Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146297.roa
File:                     AS146297.roa (raw, json)
Hash identifier:          OS2cJYXOf+kyoe7bQS/IEUngCNQTO7EfAzvuVZ+BkdE=
Subject key identifier:   54:8C:14:14:17:23:E0:89:0A:4D:91:B6:CA:2B:03:71:AB:D9:A5:99
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2E903C632AC023A712020BC6E3E30FE8BF98EB34
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146297.roa
Signing time:             Mon 25 May 2026 03:19:14 +0000
ROA not before:           Mon 25 May 2026 03:14:14 +0000
ROA not after:            Mon 24 May 2027 03:19:14 +0000
asID:                     146297
IP address blocks:        240a:ae3f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:90:3c:63:2a:c0:23:a7:12:02:0b:c6:e3:e3:0f:e8:bf:98:eb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:14 2026 GMT
            Not After : May 24 03:19:14 2027 GMT
        Subject: CN=548C14141723E0890A4D91B6CA2B0371ABD9A599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9b:39:02:0b:45:c6:60:20:1a:cc:19:76:7c:
                    69:a2:09:eb:3c:8c:43:ce:a6:fa:8b:b7:fc:b0:60:
                    d9:ed:7a:6f:b1:f9:83:99:b1:80:36:13:88:61:93:
                    92:be:2c:24:95:d5:89:52:73:e9:a9:a6:38:66:e8:
                    3c:47:20:5d:d5:36:8d:79:79:13:62:df:31:11:ff:
                    4b:9b:f8:2b:e5:a5:eb:78:08:3d:3d:d8:b9:fc:00:
                    0a:bd:b7:ba:b5:f8:cf:32:d0:82:2e:47:9f:e6:b2:
                    bc:e3:ef:4f:4c:89:26:f7:44:63:3f:bd:5f:85:73:
                    9b:f7:8d:ed:ee:43:4e:c4:70:70:3b:36:54:f1:da:
                    27:0c:15:db:6a:4a:dc:2b:5d:8c:5a:f1:50:97:7a:
                    77:ac:6e:d6:ab:5b:93:3d:ce:b8:28:0d:f7:ca:0e:
                    aa:2b:d5:0b:c1:18:34:b2:54:2e:df:65:43:11:c5:
                    4e:89:66:00:55:2b:ac:1e:7e:7b:ae:5b:d9:62:ee:
                    4b:39:4c:5c:14:ef:ce:a7:83:7a:bb:6c:e6:e2:3d:
                    60:8d:3d:10:65:b5:4d:e7:69:96:1a:60:03:2e:7f:
                    c8:d2:cd:94:14:61:60:c1:39:a4:82:70:6e:c2:7b:
                    06:64:9f:61:d5:7a:ee:7b:e3:1e:07:7d:cc:d0:02:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8C:14:14:17:23:E0:89:0A:4D:91:B6:CA:2B:03:71:AB:D9:A5:99
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146297.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae3f::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:c5:73:e8:f1:4e:6f:f2:1c:5c:07:fc:56:aa:7a:ab:0a:71:
         3e:33:93:3b:89:bc:c7:f1:f8:d8:46:0a:7e:73:1c:1a:66:ec:
         87:20:38:ce:50:73:8d:cc:12:41:0b:7a:02:b5:d3:92:f2:13:
         8a:76:0b:7f:5d:77:be:dd:0f:af:3f:a8:85:5b:c2:ce:cc:27:
         76:ca:15:e9:f6:16:a2:2e:97:15:83:80:5d:28:5f:f4:a2:a4:
         e6:1e:69:71:de:96:da:d5:9d:9b:ff:7f:ea:08:a9:c8:df:fd:
         6d:4f:fd:dc:ee:20:0c:21:95:b6:df:67:73:3f:53:6e:b7:8e:
         33:a8:b6:29:48:70:2d:5a:15:2e:47:5c:3a:32:0d:3a:fb:6a:
         3d:6e:82:d9:dd:5b:c0:71:9f:c0:d4:97:15:48:e6:89:2c:f2:
         75:04:dc:ed:2f:96:69:ec:7f:4a:52:3c:51:9e:3d:08:67:42:
         97:8b:5c:2c:80:37:2d:89:3c:1e:b5:5c:ba:e0:37:f1:03:b9:
         51:c4:48:2b:b0:a9:c4:2f:ca:f0:5c:b8:a1:16:3c:3b:04:d9:
         f9:21:b6:05:ae:f8:6d:ab:75:5f:9a:61:5b:6d:0e:42:07:fd:
         04:33:d5:35:97:d9:45:02:82:60:77:d8:84:37:32:fa:7c:fb:
         34:cf:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----