Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146458.roa
File:                     AS146458.roa (raw, json)
Hash identifier:          izvvaKK1bV6V111BLecLu0qBg5YDbnCf+3jv3usdFho=
Subject key identifier:   94:1F:BE:99:00:3B:27:30:0E:97:79:75:4A:53:09:E6:1C:53:C5:5C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6272D121B3EBBA64347AF3E81C11DBC653872980
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146458.roa
Signing time:             Mon 25 May 2026 01:51:11 +0000
ROA not before:           Mon 25 May 2026 01:46:11 +0000
ROA not after:            Mon 24 May 2027 01:51:11 +0000
asID:                     146458
IP address blocks:        240a:aee0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:72:d1:21:b3:eb:ba:64:34:7a:f3:e8:1c:11:db:c6:53:87:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:11 2026 GMT
            Not After : May 24 01:51:11 2027 GMT
        Subject: CN=941FBE99003B27300E9779754A5309E61C53C55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7b:4f:61:cf:99:a7:95:21:a5:3b:10:8f:0b:
                    8e:58:16:95:c3:9f:8a:ed:b4:f4:f8:a3:34:d2:d9:
                    92:8a:73:bb:d7:95:ad:0e:0b:71:fe:49:a3:c5:54:
                    3f:0d:14:b1:98:ec:fe:82:dd:a7:43:27:92:7f:a0:
                    16:47:a1:b3:e6:c8:e4:fd:12:f7:fc:ab:da:17:40:
                    44:fc:8b:6e:49:aa:b9:c2:b4:e7:6c:7f:87:0f:21:
                    96:32:f2:28:b4:92:eb:3f:a4:5e:ab:e6:72:0f:4a:
                    2c:8a:93:66:e6:0e:42:e1:51:79:c7:a5:f0:68:e3:
                    80:0e:2d:8a:27:21:88:61:c2:2a:66:4b:ac:78:42:
                    10:ad:94:e1:e1:62:71:8e:b6:2b:2e:ee:80:6e:c2:
                    a1:33:f8:66:32:8f:8a:f0:12:ba:1c:c2:b9:a0:15:
                    a9:e1:bc:e1:18:db:4d:ec:46:43:42:d9:84:4a:e5:
                    62:4f:62:7a:1a:b7:5e:0a:3f:a7:79:6e:f8:27:f3:
                    db:0a:52:06:9d:74:34:fe:8a:51:c6:f5:20:0a:92:
                    5c:4a:28:16:61:fe:c9:7a:e3:06:16:be:4e:8a:fd:
                    ad:d5:a6:42:8f:d8:1e:2a:a6:ef:3f:0b:1f:6f:0c:
                    75:87:19:d0:ad:58:a3:23:82:b2:53:36:0d:5d:7e:
                    5d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1F:BE:99:00:3B:27:30:0E:97:79:75:4A:53:09:E6:1C:53:C5:5C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146458.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:4c:31:89:a6:53:0e:e8:fd:94:7f:f7:9a:57:fa:d0:46:a3:
         4c:a7:b0:c9:d3:92:f1:4b:50:3b:ba:81:91:92:58:11:0d:10:
         be:85:56:da:76:f1:c5:63:75:d9:c1:93:6a:8c:1d:5f:42:7c:
         07:c6:49:84:6f:b2:bc:eb:a9:31:35:c2:ad:0f:2d:d3:5b:52:
         d0:80:0c:65:c3:cb:64:a8:e3:3d:5b:e2:8d:57:b4:cd:79:94:
         ad:5f:fa:c4:82:a5:df:c4:cb:d6:05:b4:b7:ad:f2:b3:30:b9:
         4b:4c:9c:04:f0:51:d1:0b:51:30:b0:ce:34:ab:6a:7b:15:c3:
         d4:94:9f:b6:6b:bd:e1:30:80:db:84:56:85:67:86:f2:f4:fe:
         7f:5f:99:90:96:b9:b8:0c:06:6f:b0:4b:78:7d:ee:82:c6:45:
         b1:e2:8c:27:4d:51:88:60:84:9f:f0:48:99:89:3d:3f:3d:92:
         e7:b3:e2:31:a8:4f:9c:46:b3:15:3f:85:8e:bb:7b:cd:e8:55:
         14:99:13:b4:41:8d:c5:b5:49:d0:d8:cc:85:e1:cd:66:ff:c6:
         1a:3f:2e:4e:03:e0:33:13:1a:99:0e:07:72:82:9f:0a:bd:7f:
         6e:20:35:18:ea:f9:e8:dd:f3:9b:01:1c:a8:90:63:64:1f:24:
         9a:e8:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----