Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146324.roa
File:                     AS146324.roa (raw, json)
Hash identifier:          rJRrlPHEgd0070R1B1EawqKEQwN4BEWPbUmVpah4RhQ=
Subject key identifier:   CD:04:33:03:0B:3C:CC:6A:44:93:C7:77:84:ED:9E:75:72:07:F0:45
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6F8A2527FCA5075B8F31910AB820E41BA3B02DA6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146324.roa
Signing time:             Tue 26 May 2026 02:35:26 +0000
ROA not before:           Tue 26 May 2026 02:30:26 +0000
ROA not after:            Tue 25 May 2027 02:35:26 +0000
asID:                     146324
IP address blocks:        240a:ae5a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8a:25:27:fc:a5:07:5b:8f:31:91:0a:b8:20:e4:1b:a3:b0:2d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:26 2026 GMT
            Not After : May 25 02:35:26 2027 GMT
        Subject: CN=CD0433030B3CCC6A4493C77784ED9E757207F045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:96:ab:9e:e1:12:ec:65:49:59:c4:98:72:
                    04:5a:ca:a3:b1:4c:24:20:42:67:c0:75:0b:05:ae:
                    1b:9f:73:c3:d2:eb:0a:cb:b1:cf:38:bb:e1:b7:ce:
                    df:73:02:b5:ae:fd:a5:b3:e5:db:1d:8a:80:d6:fc:
                    39:15:e0:f1:34:8d:2d:c2:10:12:9a:98:1d:23:f8:
                    11:51:e1:68:65:45:42:c3:a3:0b:9d:58:d1:30:93:
                    64:ee:8f:d5:25:91:cf:3e:81:23:cc:17:5c:95:b6:
                    54:60:d2:8f:25:af:c1:56:97:ba:75:ef:15:b2:a5:
                    b9:bf:73:0c:d6:dc:83:28:14:26:2a:9a:94:dc:14:
                    0c:71:fa:be:71:9c:77:db:92:a2:f4:c9:6d:fd:dc:
                    af:68:8c:6d:b5:e2:b1:d5:5b:aa:78:ef:99:fd:94:
                    b8:23:c2:7e:00:0e:8f:61:55:46:64:b2:10:c0:48:
                    92:ca:6a:5f:aa:d5:5c:05:71:1f:98:5a:6b:8a:ae:
                    75:86:73:c0:3e:40:06:64:f2:6a:fc:37:b5:ca:ac:
                    85:da:5d:6f:cc:cd:8c:7e:44:37:17:0d:6c:9d:b9:
                    a9:de:4a:26:45:a1:32:b5:ec:ae:cc:9d:fe:37:19:
                    58:38:4c:22:82:e6:53:9e:62:4b:46:50:6a:e3:b2:
                    1e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:04:33:03:0B:3C:CC:6A:44:93:C7:77:84:ED:9E:75:72:07:F0:45
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146324.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae5a::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:b1:db:11:1e:a4:2f:3a:04:ca:e2:c9:c6:ac:7a:15:28:ef:
         bc:3d:18:74:d8:6a:bf:c2:c2:9e:9c:85:db:48:7c:89:6e:80:
         a6:12:d5:96:40:31:25:71:ca:b0:4a:ba:14:85:a8:a1:b2:4d:
         48:fe:92:ea:ba:d1:a0:57:4e:1e:eb:e3:5d:64:09:bc:d9:f6:
         6e:41:44:6f:9e:da:97:94:4d:99:9d:29:07:9e:0e:25:1e:06:
         a7:63:d8:3c:7d:71:7b:1e:75:00:09:9c:6e:33:d6:d7:36:37:
         80:e1:ba:da:ab:97:f5:47:08:a9:7b:67:d9:6a:4d:76:85:b8:
         93:d2:f4:ce:08:37:8b:79:ce:14:d0:81:83:b6:da:2c:cc:fe:
         8e:7a:3f:5b:e1:50:30:5a:00:5b:11:46:a1:17:8a:96:1f:53:
         b6:89:42:b6:b1:29:ae:90:21:55:3d:dc:50:36:27:a3:ce:93:
         51:c8:7a:74:5a:6a:4c:ba:4d:af:f3:15:65:03:64:6c:f8:f7:
         b0:66:10:49:e3:ca:1c:ff:7c:5b:04:5c:9d:c6:f5:2b:ba:3c:
         b3:52:b2:9c:fd:ef:bc:43:45:01:b2:ea:c1:93:00:64:04:e6:
         44:44:06:26:81:2b:28:64:bc:0a:bd:3d:85:a4:2a:1f:08:45:
         a5:1e:00:c3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUb4olJ/ylB1uPMZEKuCDkG6OwLaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMjZaFw0yNzA1MjUwMjM1MjZaMDMxMTAvBgNV
BAMTKENEMDQzMzAzMEIzQ0NDNkE0NDkzQzc3Nzg0RUQ5RTc1NzIwN0YwNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJZarnuES7GVJWcSYcgRayqOx
TCQgQmfAdQsFrhufc8PS6wrLsc84u+G3zt9zArWu/aWz5dsdioDW/DkV4PE0jS3C
EBKamB0j+BFR4WhlRULDowudWNEwk2Tuj9Ulkc8+gSPMF1yVtlRg0o8lr8FWl7p1
7xWypbm/cwzW3IMoFCYqmpTcFAxx+r5xnHfbkqL0yW393K9ojG214rHVW6p475n9
lLgjwn4ADo9hVUZkshDASJLKal+q1VwFcR+YWmuKrnWGc8A+QAZk8mr8N7XKrIXa
XW/MzYx+RDcXDWyduaneSiZFoTK17K7Mnf43GVg4TCKC5lOeYktGUGrjsh6bAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUzQQzAws8zGpEk8d3hO2edXIH8EUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquWjANBgkqhkiG9w0BAQsFAAOCAQEAj7Hb
ER6kLzoEyuLJxqx6FSjvvD0YdNhqv8LCnpyF20h8iW6AphLVlkAxJXHKsEq6FIWo
obJNSP6S6rrRoFdOHuvjXWQJvNn2bkFEb57al5RNmZ0pB54OJR4Gp2PYPH1xex51
AAmcbjPW1zY3gOG62quX9UcIqXtn2WpNdoW4k9L0zgg3i3nOFNCBg7baLMz+jno/
W+FQMFoAWxFGoReKlh9TtolCtrEprpAhVT3cUDYno86TUch6dFpqTLpNr/MVZQNk
bPj3sGYQSePKHP98WwRcncb1K7o8s1KynP3vvENFAbLqwZMAZATmREQGJoErKGS8
Cr09haQqHwhFpR4Aww==
-----END CERTIFICATE-----