Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146443.roa
File:                     AS146443.roa (raw, json)
Hash identifier:          ESDn7sfPV0tJw+rH7VvMESSMad0fSHMB7ZIJzZuxDe8=
Subject key identifier:   0A:65:82:3F:DC:78:36:EE:58:30:95:92:EC:6C:F3:2C:98:58:95:C6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3CD7BFC66E0B4313244BBCF1D59D094A51FF62B9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146443.roa
Signing time:             Fri 22 May 2026 04:26:41 +0000
ROA not before:           Fri 22 May 2026 04:21:41 +0000
ROA not after:            Fri 21 May 2027 04:26:41 +0000
asID:                     146443
IP address blocks:        240a:aed1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d7:bf:c6:6e:0b:43:13:24:4b:bc:f1:d5:9d:09:4a:51:ff:62:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:41 2026 GMT
            Not After : May 21 04:26:41 2027 GMT
        Subject: CN=0A65823FDC7836EE58309592EC6CF32C985895C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:e4:58:39:56:94:be:a3:15:2d:66:27:53:
                    e5:57:13:a5:fc:d4:cf:93:b7:b1:0d:6b:3b:92:94:
                    88:e9:44:b4:e1:b7:ea:ee:fc:6e:35:cd:27:73:1a:
                    8f:05:80:94:25:85:86:ea:b1:79:25:68:8f:1c:24:
                    e2:e8:62:df:6c:67:79:20:ee:0f:72:af:43:1b:80:
                    f9:43:f1:ed:5b:c9:7a:62:9a:01:11:25:7f:cc:83:
                    04:ac:5b:12:dd:13:c6:ba:24:a4:c8:52:c0:64:9f:
                    63:90:5c:2d:86:c6:99:2b:a8:5d:1c:3e:3f:5b:c7:
                    01:8a:d5:bf:7d:58:01:f1:7e:27:db:32:ee:15:3c:
                    77:40:ea:0f:dc:fe:e7:03:74:03:98:1d:1a:ce:d5:
                    6d:c1:ee:ac:0b:d5:f9:f4:9f:5e:24:43:1b:36:52:
                    bf:d4:33:98:57:a1:5d:ad:25:d8:b0:f8:11:a8:aa:
                    89:3b:ae:fb:b7:4b:05:84:78:ea:b4:9b:1e:16:3d:
                    73:92:07:fe:c3:87:66:15:d4:73:17:4c:f9:f3:98:
                    fe:48:e6:68:34:da:6e:bb:f8:fd:5e:ee:9c:ab:a8:
                    a3:25:b6:2f:f3:a6:7e:71:d1:b3:f9:ea:c9:ac:3d:
                    96:9f:37:d4:68:27:11:5d:f3:59:ba:32:88:cb:9f:
                    7f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:65:82:3F:DC:78:36:EE:58:30:95:92:EC:6C:F3:2C:98:58:95:C6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146443.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aed1::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:83:17:c1:73:a0:78:e9:29:b3:8b:2e:8a:db:05:7d:85:85:
         09:79:23:8d:a5:3f:ff:12:be:82:c4:96:a3:28:45:d2:20:33:
         4d:82:a9:a3:2d:62:61:09:39:fd:83:40:4a:89:1b:c3:10:e0:
         b8:ba:01:65:cb:0f:a5:6c:5b:16:9d:2f:76:b8:bf:9f:aa:36:
         51:fe:d2:fd:8b:2a:87:2b:9f:b6:5b:01:e6:c5:12:04:7f:26:
         40:23:be:74:d4:7c:e7:e5:1b:2a:16:1b:c1:b6:5c:b7:40:bd:
         0d:eb:3d:33:13:26:31:63:32:4c:b8:5c:71:e9:be:c2:85:46:
         13:9e:e9:4d:64:7a:4d:8d:97:52:91:3a:b2:62:cf:b2:a2:69:
         58:c8:dc:e4:4b:40:6a:12:cb:ec:e9:e8:d0:59:8e:35:6a:83:
         e4:81:b2:c3:c6:e9:fb:76:d8:71:d5:89:d1:21:0c:d0:53:a4:
         aa:69:b0:de:e6:60:54:45:6a:6c:e9:df:e3:f0:f8:f9:70:b5:
         6c:c1:ac:2e:18:17:a1:72:4e:3c:30:19:1b:fd:46:1b:3b:69:
         b6:8c:20:f5:64:2e:c4:6a:c7:01:25:2b:16:15:06:8e:7f:28:
         ef:8f:a3:f0:10:fd:61:cd:74:13:ca:52:21:ae:27:b2:17:a6:
         62:87:c5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----