Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146393.roa
File:                     AS146393.roa (raw, json)
Hash identifier:          Jr/1FSfKp3oHbMk7URavOhMP/2SEIAoJH7XBVeRB1Bg=
Subject key identifier:   5A:F5:E5:AB:05:38:33:CA:8C:F9:DF:47:92:38:F7:04:0C:D1:D7:6C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       01E9AC6F2811BBCE00FD95B1CD7AC3B3C765C328
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146393.roa
Signing time:             Tue 26 May 2026 02:35:14 +0000
ROA not before:           Tue 26 May 2026 02:30:14 +0000
ROA not after:            Tue 25 May 2027 02:35:14 +0000
asID:                     146393
IP address blocks:        240a:ae9f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e9:ac:6f:28:11:bb:ce:00:fd:95:b1:cd:7a:c3:b3:c7:65:c3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:14 2026 GMT
            Not After : May 25 02:35:14 2027 GMT
        Subject: CN=5AF5E5AB053833CA8CF9DF479238F7040CD1D76C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:ba:b2:e7:52:2a:60:0f:db:82:e9:d0:75:
                    10:13:51:96:f0:68:97:81:ed:a1:f9:3b:8e:cf:2a:
                    b6:2e:b0:d0:e4:b7:67:b7:69:69:7f:ed:31:ce:60:
                    07:7b:ac:af:d2:d6:44:75:11:ba:c8:ff:2d:0c:95:
                    41:cd:ad:f7:95:9d:55:5b:7a:6d:72:7d:b7:84:62:
                    28:40:5d:5a:28:48:8d:d3:8c:b4:29:8e:02:19:95:
                    bb:07:74:12:cd:38:5a:4c:05:aa:d4:51:ce:83:05:
                    0c:9a:6a:86:34:9f:0a:2d:ab:3c:f6:28:2b:56:24:
                    af:c8:97:77:cc:d2:7b:27:6d:f9:f6:54:e7:6d:2b:
                    30:c6:02:aa:4d:d9:3e:52:e2:f9:f0:e7:bd:c7:3b:
                    a3:5b:7b:f4:49:65:47:42:74:f2:be:78:c6:4e:25:
                    b1:c8:c1:2c:79:7e:90:1f:32:cd:b3:7d:eb:7d:de:
                    d7:54:25:ac:58:b9:b6:ec:25:91:aa:fa:d6:d4:6d:
                    58:b0:f0:99:89:69:35:f6:13:73:4f:7b:28:d7:a3:
                    26:98:b7:ba:34:6e:85:51:86:16:5b:56:04:04:59:
                    3a:16:c9:88:24:d0:9f:f5:60:f1:ee:ee:34:10:61:
                    c3:7e:61:02:38:f6:5d:d6:fa:fd:c2:aa:ea:fa:95:
                    04:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F5:E5:AB:05:38:33:CA:8C:F9:DF:47:92:38:F7:04:0C:D1:D7:6C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146393.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ae9f::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:1f:0a:9f:d7:c5:35:70:ed:c1:57:fe:3d:02:64:32:1f:75:
         b2:4b:ed:dd:b9:ba:f1:cf:61:fd:f1:6c:f1:af:d6:70:2b:cb:
         6c:5c:c3:44:de:c5:5e:4f:4f:9e:e9:a6:14:63:84:52:8c:b8:
         5a:19:a7:0e:ad:f9:97:bb:df:2a:a6:a3:1a:ea:06:f2:bc:84:
         57:4b:68:4d:3d:25:b8:2c:a2:25:a1:a8:c4:1b:8c:bf:f9:44:
         1c:93:ac:f8:65:cc:ce:c5:b0:93:e1:6c:b4:a3:37:bd:50:f1:
         5f:b0:19:20:08:b2:42:4f:fe:d3:87:30:f8:0b:30:22:d0:6e:
         c3:2f:45:bc:09:48:f4:3f:69:c1:b2:15:30:e5:04:da:a1:d5:
         8b:f7:7d:7b:3f:12:66:03:70:34:de:c1:b4:ae:ad:89:85:6b:
         89:47:d7:ab:bf:06:9e:19:57:51:1e:c2:00:ba:dd:e4:54:bc:
         5d:ba:e0:a9:0e:cb:74:8f:02:1a:3a:9e:97:cb:ae:21:ea:9f:
         ba:64:7e:db:61:41:73:ff:d8:6d:6b:5b:70:d7:2b:a4:c8:3f:
         80:bc:51:0c:87:ec:b8:7b:d6:1d:45:8e:32:c2:af:50:d8:65:
         db:ba:12:12:c8:21:7d:a8:b1:35:d8:30:e4:0b:39:87:a6:82:
         0a:f3:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----