1:b8:bd:5e:7a:9f:41:c8:6b:3c:
                    7e:20:d5:e3:11:52:9f:e5:84:19:3d:ca:18:b9:05:
                    41:2f:4d:89:c4:33:cc:0c:15:61:1b:21:0c:11:68:
                    68:98:d3:92:2f:3d:4c:48:b8:de:a8:9e:8b:a5:2f:
                    1e:0a:07:e0:75:bf:a5:bb:4f:be:3f:33:e8:16:a0:
                    e4:70:e3:6a:02:52:e6:ae:73:77:17:bf:bb:01:9e:
                    ec:31:2a:5f:82:7f:8c:38:ba:66:69:96:1b:45:a4:
                    48:fe:e8:60:50:7d:dd:7e:bb:b7:fb:3d:2a:ef:f3:
                    ab:d4:93:9f:8d:f2:3a:19:ae:ec:06:c5:ac:4c:c3:
                    94:72:e2:b5:46:7e:31:8c:50:37:13:b3:38:72:b6:
                    90:27:35:19:ba:74:f7:d2:a0:a2:5a:b8:de:68:6e:
                    82:27:03:38:56:3c:43:42:0a:a8:8a:ea:a4:f4:32:
                    47:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C4:14:C9:F7:3D:0D:2F:D9:A7:0D:1D:4D:0D:19:1C:EA:7B:8F:77
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146277.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae2b::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:3f:ac:aa:38:d0:50:7d:89:3c:9d:92:1a:68:fb:17:48:b2:
         1b:17:ae:25:56:25:01:2b:b5:77:08:5d:2e:bf:93:39:d0:60:
         4a:e1:7a:ac:4e:9d:f7:d2:3c:b9:0a:4e:b4:80:b0:bc:cc:8a:
         e9:33:18:79:75:95:8c:7a:b7:82:e2:29:bc:84:78:56:4e:e9:
         1e:43:4f:e4:09:f6:b2:5d:e6:98:ed:60:1b:13:bc:f9:be:e5:
         fc:8d:73:6a:fb:e7:33:31:ea:66:85:f1:98:cb:29:d2:3d:26:
         f1:f5:fd:be:98:5a:b0:d1:ff:5d:dd:ba:89:57:1c:70:1f:4b:
         16:2e:14:b1:6a:63:b9:f7:49:f8:8e:08:22:e8:d1:72:e9:65:
         f6:6b:ac:aa:bf:c5:46:ad:0f:45:44:a1:98:b7:85:36:ca:00:
         36:c4:1e:5a:e3:17:86:ae:ab:c5:ec:f6:1a:e7:7d:2e:e1:03:
         d0:cf:9e:b1:b3:a1:99:0b:30:78:a7:81:c3:83:61:65:8c:08:
         44:b4:ea:fd:3d:c7:86:1b:66:c7:3e:52:bb:c5:41:f4:89:67:
         1b:91:ba:c1:50:ef:71:de:be:5c:73:4c:44:67:c5:ae:bb:77:
         74:a9:20:f0:68:ba:39:30:82:41:95:22:8d:a7:5b:ee:bf:6c:
         4f:50:c2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----