Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146403.roa
File:                     AS146403.roa (raw, json)
Hash identifier:          UweDZ4Qa4Alz1kObTb/ODnEqvdyBPxYTyQrzeiVMvd4=
Subject key identifier:   6D:02:3F:5F:2C:B7:55:34:66:50:7E:F6:53:0A:DE:EE:FC:DC:F6:94
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       59B520473F2E23BDE195C4DD3A8C2C8F3202AF26
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146403.roa
Signing time:             Mon 25 May 2026 03:19:10 +0000
ROA not before:           Mon 25 May 2026 03:14:10 +0000
ROA not after:            Mon 24 May 2027 03:19:10 +0000
asID:                     146403
IP address blocks:        240a:aea9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b5:20:47:3f:2e:23:bd:e1:95:c4:dd:3a:8c:2c:8f:32:02:af:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:10 2026 GMT
            Not After : May 24 03:19:10 2027 GMT
        Subject: CN=6D023F5F2CB7553466507EF6530ADEEEFCDCF694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:27:48:b7:3a:7e:e0:f4:64:3e:e1:47:db:11:
                    9b:ae:a6:a3:09:9f:8a:91:bd:2b:03:d7:61:ab:d8:
                    d7:db:f8:15:87:dd:82:d7:d2:d2:ca:d7:cd:e8:a8:
                    89:c6:6b:1c:05:4c:89:32:06:19:d9:3a:c9:8a:4e:
                    8c:fd:ca:2e:a3:da:75:0a:9f:68:18:7c:47:f2:86:
                    08:a3:cc:0b:bb:64:5e:d2:4e:d8:86:be:33:37:5e:
                    ef:94:56:9d:9b:5c:a1:58:d2:c3:a3:5c:6f:8f:35:
                    8e:2a:42:35:ae:05:79:34:40:e1:92:2f:d2:df:26:
                    8a:33:5f:ae:d0:bf:58:c6:5b:be:58:45:0c:81:b2:
                    64:74:a0:bc:14:7b:46:1a:57:eb:75:61:5d:e8:f7:
                    5d:b3:00:38:87:e5:e1:38:5d:5b:31:90:61:35:34:
                    e8:ba:dd:47:8d:43:9b:01:cc:c9:53:48:ee:6d:10:
                    5d:a8:7f:68:26:50:5c:eb:81:41:43:17:fc:c7:3d:
                    36:55:cd:17:4a:29:bb:1c:91:43:d3:ec:44:00:59:
                    47:0d:75:b3:74:01:3d:f4:f1:69:48:1a:85:62:5f:
                    3b:99:54:95:1e:ef:15:0d:4b:ff:2e:f8:e1:5b:0d:
                    f0:8b:e6:ec:5c:4b:9c:f1:e6:20:a3:78:41:f7:43:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:02:3F:5F:2C:B7:55:34:66:50:7E:F6:53:0A:DE:EE:FC:DC:F6:94
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146403.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aea9::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:15:ab:71:72:a1:1a:e4:cc:d1:2a:11:a3:9a:a2:48:62:c2:
         b9:63:47:89:aa:ae:0f:53:65:b6:a0:3b:a7:b1:da:b6:ce:7d:
         8f:85:01:6a:13:f5:b1:01:01:74:3e:a0:08:62:25:bc:4d:0c:
         36:87:00:21:ac:bc:bc:c4:83:2e:e8:4c:9a:99:73:66:61:f9:
         da:19:2f:79:79:df:38:74:bc:7c:b2:14:b4:d4:13:cf:04:35:
         5c:e8:fd:16:cc:52:55:fa:2a:2d:ef:af:e2:b4:24:c3:84:07:
         6b:2d:f5:00:19:c2:e8:e3:a4:ec:7f:46:ad:5b:17:c3:c3:b6:
         be:ea:aa:26:57:99:24:3e:8b:c2:5f:41:3e:a7:9b:44:74:de:
         73:74:ce:09:ca:b8:3e:e3:1a:1f:dd:72:56:92:c5:e0:4a:24:
         84:7e:89:62:8b:f1:b6:8e:62:90:80:a0:3d:e6:2d:6e:67:20:
         21:8b:b9:3b:f6:6c:43:bb:e3:7a:07:5f:40:1b:6b:55:df:5a:
         bb:0d:a6:08:d2:1a:75:87:9f:84:14:15:47:f1:bf:dd:a0:06:
         fc:92:3e:be:f5:8a:b0:42:0e:e8:01:a8:cf:eb:e1:50:01:52:
         87:ae:3d:75:7a:c8:45:fa:65:b5:25:02:75:61:e3:e2:ba:73:
         c8:3e:7c:e3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWbUgRz8uI73hlcTdOowsjzICryYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MTBaFw0yNzA1MjQwMzE5MTBaMDMxMTAvBgNV
BAMTKDZEMDIzRjVGMkNCNzU1MzQ2NjUwN0VGNjUzMEFERUVFRkNEQ0Y2OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtJ0i3On7g9GQ+4UfbEZuupqMJ
n4qRvSsD12Gr2Nfb+BWH3YLX0tLK183oqInGaxwFTIkyBhnZOsmKToz9yi6j2nUK
n2gYfEfyhgijzAu7ZF7STtiGvjM3Xu+UVp2bXKFY0sOjXG+PNY4qQjWuBXk0QOGS
L9LfJoozX67Qv1jGW75YRQyBsmR0oLwUe0YaV+t1YV3o912zADiH5eE4XVsxkGE1
NOi63UeNQ5sBzMlTSO5tEF2of2gmUFzrgUFDF/zHPTZVzRdKKbsckUPT7EQAWUcN
dbN0AT308WlIGoViXzuZVJUe7xUNS/8u+OFbDfCL5uxcS5zx5iCjeEH3Q2/5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbQI/Xyy3VTRmUH72Uwre7vzc9pQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NDAzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquqTANBgkqhkiG9w0BAQsFAAOCAQEAURWr
cXKhGuTM0SoRo5qiSGLCuWNHiaquD1NltqA7p7Hats59j4UBahP1sQEBdD6gCGIl
vE0MNocAIay8vMSDLuhMmplzZmH52hkveXnfOHS8fLIUtNQTzwQ1XOj9FsxSVfoq
Le+v4rQkw4QHay31ABnC6OOk7H9GrVsXw8O2vuqqJleZJD6Lwl9BPqebRHTec3TO
Ccq4PuMaH91yVpLF4EokhH6JYovxto5ikICgPeYtbmcgIYu5O/ZsQ7vjegdfQBtr
Vd9auw2mCNIadYefhBQVR/G/3aAG/JI+vvWKsEIO6AGoz+vhUAFSh649dXrIRfpl
tSUCdWHj4rpzyD584w==
-----END CERTIFICATE-----