Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146310.roa
File:                     AS146310.roa (raw, json)
Hash identifier:          6Y8sGvj0+JQKDeU7aKYCyzXqW7fUe64y5exS7x+SK/c=
Subject key identifier:   B3:66:2C:82:7B:74:35:F2:20:56:43:C4:68:BC:91:39:A8:11:BF:0E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5EE729BD7CBE93F67542C316D6A2BB2C529B06EA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146310.roa
Signing time:             Fri 22 May 2026 07:40:52 +0000
ROA not before:           Fri 22 May 2026 07:35:52 +0000
ROA not after:            Fri 21 May 2027 07:40:52 +0000
asID:                     146310
IP address blocks:        240a:ae4c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e7:29:bd:7c:be:93:f6:75:42:c3:16:d6:a2:bb:2c:52:9b:06:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:52 2026 GMT
            Not After : May 21 07:40:52 2027 GMT
        Subject: CN=B3662C827B7435F2205643C468BC9139A811BF0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c5:16:af:1c:36:e9:5c:61:7f:18:17:08:ba:
                    86:ba:2b:53:dc:09:fb:6e:08:d8:f7:45:c7:39:cf:
                    c3:f0:70:2a:20:01:52:50:e3:36:33:e4:9b:e5:04:
                    51:ef:a7:49:a4:9c:83:1a:51:7e:d3:45:72:b7:0f:
                    a4:91:d9:51:79:97:cf:5f:9b:12:ba:c1:7b:27:8f:
                    97:17:76:09:c0:96:d8:63:46:2e:84:5f:87:2c:d8:
                    2a:70:ee:05:ad:43:93:30:3a:fe:b3:6e:17:51:94:
                    3a:6f:a5:71:0a:50:83:44:f1:24:ba:32:bc:b4:ab:
                    91:27:c7:52:1a:ce:9b:18:f9:2d:33:e7:eb:d6:b0:
                    2a:45:be:37:40:8e:6f:19:78:84:2f:b5:92:43:46:
                    5b:68:d2:96:c5:d2:f0:69:41:96:ad:74:6d:4b:fc:
                    19:11:67:44:f7:f2:db:df:a7:e5:b3:96:bf:04:56:
                    1c:ec:00:07:06:be:a5:a6:da:df:49:61:7a:bf:fe:
                    ed:cf:b7:8b:4f:73:c2:9e:1c:31:89:62:51:c1:fc:
                    de:ab:54:ed:b9:ee:7f:b8:4c:24:e3:86:66:67:74:
                    ce:50:62:55:62:3d:ee:ef:9b:11:b6:55:6f:16:c9:
                    42:c6:7f:50:86:92:ba:50:b4:3b:65:1c:2a:91:67:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:66:2C:82:7B:74:35:F2:20:56:43:C4:68:BC:91:39:A8:11:BF:0E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146310.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:b0:f2:b6:a2:2d:35:31:53:20:a3:4b:2b:5b:48:7b:05:b5:
         a7:83:ce:73:54:9e:fa:f3:23:a9:34:fa:b9:3c:7f:97:10:41:
         5b:fb:8f:99:4e:fc:17:90:5c:11:a5:13:3c:86:b1:65:33:8b:
         f3:ec:89:54:6e:83:6d:61:d6:b6:9e:5a:43:f1:89:07:a2:82:
         78:c4:4f:97:3e:01:1f:f0:8c:6d:6c:4b:a7:df:e0:2e:4c:18:
         b5:06:2e:7f:ae:ca:6f:da:92:6f:83:a7:fa:0b:5f:c0:23:e9:
         9e:d9:06:9c:86:f0:d0:38:e3:fb:e0:af:f1:67:fe:47:78:5c:
         a0:50:ac:29:ce:db:47:44:32:61:c0:34:3f:c8:6f:27:80:f6:
         d1:24:22:6e:af:3f:5f:e8:d1:57:37:b8:c1:de:b5:29:4c:d3:
         49:fd:ef:a8:99:9d:23:22:fd:5a:d0:86:35:52:43:ab:9a:c2:
         d9:53:61:b4:a0:f0:a4:82:23:84:90:1f:ea:00:d3:a5:23:93:
         88:04:10:8e:8d:e2:ef:a3:3e:4a:11:7a:15:fb:8b:46:d6:93:
         d7:88:fb:cf:48:95:1f:0b:f7:a9:ea:04:85:54:57:f7:fd:87:
         14:ea:31:e9:4a:3c:94:3a:b4:c1:3a:76:2a:23:2e:3c:dd:9a:
         04:87:b1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----