Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146390.roa
File:                     AS146390.roa (raw, json)
Hash identifier:          1PCozW2jjG7/zVeRxAuiK7sooLSwSVEs1R1xxmiAGkM=
Subject key identifier:   7F:49:D4:D3:B7:6B:39:E2:75:E3:8F:B4:C7:01:97:73:48:2C:8B:98
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5A3B70185BF24CF8DCA767E9334F73AD0AB2E2B7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146390.roa
Signing time:             Mon 25 May 2026 06:28:40 +0000
ROA not before:           Mon 25 May 2026 06:23:40 +0000
ROA not after:            Mon 24 May 2027 06:28:40 +0000
asID:                     146390
IP address blocks:        240a:ae9c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3b:70:18:5b:f2:4c:f8:dc:a7:67:e9:33:4f:73:ad:0a:b2:e2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:40 2026 GMT
            Not After : May 24 06:28:40 2027 GMT
        Subject: CN=7F49D4D3B76B39E275E38FB4C7019773482C8B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fc:a8:50:a4:3f:34:f7:51:53:55:7c:03:ee:
                    1f:58:d1:3b:81:e2:2a:72:c2:56:a8:aa:58:0f:17:
                    83:cf:e3:0e:a1:dc:82:f5:26:9d:14:ae:34:fa:53:
                    e2:b4:75:a2:e6:44:12:27:57:7d:c9:d2:63:f5:8d:
                    76:24:b3:20:d4:40:0e:67:2d:08:c8:3c:6f:7c:c8:
                    06:fc:50:30:9e:f6:0d:5a:59:dd:d2:e8:77:9d:08:
                    1d:91:71:4a:03:ba:4b:16:7d:6b:de:37:d9:7b:ac:
                    0e:40:37:c1:92:7e:c0:3f:21:62:46:60:f3:cf:fc:
                    fb:be:18:6b:8c:4f:9f:a3:39:b0:7c:b9:df:b8:ee:
                    f0:e8:09:e1:1a:92:55:a9:7a:eb:85:99:42:a6:1d:
                    d0:24:95:47:8c:1b:18:d0:6d:9a:80:2e:eb:b5:65:
                    29:63:a9:fd:c7:3e:bf:04:5b:31:e4:34:44:8e:a3:
                    87:ea:12:61:57:7b:24:b4:89:32:f5:65:00:9e:2e:
                    db:66:f5:8c:e2:56:f7:08:9b:ec:3c:ef:74:af:fa:
                    ff:1a:21:1e:10:de:a8:ea:1f:42:80:5c:43:ba:21:
                    30:2e:31:bc:30:a2:21:cf:8f:66:32:8b:5d:4c:10:
                    5f:e0:0a:d9:57:d1:c7:47:03:93:a9:05:1b:33:f4:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:49:D4:D3:B7:6B:39:E2:75:E3:8F:B4:C7:01:97:73:48:2C:8B:98
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146390.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:9c:9f:76:20:bf:e2:78:84:94:d1:25:6f:c9:52:31:37:17:
         52:59:fd:b0:cf:51:2f:3b:ee:0e:50:9a:ad:0c:f6:64:ef:58:
         60:ad:67:a4:a3:9c:c1:03:5f:73:58:b4:df:38:de:50:e6:92:
         16:f5:6f:c3:b8:58:a9:85:95:04:22:56:44:6b:bb:a1:ff:17:
         44:4f:7a:d0:18:7d:13:87:a5:16:06:0a:e4:90:6d:a6:13:cc:
         77:d1:71:87:2e:44:31:82:54:00:26:c2:d7:ed:f8:fe:1b:9f:
         a6:58:8c:f4:e0:98:d5:1b:6e:ae:0b:02:e1:25:bc:8d:13:36:
         74:58:e1:6c:e2:a5:09:63:f7:34:5c:7a:0a:75:b9:9f:dc:d7:
         b8:f1:f9:ec:6c:1f:6f:99:cf:93:8e:ae:ef:b0:10:5e:92:c7:
         81:e7:73:fc:12:d8:fb:78:24:cf:85:33:c5:16:41:10:b5:fc:
         ac:65:19:84:5b:a7:b0:be:4b:cf:fa:30:6f:7c:0e:5b:8b:ac:
         ef:e1:af:9c:98:65:55:59:57:3f:8c:a3:61:00:0e:6c:4c:20:
         de:2d:fd:f2:bd:13:86:6c:fc:f5:17:44:73:19:bb:1d:76:e6:
         54:7f:ae:c2:87:87:7f:f9:eb:b7:8f:88:72:39:c5:c7:72:e5:
         06:af:e3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----