Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146334.roa
File:                     AS146334.roa (raw, json)
Hash identifier:          sdedJey/Ekp+06q+mV/BYXTzmVSXJBKvSuVoS0TPhEI=
Subject key identifier:   BF:9C:A0:1D:A4:32:7C:6C:6D:BD:84:80:03:98:B4:40:A5:24:AF:CE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7B2DF2A43351198852EFD9CE95B200666041F870
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146334.roa
Signing time:             Fri 22 May 2026 06:46:00 +0000
ROA not before:           Fri 22 May 2026 06:41:00 +0000
ROA not after:            Fri 21 May 2027 06:46:00 +0000
asID:                     146334
IP address blocks:        240a:ae64::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2d:f2:a4:33:51:19:88:52:ef:d9:ce:95:b2:00:66:60:41:f8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:00 2026 GMT
            Not After : May 21 06:46:00 2027 GMT
        Subject: CN=BF9CA01DA4327C6C6DBD84800398B440A524AFCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:ef:92:12:3f:75:f0:cb:79:d2:45:86:e2:
                    41:f4:4d:37:a4:5f:64:28:56:f4:4e:c2:0a:b5:5f:
                    6d:e0:04:0d:a0:88:91:ca:e4:e5:ec:da:c7:28:76:
                    82:84:40:ec:e0:d1:c6:6c:fb:95:67:7f:f1:33:f9:
                    a5:06:1d:8d:3d:06:ae:46:54:0c:59:bc:1b:54:f0:
                    8a:c0:ef:b2:4a:61:7b:f3:b7:23:d6:44:c6:aa:97:
                    52:d0:8e:8c:0e:f3:20:78:cb:82:5d:be:f8:98:1d:
                    7b:63:a7:a7:b1:ad:02:81:59:ec:77:59:54:73:ea:
                    fc:38:40:8d:2b:db:95:88:0d:40:0d:20:b3:6a:8c:
                    07:95:12:31:06:fd:00:9e:5e:10:04:86:46:48:36:
                    d0:d9:91:4d:d0:8e:7a:ad:49:4d:b2:71:96:17:56:
                    14:99:e2:d5:5b:50:cf:8c:88:ca:24:5d:95:4d:d5:
                    b6:cf:18:91:c9:08:32:1c:b3:cd:02:86:ec:d6:ee:
                    80:71:d3:e8:d0:03:e1:4b:08:dc:a9:96:88:c3:c0:
                    86:16:e6:8b:84:9a:91:a0:51:a2:26:b2:31:f1:77:
                    91:df:50:c1:0d:de:60:8d:cc:33:0a:fb:83:51:2c:
                    5a:13:ef:33:78:ba:2d:48:f9:e6:9e:0b:a6:64:2f:
                    1c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9C:A0:1D:A4:32:7C:6C:6D:BD:84:80:03:98:B4:40:A5:24:AF:CE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae64::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:6d:0b:d5:8c:37:ab:9e:2c:45:01:cd:26:91:a2:9a:09:33:
         da:8d:28:5c:0f:a8:7d:44:b5:7b:c6:ce:d2:e6:8d:62:8c:03:
         53:5c:a7:d0:3c:38:2f:b3:ef:8d:40:ae:f7:21:60:ca:b4:17:
         2e:04:94:dc:a7:36:84:30:14:6b:51:93:b4:fb:fa:78:90:29:
         76:1e:3b:50:82:f4:d0:ac:4b:01:7f:08:db:d6:30:42:22:bc:
         a3:b1:c6:70:55:68:ec:66:ee:b5:e0:21:1e:73:bc:61:11:1f:
         18:dc:52:46:7a:e4:96:31:8d:56:7c:5d:83:bf:fd:d6:60:4e:
         96:bb:55:55:81:ba:69:ce:cc:a8:38:b7:43:1b:75:68:76:4d:
         da:23:04:50:c0:33:45:6b:13:89:67:75:66:f4:01:f5:ab:db:
         93:bc:ff:65:95:2a:d7:7a:66:9d:de:1e:2e:87:2e:f7:0f:1e:
         3a:b4:5b:d4:1b:17:07:4c:08:e4:c5:ed:ca:4f:7c:21:fb:a6:
         87:ad:6b:fd:74:98:1d:9f:24:8d:4d:33:6a:20:5a:03:1a:bb:
         05:80:32:92:46:f3:ff:47:4f:d0:52:d4:5d:9a:57:a3:ae:fe:
         ea:d4:63:12:2c:e7:55:48:93:48:b7:5f:83:7b:6b:05:65:c9:
         2c:7b:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----