Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146521.roa
File:                     AS146521.roa (raw, json)
Hash identifier:          MphcZmVmjXc7e9l4DuCOMbbqXMBBZb9n5E/2nieHJWQ=
Subject key identifier:   D5:22:81:A3:F8:79:53:5C:D7:07:FB:BD:37:E1:DD:35:89:97:35:C0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       52DA2E010F5AF571D6041D9B81BBF27982E84589
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146521.roa
Signing time:             Mon 25 May 2026 06:28:23 +0000
ROA not before:           Mon 25 May 2026 06:23:23 +0000
ROA not after:            Mon 24 May 2027 06:28:23 +0000
asID:                     146521
IP address blocks:        240a:af1f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:da:2e:01:0f:5a:f5:71:d6:04:1d:9b:81:bb:f2:79:82:e8:45:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:23 2026 GMT
            Not After : May 24 06:28:23 2027 GMT
        Subject: CN=D52281A3F879535CD707FBBD37E1DD35899735C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ec:2c:42:d6:21:dc:2c:23:cd:18:88:95:f2:
                    a5:c1:7e:0d:c1:3e:2d:25:bc:19:cf:a4:7e:e7:c3:
                    96:6c:9f:cf:28:c0:9e:b4:8b:71:8c:05:73:b3:f9:
                    e4:79:b0:03:5c:a3:73:44:8b:32:a4:66:08:58:d2:
                    1e:0d:5e:d6:e2:04:5a:83:d1:ad:ee:82:3f:80:0f:
                    9a:48:1e:da:a6:67:56:9a:94:e6:7a:9e:5d:65:78:
                    2e:1a:2b:a1:67:5c:1b:7a:25:48:64:d1:f9:58:e9:
                    e1:0e:e0:02:ce:88:77:5f:47:3e:71:c5:89:ce:1b:
                    8b:96:da:3f:8c:ed:a6:26:00:89:21:e4:4d:d1:06:
                    ce:05:d3:bb:07:5d:06:24:7c:53:9d:23:29:97:f6:
                    3c:de:0d:4e:ce:5f:13:07:f4:98:3c:83:a1:42:0d:
                    96:6f:d8:b7:d8:5a:db:3f:18:d7:14:ce:4b:db:d3:
                    76:c5:98:85:8b:dd:d8:ca:82:27:e1:1d:1a:a0:2e:
                    0a:06:21:9d:6e:37:7d:6f:46:54:6f:76:a1:0c:24:
                    0e:90:9b:1f:f4:b8:0d:3b:d4:d2:b7:7b:ad:9e:3c:
                    0f:31:a0:51:8d:67:dd:73:7f:e8:7e:c6:dd:6c:c2:
                    f9:61:8c:9e:33:89:72:a9:6a:ce:26:84:8e:44:df:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:22:81:A3:F8:79:53:5C:D7:07:FB:BD:37:E1:DD:35:89:97:35:C0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146521.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af1f::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:44:72:b9:2a:da:1a:80:29:45:5d:22:16:0e:92:3c:b3:66:
         0c:9d:73:12:e7:a5:37:c2:13:23:01:51:eb:b9:90:16:e4:47:
         3c:be:1a:5f:1b:80:de:0b:71:58:c0:fc:a3:61:d3:58:f7:12:
         85:ab:26:b2:36:bc:af:9a:f7:c6:40:94:7e:53:d4:f3:ae:cb:
         f5:c1:32:f5:0f:28:34:b4:d0:d1:fe:d0:8e:a4:19:08:d5:74:
         eb:d6:96:a5:49:e9:80:ff:81:70:11:a8:d5:aa:fe:20:41:21:
         eb:91:d1:86:41:69:da:10:53:eb:25:fa:8e:45:fb:e0:07:e9:
         2c:ab:42:b0:4c:11:0e:71:4d:39:96:bf:4c:9a:7d:7d:9b:89:
         10:cd:40:48:d4:b4:44:c9:09:4b:07:fd:3c:9d:bb:18:c3:4c:
         95:41:c4:8d:f4:ac:f4:0e:0a:55:0e:c3:f1:e4:0a:56:87:b9:
         bc:2b:d1:38:7d:0b:00:3c:5b:a1:7b:4b:8d:67:3b:83:c8:e1:
         f6:ed:03:44:1e:ab:ae:7c:20:56:3f:b7:94:f9:2f:cc:1f:5f:
         37:58:93:80:0e:f1:7f:10:a5:41:ab:61:f1:0c:23:ad:7b:ef:
         06:cd:e8:4a:cc:ba:4d:78:92:08:95:16:c5:49:a8:af:bc:66:
         86:62:33:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----