Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146457.roa
File:                     AS146457.roa (raw, json)
Hash identifier:          37IprivhmtrOuhgkWAogpgKqT1cpNDlIDqo4pZPVfCs=
Subject key identifier:   84:9A:4D:FB:01:6E:51:BD:82:83:C0:56:BD:C6:B6:4A:3E:D6:39:48
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4442B49FB45611DA24247A9B275F36F9A55D9F05
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146457.roa
Signing time:             Fri 22 May 2026 01:50:34 +0000
ROA not before:           Fri 22 May 2026 01:45:34 +0000
ROA not after:            Fri 21 May 2027 01:50:34 +0000
asID:                     146457
IP address blocks:        240a:aedf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:42:b4:9f:b4:56:11:da:24:24:7a:9b:27:5f:36:f9:a5:5d:9f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:34 2026 GMT
            Not After : May 21 01:50:34 2027 GMT
        Subject: CN=849A4DFB016E51BD8283C056BDC6B64A3ED63948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:a9:78:75:30:1b:66:58:25:d7:95:e4:bf:
                    72:cb:28:14:72:61:1a:e2:bf:b7:48:28:9f:1e:c4:
                    a7:19:78:a3:a5:30:50:48:ba:71:3f:97:bb:e1:e2:
                    f4:dd:a9:1d:c4:43:06:6c:d9:e9:bf:eb:9e:1a:c5:
                    1d:3f:69:8d:19:f3:b3:61:fd:24:27:1c:5c:39:1e:
                    71:3a:09:8f:49:66:61:04:59:b9:b6:68:ba:25:8c:
                    87:07:8b:5a:e3:ad:8a:62:86:aa:38:13:c2:2e:24:
                    53:c8:b8:1e:d1:6f:29:3a:d8:6b:cf:a6:d8:6a:05:
                    3c:9f:1f:23:bb:51:bd:6d:b3:ee:70:f8:f8:9c:06:
                    87:17:49:69:2b:3a:24:7c:72:37:fb:fd:c3:54:44:
                    d4:5c:72:f8:e5:3c:aa:68:1a:45:1b:bf:c7:af:3a:
                    2e:a1:43:07:a6:91:19:df:3a:52:44:4b:82:53:71:
                    50:b8:4c:99:e6:d7:54:77:3b:39:84:3c:e9:f4:11:
                    5b:2b:66:e8:2a:f3:75:b7:6e:d8:0c:e4:d5:07:10:
                    e1:43:f3:c7:98:0d:be:ce:bc:4b:07:30:71:76:9b:
                    4a:fd:df:bc:36:af:da:41:f4:b8:40:bf:22:2d:a4:
                    a5:48:35:f9:25:11:75:fd:c7:95:94:6f:df:19:88:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9A:4D:FB:01:6E:51:BD:82:83:C0:56:BD:C6:B6:4A:3E:D6:39:48
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146457.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aedf::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:82:af:5f:4f:85:35:6e:8d:32:28:17:11:a1:fe:90:94:d8:
         88:ef:ac:f2:bd:ba:c5:3e:7d:75:e5:ea:cc:c8:6c:fd:83:58:
         53:58:e5:a8:4d:e3:89:eb:20:0d:98:62:bd:2a:97:29:bf:f5:
         bc:22:0d:97:87:04:09:8a:89:b6:e0:e7:31:5d:9e:bb:7b:26:
         cd:c1:a4:0f:63:0f:7d:96:21:5b:f8:43:73:2c:d4:ab:f2:bb:
         9e:ee:3f:b6:93:c4:cb:70:82:f0:b9:33:1c:f2:08:ef:dd:4c:
         64:00:c8:25:73:11:66:36:92:9d:7d:bc:e8:d0:a3:96:6e:ea:
         8d:45:77:ca:ea:4f:6d:2e:d2:31:7f:70:ee:77:d4:15:a1:3e:
         89:b3:f9:01:7c:0a:81:55:c1:5b:cc:15:72:a3:46:9b:15:51:
         0a:70:37:47:3d:1d:27:bc:7e:04:01:97:4a:57:31:a2:ad:8b:
         e2:7d:ec:68:b7:7d:fd:1c:5d:55:cd:f8:8e:a0:6d:f4:a2:87:
         3e:ba:3d:9a:90:fb:9b:a8:a8:18:43:bd:20:7b:91:6c:02:2f:
         99:c5:d8:fd:8f:30:a2:73:e5:30:bf:39:3c:14:62:ff:06:10:
         e5:2a:3c:f2:4a:5c:eb:48:5f:b8:d6:a6:aa:f3:c5:63:b6:10:
         d3:10:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----