Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146497.roa
File:                     AS146497.roa (raw, json)
Hash identifier:          jWAb4qn42VSQPH6rSnLA+cus4tex9BI00IvLlqeVmco=
Subject key identifier:   E3:2B:42:5F:10:3F:82:24:5F:14:34:B5:3C:88:3F:A3:30:24:C8:22
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4EFA35253690866361EC6E33DBE912CFCCBFF058
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146497.roa
Signing time:             Tue 26 May 2026 01:12:56 +0000
ROA not before:           Tue 26 May 2026 01:07:56 +0000
ROA not after:            Tue 25 May 2027 01:12:56 +0000
asID:                     146497
IP address blocks:        240a:af07::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fa:35:25:36:90:86:63:61:ec:6e:33:db:e9:12:cf:cc:bf:f0:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:07:56 2026 GMT
            Not After : May 25 01:12:56 2027 GMT
        Subject: CN=E32B425F103F82245F1434B53C883FA33024C822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:55:1e:28:d3:f2:5a:b6:9e:ad:76:ca:41:
                    bd:2f:b4:e5:ab:39:ec:65:66:74:1e:5c:d3:ff:f3:
                    2d:4a:b6:21:bd:71:b2:5e:b6:46:b6:5c:5e:81:62:
                    01:00:0b:3a:9d:d6:de:6f:63:1d:ce:fd:55:7d:1a:
                    43:e8:f7:fc:73:f6:d0:98:1b:cb:0b:1e:3d:55:a8:
                    6d:7a:81:79:b4:99:03:c3:fb:e4:60:25:1a:b0:61:
                    a5:ff:71:9f:9d:ad:06:24:3e:a6:e7:01:96:09:9c:
                    62:09:71:9e:ec:a1:42:3a:46:67:c8:a6:bf:d8:3d:
                    6a:48:b0:46:a5:17:ac:10:bb:a9:a8:94:8f:d6:39:
                    ea:b6:1f:73:cb:a3:08:c0:94:54:8f:6f:c0:15:21:
                    48:a3:13:5b:76:48:34:bb:5b:51:6e:bf:6e:2c:c8:
                    15:d4:28:2a:00:7a:ce:87:8d:d3:f8:c9:f9:49:91:
                    e4:cb:05:71:21:c6:1e:3a:07:61:a7:b8:ec:2e:c0:
                    b8:91:93:61:6a:2e:d7:a6:77:0a:36:99:13:93:7e:
                    cf:ef:b7:da:31:8c:4d:64:f7:7a:af:d8:80:8f:ad:
                    e2:3f:96:88:f8:8c:67:1b:0e:33:bc:e1:eb:5c:22:
                    6f:b1:2e:f2:a0:38:41:46:1d:f9:3e:2b:f8:68:8b:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2B:42:5F:10:3F:82:24:5F:14:34:B5:3C:88:3F:A3:30:24:C8:22
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146497.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af07::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:58:ef:9d:31:51:49:fc:4e:57:98:78:d5:23:26:e5:83:5d:
         f0:bd:98:51:c8:f4:d0:b3:c7:58:80:73:a6:f2:26:1b:18:86:
         25:36:cb:f9:46:06:68:9f:82:94:86:c6:e2:32:15:14:c0:89:
         1e:69:7d:90:96:9e:9b:b4:34:08:f6:62:47:d8:e7:a2:9b:e8:
         86:6a:ca:ec:1a:99:46:c3:74:81:d2:fa:49:6b:a3:28:5d:90:
         19:a4:65:b8:12:7d:4c:6a:14:7b:3a:2a:60:43:18:05:5b:b0:
         e1:c8:54:d4:20:6a:61:3c:1c:43:c6:5d:5c:96:89:34:6f:49:
         71:86:74:f1:a8:25:10:86:20:6b:03:11:cc:23:ea:da:aa:b3:
         c0:45:fb:4f:40:75:20:35:33:e3:1a:6c:07:bb:bb:2f:df:10:
         24:98:dd:67:d3:db:ca:e8:fa:3c:ee:29:c1:aa:37:fe:94:1f:
         4d:3e:37:c7:77:c9:6e:6a:01:0c:d0:03:d2:df:b4:8d:98:80:
         7e:d7:4e:ba:12:03:f9:ad:49:dc:9a:09:1b:5c:9a:4d:09:af:
         48:e9:77:e5:ba:25:b8:d6:91:9e:11:2f:d6:65:d1:67:45:ba:
         4a:91:b5:0d:57:66:51:16:50:72:41:84:85:f1:cb:4c:17:67:
         bd:04:a7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----