Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146454.roa
File:                     AS146454.roa (raw, json)
Hash identifier:          /i6jE2qUflg2IeqbLvY/7WFFF57j2+7bireLWfIz/Fo=
Subject key identifier:   A1:8A:55:55:E4:0C:28:60:C2:46:C5:64:E1:89:0C:62:43:C4:0B:52
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4D3EA58801B48EC1A8941CCC4D6010641165CC2E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146454.roa
Signing time:             Mon 25 May 2026 01:51:13 +0000
ROA not before:           Mon 25 May 2026 01:46:13 +0000
ROA not after:            Mon 24 May 2027 01:51:13 +0000
asID:                     146454
IP address blocks:        240a:aedc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3e:a5:88:01:b4:8e:c1:a8:94:1c:cc:4d:60:10:64:11:65:cc:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:13 2026 GMT
            Not After : May 24 01:51:13 2027 GMT
        Subject: CN=A18A5555E40C2860C246C564E1890C6243C40B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:e4:5a:6b:99:ef:68:f0:5f:7f:b5:cf:e4:
                    52:08:39:bc:13:6d:be:59:d2:1d:a8:9f:8d:c3:d6:
                    b3:4c:2d:aa:5b:08:47:03:d5:3b:22:4a:44:66:61:
                    02:04:9f:97:e3:f2:ff:56:e8:35:02:bb:4f:b0:a4:
                    75:3e:4c:25:a7:0c:2d:17:1a:7d:c8:2c:08:16:3a:
                    c7:5e:b7:c1:47:68:90:90:1f:93:4b:71:94:f3:83:
                    42:33:fe:79:82:2b:8b:26:ea:d5:24:03:3c:d1:b2:
                    db:68:59:56:73:a8:5b:2f:ae:d6:61:b5:a4:b2:52:
                    1d:2a:41:8b:c8:94:62:b7:d3:da:ca:04:80:0e:31:
                    66:29:25:3a:6e:bf:58:00:bc:cb:65:ac:8c:0d:33:
                    f7:e9:56:b9:1e:d7:ec:66:03:c8:04:5e:58:96:22:
                    c9:16:e5:3f:a1:fc:18:a0:0f:80:e7:bf:99:1b:9f:
                    3c:0c:fc:c0:f3:23:de:94:f4:ca:04:0d:f6:f0:d8:
                    ea:f5:10:14:12:8c:c6:cd:11:23:91:bf:5e:83:d4:
                    13:7b:ab:3f:99:6d:a4:2c:3b:89:67:32:2e:78:6c:
                    90:27:0f:d0:df:79:35:a8:2d:66:d0:1d:bb:b8:5a:
                    c2:46:37:b5:a7:24:19:06:d5:8e:42:48:14:b0:c8:
                    de:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8A:55:55:E4:0C:28:60:C2:46:C5:64:E1:89:0C:62:43:C4:0B:52
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aedc::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:1d:35:7a:10:5b:70:a4:77:1f:b3:42:2d:b5:cd:81:44:
         73:15:1b:b0:4f:d6:67:78:ee:8e:6f:8f:e1:5c:72:7b:79:52:
         eb:ff:5f:f7:0e:b5:c9:6d:a4:5e:fe:e3:a9:24:41:c3:b3:fa:
         ae:c6:48:3e:c2:f8:5c:a2:dd:51:84:42:b0:32:77:8a:1d:9d:
         a4:4c:28:3e:59:bc:9a:c9:49:bb:57:14:70:de:a0:4f:56:b2:
         d2:76:74:ef:7e:85:11:00:0a:fb:18:0e:82:73:ed:ef:dd:51:
         55:00:fa:bf:18:75:cc:4b:48:bf:c0:12:e4:a9:00:dc:8b:c6:
         7d:55:3b:d4:67:e2:6c:38:d7:33:b8:d1:99:83:94:6b:67:45:
         90:a6:7f:63:3d:6b:12:c2:60:ed:15:ce:73:96:de:d8:40:fa:
         49:7a:12:56:d7:77:b2:0f:c0:76:0f:81:cb:ff:a9:c4:1f:d9:
         c6:ed:b5:63:3f:59:8e:64:4d:9e:61:24:4a:2e:2b:6a:1f:c1:
         bd:ad:fb:5e:35:11:32:5f:fd:15:ba:40:7e:e7:ff:21:a2:3c:
         1a:5f:04:fc:b0:47:2f:ae:a4:a1:61:96:37:5a:9a:62:87:20:
         46:07:91:a7:72:2b:f5:e0:0a:a8:2e:51:04:ff:4b:b3:27:21:
         67:85:c6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----