Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146377.roa
File:                     AS146377.roa (raw, json)
Hash identifier:          Tu6okYn6FWfqCfDmNbMHI+95KYa1kMqDnMaQCLhvUN8=
Subject key identifier:   61:69:51:98:3F:66:46:7D:70:E3:84:EE:02:B4:3F:8D:EB:EF:D9:FA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       07F7BD6113B6B06DCF53F10794F78CDC25FB2B5F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146377.roa
Signing time:             Tue 26 May 2026 02:35:11 +0000
ROA not before:           Tue 26 May 2026 02:30:11 +0000
ROA not after:            Tue 25 May 2027 02:35:11 +0000
asID:                     146377
IP address blocks:        240a:ae8f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f7:bd:61:13:b6:b0:6d:cf:53:f1:07:94:f7:8c:dc:25:fb:2b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:11 2026 GMT
            Not After : May 25 02:35:11 2027 GMT
        Subject: CN=616951983F66467D70E384EE02B43F8DEBEFD9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:cb:27:b5:75:71:3d:c7:af:91:52:5e:79:
                    30:9d:4d:a4:10:d0:dd:02:26:c5:02:cb:6d:3c:01:
                    93:11:23:43:62:d1:93:68:8e:42:ef:25:81:46:a7:
                    54:25:32:f2:a9:f3:81:3c:d6:6b:d4:a1:94:88:f1:
                    d7:87:2f:7b:2d:74:b9:a0:ba:41:3f:c5:77:44:1c:
                    3b:dd:c8:4d:a6:58:c4:4a:f7:6f:fb:a3:06:6e:f2:
                    a6:5d:43:37:55:8f:8b:eb:bf:eb:12:94:3a:a5:29:
                    e6:20:36:2e:ae:5b:6d:24:96:df:1d:18:49:cc:9d:
                    dd:ba:42:a4:95:e6:5b:1a:6b:41:ab:f0:a2:bc:08:
                    98:bf:b4:49:f4:54:4d:db:c9:05:62:3c:e7:a1:d8:
                    f0:bd:c6:93:cd:b6:c0:8a:61:2c:7e:a8:07:37:9d:
                    4c:98:da:2e:c1:14:40:e8:39:4e:cd:0f:79:7a:26:
                    e7:78:66:2e:b2:02:b7:4c:2b:cb:62:64:81:db:47:
                    84:cc:19:65:b2:8d:0f:d4:5d:d2:0e:1d:62:84:a7:
                    92:d5:cf:2a:f2:85:39:e0:62:9c:4d:16:dd:7a:f3:
                    56:a2:de:d7:0a:c3:da:90:79:a8:b5:0c:b6:7e:7c:
                    a2:bf:1b:69:d4:f0:50:3d:31:e9:46:74:cc:5c:6a:
                    4b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:69:51:98:3F:66:46:7D:70:E3:84:EE:02:B4:3F:8D:EB:EF:D9:FA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146377.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae8f::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:7a:0b:4a:34:3b:fd:15:77:c2:e9:03:9e:ab:ca:f8:9a:9b:
         d8:87:6e:42:8c:6a:1f:74:a7:7f:c2:7d:a8:de:be:27:68:9a:
         26:44:6d:e8:49:47:32:f0:2b:4b:4a:38:81:61:1e:9b:f7:92:
         da:17:66:bc:33:b6:5b:86:e4:4a:72:71:01:2b:5f:7f:08:e5:
         5a:81:71:a5:70:72:df:87:65:cc:da:8b:cc:b4:cd:76:99:a1:
         00:d0:f0:7a:e7:b8:4c:47:46:d3:ec:8a:6f:f7:54:ca:94:fb:
         79:ab:ff:b0:cb:80:09:74:63:7f:5a:8f:af:a8:91:54:4a:d8:
         1d:d7:8c:bf:ac:2b:21:ca:2a:70:f7:ff:b7:57:ee:60:f9:7d:
         01:24:e3:fb:a6:52:37:f7:8c:41:c0:29:af:50:67:6f:bc:01:
         e6:68:d6:5c:cb:73:9d:f3:6b:18:ce:a1:f7:8c:bc:6b:0e:12:
         3a:ac:82:39:bc:4f:98:91:fd:83:68:31:f4:aa:a1:fc:55:39:
         2e:05:51:6b:20:26:fb:e8:11:69:60:35:a9:6c:80:08:ec:c6:
         0c:05:5a:b1:bf:39:9a:df:ff:82:34:09:83:a1:fc:30:19:40:
         5c:12:0b:ac:6e:f0:5a:18:fd:c1:f0:e9:06:b8:c7:49:10:d9:
         78:9c:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----