Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146303.roa
File:                     AS146303.roa (raw, json)
Hash identifier:          Xr+810UTXXstQ6jAwWyZ+nyMMM21iODKCr1tmucsiQw=
Subject key identifier:   1C:CE:B9:0E:E6:FF:2D:34:18:CD:07:0F:8C:C8:34:75:D5:5B:12:27
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7CFCC1B836DDA46E00A04343B6D04C5FB772BB35
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146303.roa
Signing time:             Fri 22 May 2026 07:32:05 +0000
ROA not before:           Fri 22 May 2026 07:27:05 +0000
ROA not after:            Fri 21 May 2027 07:32:05 +0000
asID:                     146303
IP address blocks:        240a:ae45::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fc:c1:b8:36:dd:a4:6e:00:a0:43:43:b6:d0:4c:5f:b7:72:bb:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:05 2026 GMT
            Not After : May 21 07:32:05 2027 GMT
        Subject: CN=1CCEB90EE6FF2D3418CD070F8CC83475D55B1227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:9d:35:f2:ed:84:4b:40:f3:71:96:f4:c8:
                    d7:de:e7:31:a6:95:d6:9a:df:26:2f:db:d5:54:42:
                    13:f1:12:bb:5f:d5:dd:af:1a:9c:4d:f1:aa:f6:9d:
                    73:b5:81:de:55:43:00:58:19:72:0a:6b:0e:b8:76:
                    ee:3e:da:83:4f:bb:4d:0b:cb:d6:ec:f0:1e:2e:14:
                    3a:46:42:ad:9f:60:34:d1:b0:f6:dc:1e:b2:76:cc:
                    50:da:e4:bd:bf:7e:9d:f8:2b:0d:dd:71:88:b4:30:
                    77:67:86:46:73:cb:f5:d9:35:6a:c9:c3:e3:aa:e5:
                    32:c1:21:f6:75:a2:25:be:4c:58:20:13:ff:64:8e:
                    d2:e1:46:b0:5e:90:1a:25:6c:8b:87:41:c6:b7:3a:
                    a3:f5:71:56:50:13:5c:3d:6c:3c:1d:33:36:ae:c5:
                    1b:89:7f:21:0e:d8:71:de:de:9a:ee:5e:25:97:06:
                    22:40:ae:24:78:d9:45:61:38:a3:e9:58:09:49:34:
                    6e:17:51:06:4c:f6:13:83:20:cb:16:d0:63:55:f4:
                    68:c0:f0:9d:4b:81:0a:55:ca:e6:53:8d:ef:e4:da:
                    48:18:e9:8a:60:98:7b:ca:7a:58:7f:8d:b9:d2:e4:
                    97:5c:2e:ca:de:41:a1:25:9f:8f:cc:b8:6f:e6:fe:
                    bb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CE:B9:0E:E6:FF:2D:34:18:CD:07:0F:8C:C8:34:75:D5:5B:12:27
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146303.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae45::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:08:64:6d:13:79:af:b5:85:6c:1c:e6:57:14:f0:50:6f:69:
         98:d2:35:8c:96:a7:e5:71:8c:fd:83:89:e2:c6:99:9e:a2:4d:
         2f:ef:d1:f9:7a:42:dc:75:eb:d2:21:98:f3:e3:68:b5:7f:2c:
         18:fe:53:a0:47:48:0b:f9:b2:3a:09:c6:ee:8f:f9:d4:76:32:
         84:e1:f9:2b:0f:c0:40:a1:70:a8:6d:d4:6b:7e:95:fd:6d:cf:
         aa:28:53:b0:ce:af:67:1b:80:1a:3d:ee:09:36:83:b1:b4:43:
         85:0f:01:7b:bb:0b:fc:fc:a8:d7:c0:2a:47:28:a2:62:c9:6a:
         93:7a:89:60:ac:47:3e:4c:a8:5f:98:12:21:5a:18:1c:a9:55:
         1f:b1:1f:f2:05:4b:54:75:ad:7a:6e:1e:e1:15:9b:01:07:4e:
         06:4a:9d:48:7c:37:ff:6d:51:ce:a2:c7:b4:25:19:bc:c0:31:
         5a:7a:a3:fa:29:04:a7:c6:97:ce:5b:04:a6:11:ca:7e:05:a5:
         9d:b1:41:10:9c:22:d5:68:da:5d:e8:98:34:6f:08:cc:1f:8a:
         a6:92:a8:c7:40:e2:75:0e:81:59:24:0b:63:c9:bc:9f:41:a1:
         19:d2:69:b2:3d:db:be:b2:25:a1:bf:a8:d6:0c:a2:12:93:43:
         bf:94:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----