Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146537.roa
File:                     AS146537.roa (raw, json)
Hash identifier:          avhpe8GdxLLvA5/ywlNdTTOczrGU/Q6ADGBdgNbMIwA=
Subject key identifier:   3E:5D:D1:72:06:75:50:1A:EF:EF:9A:C0:57:A9:0D:31:3B:A0:A2:9B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       28C88D34C60DA86A4ED35D024D6B929E21E8F95C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146537.roa
Signing time:             Mon 25 May 2026 01:38:25 +0000
ROA not before:           Mon 25 May 2026 01:33:25 +0000
ROA not after:            Mon 24 May 2027 01:38:25 +0000
asID:                     146537
IP address blocks:        240a:af2f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c8:8d:34:c6:0d:a8:6a:4e:d3:5d:02:4d:6b:92:9e:21:e8:f9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:25 2026 GMT
            Not After : May 24 01:38:25 2027 GMT
        Subject: CN=3E5DD1720675501AEFEF9AC057A90D313BA0A29B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:81:81:6f:7c:d2:26:70:2d:5a:7f:7c:e2:bc:
                    e0:65:9a:ce:cb:69:11:db:e1:99:55:48:68:e3:7d:
                    d4:ed:3b:74:9f:da:f7:42:73:03:b6:b1:c2:ae:fa:
                    ca:4c:9d:96:ed:ea:f0:af:0b:2d:28:b5:35:3e:ca:
                    40:4e:ac:0a:b5:79:d6:8c:1c:30:60:47:3e:65:29:
                    35:4f:07:50:29:c6:1e:b1:77:df:4f:a1:a3:53:c4:
                    85:6b:64:65:b5:cc:f7:e7:13:82:fe:01:e4:d4:37:
                    a3:86:6c:5f:9c:7f:38:9a:3a:bf:2b:95:65:45:f2:
                    d0:ce:64:d3:7b:7b:5e:41:46:2f:70:b1:a9:2d:31:
                    19:94:4d:aa:f8:e0:0d:76:d6:24:e3:e2:ad:b9:17:
                    18:22:87:96:b5:ee:62:a1:d3:49:a7:b9:ff:f9:a1:
                    e6:1c:8a:6b:25:d0:9a:66:0b:62:54:d0:9a:93:c6:
                    b0:e2:4f:f4:93:c0:6f:20:1a:54:59:df:6d:73:98:
                    b1:3a:c6:2e:f6:fd:8d:c8:96:2f:22:04:99:24:aa:
                    9b:a0:f0:98:f0:fd:6a:50:f3:6b:2b:f6:6b:fb:42:
                    73:73:95:a5:dc:b2:40:26:c9:7f:e1:ff:1e:ef:f7:
                    ff:42:d3:79:93:27:61:40:9c:53:14:9f:82:49:29:
                    3b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5D:D1:72:06:75:50:1A:EF:EF:9A:C0:57:A9:0D:31:3B:A0:A2:9B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af2f::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:24:0e:65:1f:c7:76:00:42:cd:3a:1e:85:ac:68:f9:7c:0c:
         4e:c2:cb:bf:dc:cf:85:29:ec:1c:53:73:3d:ea:3d:4a:89:0c:
         f5:d5:f1:0f:e3:be:5d:bc:97:b8:43:9f:52:8d:d2:93:45:ff:
         3c:aa:25:55:6e:dd:05:79:21:f8:b0:46:b4:0d:e6:9c:34:f6:
         1c:60:02:59:96:74:8a:21:cb:16:66:f6:d3:57:39:0b:22:7f:
         0f:93:e9:96:b8:18:c5:24:fa:51:c4:97:70:96:6c:12:bb:24:
         df:da:9a:5f:57:4c:aa:31:f6:f0:b5:be:c5:65:ea:4e:0a:04:
         78:a4:f6:74:f6:d4:87:25:4a:50:b9:92:03:22:b5:79:8b:ef:
         c7:57:b2:1a:fb:a9:a5:4f:44:14:44:a9:7d:85:ac:93:7c:92:
         f2:2a:c0:92:ba:39:ea:4a:0f:81:02:8d:78:d9:6b:e2:c9:df:
         a8:f2:39:45:4b:a5:22:93:be:68:82:94:e8:d5:d2:58:d8:84:
         75:3b:bb:db:3a:62:2e:b3:3e:17:e9:73:7d:6b:07:d8:69:55:
         0c:6d:d6:b7:2b:81:c6:c2:6c:33:bc:82:82:56:42:1c:34:21:
         8b:b8:6d:58:d6:80:7c:bc:31:a0:61:78:f1:54:d5:ec:99:a5:
         4a:de:cd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----