Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146470.roa
File:                     AS146470.roa (raw, json)
Hash identifier:          ZvOQaFuy5M4sPpNpdCoRLLGaZYenCBT2mi+Kfo6NWp4=
Subject key identifier:   27:37:E4:F7:9E:84:98:14:34:3B:09:52:8F:11:CD:B5:34:3B:08:4C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       45A8923741552F639825422BDBCC57C0833B4429
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146470.roa
Signing time:             Tue 26 May 2026 08:52:39 +0000
ROA not before:           Tue 26 May 2026 08:47:39 +0000
ROA not after:            Tue 25 May 2027 08:52:39 +0000
asID:                     146470
IP address blocks:        240a:aeec::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a8:92:37:41:55:2f:63:98:25:42:2b:db:cc:57:c0:83:3b:44:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:39 2026 GMT
            Not After : May 25 08:52:39 2027 GMT
        Subject: CN=2737E4F79E849814343B09528F11CDB5343B084C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:0a:00:4c:5f:00:d6:04:1a:f8:63:34:45:
                    89:9f:8b:12:0c:52:01:73:ee:c8:36:63:84:e8:c7:
                    03:c7:75:0c:f2:fb:5d:7a:16:0e:7c:29:ff:b8:75:
                    97:3e:57:08:df:d6:32:38:4f:11:97:d8:03:56:73:
                    96:86:25:ec:d3:22:74:21:f5:72:72:4d:19:78:f6:
                    c8:c7:7d:a1:63:b9:5f:f5:45:a3:f2:f4:01:bc:80:
                    9b:fb:8a:bb:d3:c5:ff:ba:25:61:2e:b2:dc:b3:56:
                    24:79:c7:94:12:e4:07:37:87:31:5f:2a:e9:b6:ff:
                    97:98:8b:03:d8:e0:5f:58:6b:8d:b2:f4:2e:38:75:
                    ad:26:c6:42:e9:db:57:f6:63:a0:d8:3c:1a:33:e3:
                    1f:0a:f6:cc:4d:7c:d9:54:e8:e9:ce:26:5e:24:e7:
                    e8:17:d4:6d:8b:95:dd:9e:f1:e4:39:0b:e5:be:b8:
                    63:7b:ef:5c:c1:c2:ae:bf:e8:e8:71:47:2c:18:7a:
                    e5:3f:d8:18:74:11:c2:57:56:13:0c:0e:31:48:6f:
                    bf:2a:92:97:a2:dc:75:50:c9:4d:fb:f2:c5:cb:f2:
                    82:0b:ec:e7:d3:9f:d9:90:9c:92:59:17:ae:13:12:
                    ec:8b:b0:e8:55:f5:54:25:34:ed:41:ef:99:97:5e:
                    81:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:37:E4:F7:9E:84:98:14:34:3B:09:52:8F:11:CD:B5:34:3B:08:4C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aeec::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:fb:d8:4a:6c:1e:e3:b9:17:03:11:b0:63:e0:38:f7:6a:ca:
         4b:93:b8:05:89:29:1e:58:3c:bd:c5:d7:16:ce:0e:0b:d6:17:
         38:b4:f3:13:d3:03:aa:d2:77:b9:45:3d:74:3a:80:ea:83:d8:
         1a:c4:7b:c4:e4:82:9b:6f:5d:3e:12:df:ce:c7:ca:bb:2e:9a:
         d8:e7:7e:a6:81:f6:6f:5d:40:9e:cd:c1:fc:5d:c4:91:d9:99:
         e7:7d:b7:48:f9:f8:1c:a7:e7:a4:9a:bf:b1:9b:11:8f:41:4f:
         f2:63:f8:81:37:16:4a:c3:ba:84:37:38:46:7a:c3:85:8a:6e:
         ce:fb:2b:83:ff:bb:4c:a2:f1:d8:d9:72:cb:d4:67:d9:aa:a4:
         c9:01:6e:4a:bd:62:0f:c6:5f:8a:f9:d5:e4:da:1e:13:48:25:
         2f:ad:09:a1:e7:7e:d2:06:fb:8c:99:63:59:64:5c:7a:a3:8b:
         8e:16:11:63:6d:5c:1d:4d:4d:45:fc:37:10:92:db:4e:04:62:
         ab:a5:c8:7e:a2:7e:f5:c4:e3:b6:07:88:7b:4a:2b:00:9f:7d:
         56:30:c3:0b:1b:4b:cc:b5:70:01:50:24:ce:4a:d4:22:4b:95:
         34:09:7c:9a:c2:ac:fc:d6:26:c2:e9:30:bb:0f:7a:45:ee:10:
         42:d4:b1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----