Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146312.roa
File:                     AS146312.roa (raw, json)
Hash identifier:          mPUGfdnCS9YlrOKa28KKLceDyo9pptLyh+yFbtyEVJs=
Subject key identifier:   4B:DB:48:02:F0:19:AE:C4:3F:D5:BA:BC:97:5C:59:7D:AC:85:78:2A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5B0927334869E41DFC7BAD14BBCA0B9BA4824451
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146312.roa
Signing time:             Mon 25 May 2026 02:22:15 +0000
ROA not before:           Mon 25 May 2026 02:17:15 +0000
ROA not after:            Mon 24 May 2027 02:22:15 +0000
asID:                     146312
IP address blocks:        240a:ae4e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:09:27:33:48:69:e4:1d:fc:7b:ad:14:bb:ca:0b:9b:a4:82:44:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:15 2026 GMT
            Not After : May 24 02:22:15 2027 GMT
        Subject: CN=4BDB4802F019AEC43FD5BABC975C597DAC85782A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:53:5f:8d:db:5c:21:81:8c:8f:ce:7c:47:b8:
                    cd:ae:b2:a0:9d:83:12:e8:d8:c6:df:fe:af:92:df:
                    4d:f8:71:29:3b:0d:c2:87:70:18:f3:5f:da:8a:e7:
                    34:97:83:3c:11:46:3b:22:bd:4a:d7:81:4b:e6:68:
                    a9:a4:f5:2f:3e:7e:8a:41:8b:4c:9d:5c:ca:63:2d:
                    72:fb:eb:1f:42:44:d2:e0:f7:e3:01:e7:b0:ea:6c:
                    42:1f:78:10:74:cc:a4:05:99:c2:63:4e:4d:e1:04:
                    5f:3d:32:04:ac:70:48:21:2b:10:b0:25:5c:04:e2:
                    0b:b2:e1:d8:74:97:1d:02:99:29:52:2a:84:c1:8a:
                    23:8f:79:87:11:05:58:c5:03:2d:81:43:32:e9:95:
                    93:a7:0d:6d:b4:17:e3:bd:81:68:53:f0:56:e6:24:
                    2f:70:63:67:a2:3e:27:3a:10:51:b3:9f:50:39:34:
                    b4:47:e6:60:bb:92:69:d1:87:8d:bc:f3:82:27:8d:
                    71:37:ca:1b:3e:8b:42:5e:3d:28:e9:11:68:53:b4:
                    09:f5:31:68:77:ea:fa:f7:0b:14:53:0e:ee:26:3c:
                    d4:ff:c4:82:56:50:3f:10:02:b4:c6:2a:99:f6:13:
                    09:d9:ad:e4:4e:a0:3e:b9:7c:8a:dd:2d:4a:5a:90:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DB:48:02:F0:19:AE:C4:3F:D5:BA:BC:97:5C:59:7D:AC:85:78:2A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146312.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae4e::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:53:48:62:6d:f3:39:6c:af:d2:e6:ae:c5:20:8a:db:1b:3e:
         82:87:11:f4:9d:a9:f6:08:1d:61:4c:08:7c:8e:58:d2:8d:c6:
         4b:65:3b:68:06:83:7b:8b:3f:25:43:e1:a5:d5:b2:4b:d0:91:
         71:3e:8d:9b:bb:02:dc:22:ee:87:ca:0f:91:76:1e:09:01:27:
         95:ff:12:c0:1d:75:a4:e6:b8:3f:d3:8f:60:5d:5c:c4:b4:39:
         3d:00:33:f6:3c:d9:39:a6:73:06:55:71:d5:87:8d:a8:e0:31:
         df:7f:2f:e8:d5:ba:15:11:4b:b0:0d:c8:1f:c9:e6:c1:57:89:
         9f:99:0c:5b:37:06:04:66:33:3d:d5:b7:d8:ac:38:79:72:0d:
         a4:a1:f0:d2:07:ad:06:e4:07:d1:7e:aa:c6:99:fe:b6:a5:d9:
         82:17:e0:fe:1d:7b:8d:de:e8:a0:aa:74:bf:11:dd:6b:f7:01:
         0c:55:a2:89:99:c8:3e:c0:17:06:2a:92:f5:6b:26:2b:cf:b1:
         fd:7a:15:ac:54:dd:b6:ea:1f:bf:05:c1:ad:9b:77:4f:ae:a4:
         ee:02:81:68:7f:22:4e:01:9d:a6:b0:b3:bf:27:1f:8f:c3:bf:
         b7:fc:84:0d:57:70:b8:94:23:28:6e:09:6a:e4:cc:45:89:9c:
         6e:1d:43:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----