Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146484.roa
File:                     AS146484.roa (raw, json)
Hash identifier:          no9JQcfI29pMtyyBsh9Kb0+Ujdj7Fy4Dlzx1jdmC0Wg=
Subject key identifier:   DD:6C:CE:C6:25:5A:D6:02:20:D8:26:F3:01:83:82:21:8D:7A:DA:E3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4D6AE8ADDC9762DB34617010B0E324CA85B9180E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146484.roa
Signing time:             Fri 22 May 2026 01:50:30 +0000
ROA not before:           Fri 22 May 2026 01:45:30 +0000
ROA not after:            Fri 21 May 2027 01:50:30 +0000
asID:                     146484
IP address blocks:        240a:aefa::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6a:e8:ad:dc:97:62:db:34:61:70:10:b0:e3:24:ca:85:b9:18:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:30 2026 GMT
            Not After : May 21 01:50:30 2027 GMT
        Subject: CN=DD6CCEC6255AD60220D826F3018382218D7ADAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:97:16:f1:1c:30:33:c8:a2:a3:33:e3:da:3d:
                    01:54:e4:b7:e8:ed:a5:b8:c6:40:66:15:68:ff:c5:
                    be:76:83:1f:fb:92:cd:19:13:bd:b2:fb:4a:c3:6e:
                    82:c5:cf:f5:9c:79:aa:07:29:83:24:7a:73:1a:72:
                    28:3d:51:0b:8f:b4:56:18:8c:07:1f:74:ad:d1:27:
                    09:c5:b9:eb:5e:f0:a1:96:b1:38:f8:18:27:52:9a:
                    d5:62:3e:27:cd:43:7d:06:6c:e0:d4:72:b9:37:47:
                    cf:07:cd:75:52:03:13:f8:13:54:d1:af:00:8a:5f:
                    25:35:5a:62:56:8a:52:87:08:19:5a:f6:30:86:df:
                    4d:7e:f5:6e:95:17:26:63:6a:92:8e:f6:13:d7:f4:
                    25:97:f0:52:0d:8a:ae:c0:19:37:a8:22:f4:97:77:
                    bc:3b:8a:6a:77:13:c6:80:1e:0b:2e:95:4e:5f:ab:
                    0b:60:d2:84:80:26:18:cb:e5:e3:b2:05:59:79:22:
                    68:1f:24:4d:bd:8e:4b:47:5c:ca:0c:2a:a9:52:0d:
                    0a:f2:89:22:c7:07:6a:c1:9c:13:f2:59:0d:e2:45:
                    f1:75:9d:53:70:14:13:bc:db:00:09:fb:32:39:fb:
                    88:97:58:e9:1a:29:3d:8a:0d:57:24:4a:6b:9e:63:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6C:CE:C6:25:5A:D6:02:20:D8:26:F3:01:83:82:21:8D:7A:DA:E3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146484.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aefa::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:07:c9:b9:1b:72:12:e8:45:01:8d:05:b6:fb:61:1b:fd:7f:
         d8:38:63:27:10:15:b3:16:6a:9e:e0:b2:5c:b4:be:38:5d:62:
         08:7d:9f:5a:2f:60:dc:ab:37:a0:31:72:fc:63:5a:ba:20:8a:
         77:48:b8:47:d2:7e:49:96:22:cf:40:1d:db:ea:19:1c:d9:f7:
         5b:95:01:ec:b2:ac:b2:af:4a:02:9a:41:cb:c2:ef:28:ef:3b:
         2c:6f:b7:f3:03:9f:3a:d2:9a:ff:35:a7:af:3d:fa:79:8a:d7:
         d9:93:c9:8e:35:51:56:ab:19:8d:39:01:d0:e5:74:56:b9:45:
         67:b1:ea:0d:67:b2:45:1b:ee:cc:29:48:ad:b4:b0:70:cb:9f:
         c3:85:8d:74:6e:1a:b3:d4:9a:f4:a0:f4:7d:9a:80:1d:b7:9f:
         d5:bd:30:b4:7d:9e:47:94:5f:c6:d0:9f:fe:7a:ab:f2:14:4d:
         46:34:dd:65:f1:01:d2:8e:2c:06:6e:3b:09:dd:ae:b1:4a:a4:
         7b:ef:e4:7e:22:12:51:86:be:f4:7b:f7:a6:2d:5a:2d:52:ea:
         cb:9d:55:6a:66:14:ac:95:25:1b:bc:a4:f4:55:54:e9:02:ab:
         54:e3:b4:0c:95:fa:1a:3d:cc:34:eb:c0:04:b6:cb:2f:e0:44:
         7f:52:b7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----