Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146477.roa
File:                     AS146477.roa (raw, json)
Hash identifier:          N/gQNAEUFwGzP9Ddc482k3bVcoIo8PdSgxLFpHauVSU=
Subject key identifier:   E7:F6:B5:94:F6:7F:53:87:55:31:B9:A9:98:0C:2A:8C:C7:96:17:AC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0329EB8638F63822FDDF4637E340191D929AAAA9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146477.roa
Signing time:             Fri 22 May 2026 06:27:32 +0000
ROA not before:           Fri 22 May 2026 06:22:32 +0000
ROA not after:            Fri 21 May 2027 06:27:32 +0000
asID:                     146477
IP address blocks:        240a:aef3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:29:eb:86:38:f6:38:22:fd:df:46:37:e3:40:19:1d:92:9a:aa:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:32 2026 GMT
            Not After : May 21 06:27:32 2027 GMT
        Subject: CN=E7F6B594F67F53875531B9A9980C2A8CC79617AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1b:0c:03:0d:03:31:0a:53:cb:da:93:36:98:
                    79:bd:09:1c:63:bb:e0:1d:32:08:b5:40:8f:9e:fe:
                    0b:34:3f:11:b4:d0:4d:27:8a:61:67:7e:5a:09:ac:
                    4e:44:5c:b5:94:e1:a1:e5:9c:9a:0c:48:c2:76:74:
                    d9:94:c9:5f:74:d4:9c:77:c1:0f:f4:5e:e5:c2:16:
                    34:0e:81:13:7a:e3:19:3d:80:15:48:13:9c:85:64:
                    d4:d4:8e:72:03:e7:c7:14:53:56:b7:a7:7a:fa:5b:
                    1f:19:0b:cd:bb:0e:09:07:56:23:18:44:5c:02:58:
                    e7:46:36:cd:69:b7:ca:db:bd:0c:d5:cf:ef:4a:48:
                    f0:64:e4:ea:ba:5a:b8:63:73:d3:dd:c7:65:2e:18:
                    7b:3c:23:be:ca:25:84:82:f1:ff:fa:9e:26:04:5c:
                    33:4b:b7:6a:a2:dc:96:ec:db:c3:de:2e:c8:e2:e1:
                    b1:d8:c3:af:56:b7:65:8a:c7:d2:77:db:2d:ee:05:
                    c8:86:f2:e1:2c:74:43:84:96:0f:6e:51:e3:46:55:
                    c5:91:1e:11:0a:62:0c:a5:c5:4d:37:5e:f5:c5:0f:
                    ad:e8:0e:4f:da:d9:64:81:e0:cc:fd:70:d2:16:59:
                    1c:15:0d:37:bd:1b:14:59:49:3f:b3:f5:22:a2:0d:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F6:B5:94:F6:7F:53:87:55:31:B9:A9:98:0C:2A:8C:C7:96:17:AC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146477.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aef3::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:ba:bb:51:04:99:45:72:7d:cf:76:f3:33:d4:d0:05:1c:95:
         b3:a3:c9:7b:f6:ce:3e:16:21:11:f3:17:0c:c2:b2:84:b0:c7:
         cc:ec:7e:e8:a9:5c:cc:5a:3e:ca:ed:2d:62:5b:74:b7:e5:fc:
         60:57:19:0f:be:6a:4f:21:e2:b3:f1:44:1e:01:a0:e3:cd:96:
         c0:31:cc:78:14:c0:2b:a7:50:32:63:e7:fa:a2:4d:f9:4c:8b:
         67:59:d9:95:0e:8b:eb:b0:49:72:60:93:83:ae:36:39:a0:40:
         88:6b:5b:36:de:67:ce:13:ff:a1:44:08:06:dd:78:8a:53:29:
         f7:2b:56:d9:06:e7:c3:df:7b:b2:f9:9d:6b:8e:28:fe:dc:86:
         38:b6:20:38:24:fb:87:5a:26:8a:37:83:a8:dd:57:b4:57:6d:
         d4:78:5f:24:22:17:08:ec:e4:fa:21:82:b9:66:b5:ec:f2:3e:
         68:74:20:13:fd:14:72:e9:f5:80:17:61:80:08:11:37:ae:24:
         86:7b:9b:e6:12:11:d0:2c:eb:59:9a:21:e0:f2:fc:00:49:e5:
         a5:1a:5d:09:20:bb:27:8b:ac:93:68:c8:99:84:6b:dc:b9:38:
         dc:dd:87:ae:f6:9b:21:5a:cf:a1:9a:50:83:80:cd:a9:21:c5:
         af:e2:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----