Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146434.roa
File:                     AS146434.roa (raw, json)
Hash identifier:          pH1YOUXeCmx6mVZaG0UHpOc4JRzt/cQogU/0rV6eX+Q=
Subject key identifier:   35:0C:A4:0A:F2:F0:08:4C:D8:F4:AB:28:CE:AE:AE:CC:CF:95:86:3E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4188573B938AFB552D9AF25CE297731CF2D19AF6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146434.roa
Signing time:             Mon 25 May 2026 01:38:15 +0000
ROA not before:           Mon 25 May 2026 01:33:15 +0000
ROA not after:            Mon 24 May 2027 01:38:15 +0000
asID:                     146434
IP address blocks:        240a:aec8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:88:57:3b:93:8a:fb:55:2d:9a:f2:5c:e2:97:73:1c:f2:d1:9a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:15 2026 GMT
            Not After : May 24 01:38:15 2027 GMT
        Subject: CN=350CA40AF2F0084CD8F4AB28CEAEAECCCF95863E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:53:fc:b8:6e:3e:4e:6b:c7:83:dd:9b:66:
                    b6:81:69:c1:6c:4a:74:a7:60:7e:dc:0a:10:2a:c2:
                    53:5d:f7:37:00:d5:71:6f:5a:21:97:52:d1:3a:57:
                    32:ee:11:62:93:09:30:52:82:7c:3f:13:91:af:e7:
                    4f:46:27:be:4c:ab:1b:9e:a2:3f:c5:24:2e:78:3e:
                    5e:36:e0:93:71:41:e2:80:38:9a:e3:f0:27:50:44:
                    30:f5:ad:fc:b5:ca:6d:7e:2f:8c:e5:97:da:b1:76:
                    fd:68:25:3a:df:e7:2e:10:48:68:ec:08:25:dd:96:
                    c6:e0:a0:04:27:68:c0:55:a9:5b:31:24:77:12:81:
                    46:89:5e:7d:33:61:bc:e5:e2:f1:1b:4e:4d:d8:f7:
                    ff:f6:7a:52:82:f4:e9:6c:70:24:6d:7a:77:e9:71:
                    c5:e7:ee:f8:8a:61:75:37:57:22:ea:8a:36:eb:84:
                    07:5e:f6:34:98:4c:78:1e:0f:76:98:d0:15:a8:2c:
                    f2:7f:b8:b4:f2:8a:be:c0:54:b2:c4:15:45:6b:2f:
                    1f:82:b0:74:83:21:c5:b0:8f:fc:bb:c2:3a:ee:35:
                    56:c8:62:0f:24:4a:b6:35:9e:44:79:f5:4d:85:1e:
                    67:5c:76:26:d9:dc:00:fc:98:25:4f:1f:67:19:41:
                    03:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0C:A4:0A:F2:F0:08:4C:D8:F4:AB:28:CE:AE:AE:CC:CF:95:86:3E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aec8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:b5:cf:5c:f3:25:db:f7:a6:f3:eb:f2:01:99:cd:b6:c3:9e:
         59:31:e5:b3:62:40:5f:a8:49:e5:c6:c6:f4:1d:c6:42:8e:c8:
         62:a9:b9:9d:31:43:75:81:37:cc:f2:b7:43:bf:94:9e:53:7c:
         2e:ba:77:4d:17:77:33:c0:51:10:7d:61:78:fe:99:0b:7f:12:
         6f:0d:95:ab:8f:b0:fd:16:60:23:5f:a5:15:f3:ad:c9:21:80:
         f5:e2:e8:7c:1e:0b:03:79:ef:67:ce:f7:ec:02:04:03:4c:b2:
         c1:b0:e8:25:76:ec:59:d7:e7:b9:dc:18:7e:9e:d0:18:ba:3f:
         d6:72:1c:3d:22:f3:94:1c:1a:4b:0c:68:d1:1a:06:0a:89:b4:
         62:c9:d4:1c:9d:c2:6c:28:4c:2a:b8:9e:98:5d:f6:cf:dc:8a:
         45:e1:e8:77:4d:f1:9c:80:ed:ab:07:b0:4a:28:d8:5f:d3:95:
         19:2f:bd:6e:6f:0c:57:3f:46:6d:5d:83:9c:ac:70:68:63:2e:
         7c:1c:19:6c:3e:16:34:c7:2a:b3:8f:d2:f0:e2:7a:22:db:e3:
         4b:e0:3b:86:3b:3b:b5:c3:15:94:9c:c6:cb:06:e8:52:d9:75:
         5a:be:9f:e4:f9:6b:f9:f0:2f:ec:2d:e8:8a:b7:8e:b8:cb:cc:
         46:4b:3a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----