Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146433.roa
File:                     AS146433.roa (raw, json)
Hash identifier:          D7eHU+VUS9RMktkqg9la54pEvlufqD0f9ngRnwCG6rs=
Subject key identifier:   07:00:37:E4:E6:09:78:A5:87:E6:93:8C:BD:62:E9:B8:53:7B:FD:EF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       523F7BACBA69439448970CADBF0BC0DDBF9C190E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146433.roa
Signing time:             Tue 26 May 2026 08:52:54 +0000
ROA not before:           Tue 26 May 2026 08:47:54 +0000
ROA not after:            Tue 25 May 2027 08:52:54 +0000
asID:                     146433
IP address blocks:        240a:aec7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3f:7b:ac:ba:69:43:94:48:97:0c:ad:bf:0b:c0:dd:bf:9c:19:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:54 2026 GMT
            Not After : May 25 08:52:54 2027 GMT
        Subject: CN=070037E4E60978A587E6938CBD62E9B8537BFDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:a1:77:4c:5b:d0:56:bc:fa:1b:d4:5e:1e:
                    26:3c:b9:8a:e0:d2:40:0d:e2:ce:11:1d:f9:df:d2:
                    64:46:de:74:38:7e:d6:c7:07:01:4f:92:29:66:94:
                    cf:57:b7:3f:65:11:2f:b4:34:4d:85:10:47:5c:ec:
                    cc:5d:2e:46:4c:d7:87:32:5a:63:54:df:e1:7c:dd:
                    81:c2:64:27:75:7c:6f:68:8a:38:11:0b:ee:bf:fa:
                    51:d4:0a:ab:96:56:b4:a4:df:5b:46:da:7d:9e:37:
                    c9:ce:14:cf:54:78:80:1d:44:91:84:96:40:ed:cb:
                    57:e9:cb:e0:30:ed:7c:c9:d5:36:d2:7f:42:68:74:
                    83:0a:cc:d5:b4:1c:05:90:af:d8:7c:19:de:33:a3:
                    58:73:e5:f8:8f:c8:ea:87:b8:6e:dc:d5:f0:fa:12:
                    05:dc:56:cc:b7:e4:dd:12:3f:b4:0b:4b:31:fa:d8:
                    ef:0d:39:91:d3:e4:67:99:db:a0:dc:49:9c:02:06:
                    84:ec:54:ca:4f:76:7e:58:0a:75:c1:81:32:48:e9:
                    80:60:1f:9d:f4:65:47:8c:30:ff:9d:f9:2a:61:34:
                    e0:84:3b:84:2f:72:fc:fd:09:aa:be:38:4f:6f:bb:
                    21:94:48:32:a2:a3:35:e3:3a:d4:62:f3:9b:b4:fb:
                    4d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:00:37:E4:E6:09:78:A5:87:E6:93:8C:BD:62:E9:B8:53:7B:FD:EF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aec7::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:19:ca:78:36:9e:cd:31:72:75:ca:81:99:c6:b4:1c:4f:02:
         ea:4c:e3:3c:ee:bf:44:fd:99:e3:be:9d:bb:c0:df:5f:9b:51:
         80:0c:7c:ab:8e:31:3e:c2:49:d0:41:ea:4e:0b:9c:b9:23:2a:
         ea:98:53:cd:1b:95:c2:cb:4b:e8:44:1e:27:60:64:54:23:ba:
         6c:d3:48:04:d0:07:3e:b2:79:39:ad:5b:f1:41:05:5e:bf:56:
         9c:28:7a:5a:9e:77:21:59:0c:96:30:17:51:f1:4f:26:86:b9:
         49:61:78:d7:c9:3f:24:9a:2a:6c:ff:9a:df:1d:dd:5a:14:5e:
         cf:6e:49:c4:6c:8c:3c:d7:18:25:a2:b1:80:7d:da:9b:18:dc:
         d8:c0:b6:39:f3:fb:62:dd:d2:af:9c:e5:8b:c8:95:c6:52:15:
         0b:94:68:de:31:82:7f:83:36:d2:07:2e:37:9d:39:a7:b1:b7:
         cc:cf:ff:3a:cb:f0:c1:46:25:96:d3:91:a2:17:66:4b:fc:b1:
         42:0a:f0:5d:b7:42:35:d3:2f:40:2c:bf:40:a9:30:1d:9f:87:
         00:1c:ba:28:4c:8a:79:6b:6b:e7:64:40:2d:ff:c9:d2:31:6a:
         4b:62:ea:85:19:b5:70:da:17:22:68:ee:12:29:a0:93:30:45:
         e2:96:25:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----