Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146305.roa
File:                     AS146305.roa (raw, json)
Hash identifier:          dVKzG8VyAJVb2EmKXUUJoaRNLR/D1JrGMqcxnXFCwi4=
Subject key identifier:   02:09:2A:C0:30:8D:D1:B1:76:AA:B4:FE:96:95:40:63:6C:59:0C:29
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       66FD3C8C18DDA14CC845A451A6304A58F9583D75
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146305.roa
Signing time:             Mon 25 May 2026 01:20:16 +0000
ROA not before:           Mon 25 May 2026 01:15:16 +0000
ROA not after:            Mon 24 May 2027 01:20:16 +0000
asID:                     146305
IP address blocks:        240a:ae47::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fd:3c:8c:18:dd:a1:4c:c8:45:a4:51:a6:30:4a:58:f9:58:3d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:16 2026 GMT
            Not After : May 24 01:20:16 2027 GMT
        Subject: CN=02092AC0308DD1B176AAB4FE969540636C590C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:14:34:d1:00:5d:99:87:55:23:7f:fc:e0:
                    7a:e2:24:e7:ae:60:40:ee:8e:97:41:39:9a:33:69:
                    19:79:37:b7:b6:1f:6f:62:b0:12:5f:f3:4a:2d:6f:
                    93:d1:33:31:89:2c:b1:82:b2:dc:6f:aa:ba:53:8f:
                    c4:1c:8c:b0:37:87:4e:4c:a7:f0:b0:b3:12:0a:c8:
                    86:c3:17:ae:9c:9a:de:58:d5:d7:7f:8f:cc:3e:5f:
                    2e:65:7d:01:e7:98:4f:6e:37:b5:03:a0:2c:2c:67:
                    b3:71:a2:64:c3:b7:8c:91:f6:d0:4e:cd:b3:36:23:
                    1c:2e:0a:35:22:cb:0a:cb:08:82:37:62:b2:1d:70:
                    55:ef:8e:13:1f:88:15:4f:6d:8e:f9:3b:b4:44:67:
                    dd:2a:0a:ff:5d:2e:a5:b0:b9:cc:b9:a9:8c:69:35:
                    5f:a1:58:16:cc:2f:be:a1:fc:13:cd:43:b5:43:e7:
                    b9:6d:80:39:79:43:a7:6a:f5:b1:68:7f:70:92:58:
                    ae:72:68:67:49:0c:7c:40:24:d3:59:09:c8:f9:bb:
                    d7:06:29:61:fa:6f:67:4d:23:dd:fa:13:92:82:ce:
                    b9:3f:e7:78:39:96:3f:68:a2:e3:a4:45:6c:d7:ff:
                    7b:26:48:28:59:ac:aa:a8:0c:86:af:69:f5:3c:50:
                    06:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:09:2A:C0:30:8D:D1:B1:76:AA:B4:FE:96:95:40:63:6C:59:0C:29
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146305.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae47::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:70:74:0d:d5:b7:0d:d6:52:0a:b3:67:25:14:df:ba:cb:46:
         63:92:9c:78:83:6b:6c:82:6f:81:3c:03:ed:01:fd:d7:c9:93:
         42:8e:c2:6f:8f:52:fe:f6:5a:72:0a:a6:5d:bf:e3:bd:e6:c6:
         2f:2b:29:a7:27:03:57:c0:7d:9c:12:c4:11:6a:63:cf:f8:86:
         8f:c1:1b:a3:b8:db:3c:d2:d7:35:4b:68:c7:cb:5f:1a:a3:7c:
         ee:01:38:ac:b6:d6:54:2a:8c:5d:a3:ed:d2:0d:17:d2:b7:d5:
         bf:17:5a:84:22:11:de:14:f8:23:f1:7d:9f:e9:e0:35:60:4c:
         f1:38:8d:b4:f2:10:dd:46:43:db:18:41:56:79:81:0c:e9:63:
         1d:7b:1b:7c:95:41:02:ff:e3:d0:ad:0d:a4:81:1c:d1:17:fb:
         2f:ba:67:21:25:98:fa:f4:87:54:27:97:77:81:23:1b:b7:8d:
         74:5a:a5:ef:98:f8:f7:f4:e4:fc:79:19:f6:65:0f:b1:44:45:
         6f:90:74:4f:ca:74:04:a3:5d:ea:0e:40:80:63:f6:a3:12:10:
         b4:4b:92:a6:dd:bb:aa:4e:67:ea:56:c0:03:43:fb:0a:fe:05:
         c5:5a:e8:a7:50:62:f7:3c:21:27:7d:f0:49:2a:5f:9a:3d:35:
         9a:d1:d7:84
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZv08jBjdoUzIRaRRpjBKWPlYPXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MTZaFw0yNzA1MjQwMTIwMTZaMDMxMTAvBgNV
BAMTKDAyMDkyQUMwMzA4REQxQjE3NkFBQjRGRTk2OTU0MDYzNkM1OTBDMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChvhQ00QBdmYdVI3/84HriJOeu
YEDujpdBOZozaRl5N7e2H29isBJf80otb5PRMzGJLLGCstxvqrpTj8QcjLA3h05M
p/CwsxIKyIbDF66cmt5Y1dd/j8w+Xy5lfQHnmE9uN7UDoCwsZ7NxomTDt4yR9tBO
zbM2IxwuCjUiywrLCII3YrIdcFXvjhMfiBVPbY75O7REZ90qCv9dLqWwucy5qYxp
NV+hWBbML76h/BPNQ7VD57ltgDl5Q6dq9bFof3CSWK5yaGdJDHxAJNNZCcj5u9cG
KWH6b2dNI936E5KCzrk/53g5lj9oouOkRWzX/3smSChZrKqoDIavafU8UAY3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUAgkqwDCN0bF2qrT+lpVAY2xZDCkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquRzANBgkqhkiG9w0BAQsFAAOCAQEAI3B0
DdW3DdZSCrNnJRTfustGY5KceINrbIJvgTwD7QH918mTQo7Cb49S/vZacgqmXb/j
vebGLysppycDV8B9nBLEEWpjz/iGj8Ebo7jbPNLXNUtox8tfGqN87gE4rLbWVCqM
XaPt0g0X0rfVvxdahCIR3hT4I/F9n+ngNWBM8TiNtPIQ3UZD2xhBVnmBDOljHXsb
fJVBAv/j0K0NpIEc0Rf7L7pnISWY+vSHVCeXd4EjG7eNdFql75j49/Tk/HkZ9mUP
sURFb5B0T8p0BKNd6g5AgGP2oxIQtEuSpt27qk5n6lbAA0P7Cv4FxVrop1Bi9zwh
J33wSSpfmj01mtHXhA==
-----END CERTIFICATE-----