Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146550.roa
File:                     AS146550.roa (raw, json)
Hash identifier:          P8RSBcJuDBgxnoAUAy8dvF//H9OQEU5bKnioY73yaGo=
Subject key identifier:   C3:8A:87:01:43:CC:DD:26:D7:91:5B:E4:F4:45:E0:AC:BC:51:0C:64
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       056FEDC280C81A0D6CEBFA59D8D60CE1940A19AD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146550.roa
Signing time:             Fri 22 May 2026 04:08:11 +0000
ROA not before:           Fri 22 May 2026 04:03:11 +0000
ROA not after:            Fri 21 May 2027 04:08:11 +0000
asID:                     146550
IP address blocks:        240a:af3c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6f:ed:c2:80:c8:1a:0d:6c:eb:fa:59:d8:d6:0c:e1:94:0a:19:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:11 2026 GMT
            Not After : May 21 04:08:11 2027 GMT
        Subject: CN=C38A870143CCDD26D7915BE4F445E0ACBC510C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:6a:33:47:85:c5:9f:57:5e:a6:6d:e6:63:
                    78:6b:2c:3e:c4:98:d4:e6:dd:9d:a3:ca:a0:68:64:
                    c6:57:c5:d9:69:36:9c:2b:1c:48:3a:93:a9:a0:65:
                    29:45:2d:63:14:bc:09:31:40:9a:e0:a0:3b:a8:d8:
                    cf:72:15:3c:1f:0f:e0:82:c5:d4:fd:80:7f:97:f3:
                    f8:fc:48:14:8d:1a:4d:54:d9:80:b1:64:c6:bf:b7:
                    11:42:e4:a9:14:5c:ab:3c:f6:ec:3e:3e:ad:62:cd:
                    c4:94:5d:d8:c0:24:a8:b6:bf:cb:2a:10:b0:76:cf:
                    a2:52:6a:a5:21:60:16:3a:c4:d0:e7:0e:01:68:71:
                    79:4e:72:6a:10:c0:f4:27:36:70:6a:7d:4a:5e:53:
                    f2:3c:64:5f:fe:34:82:fd:de:7f:73:e1:6b:53:e9:
                    55:ad:ea:79:cc:46:94:77:9e:ac:6c:ce:1e:f7:9e:
                    8b:c1:d8:e7:2f:da:8d:0e:31:b9:db:c8:bb:3d:66:
                    83:2c:33:ee:37:bf:dd:4e:ef:a5:73:9b:44:f4:b6:
                    9a:fd:3e:99:eb:84:79:e1:60:b9:01:0e:1f:6c:10:
                    10:ae:d4:a4:0e:29:27:8a:c5:10:b2:25:58:3e:79:
                    83:86:71:16:d4:46:73:3f:e6:05:96:85:01:5e:cc:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8A:87:01:43:CC:DD:26:D7:91:5B:E4:F4:45:E0:AC:BC:51:0C:64
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146550.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:35:19:88:3c:1d:b1:e9:4c:13:12:9a:f2:90:6e:dc:58:a8:
         c2:25:44:dd:8f:df:40:3d:ae:ca:be:ce:81:43:b7:31:9c:e5:
         44:99:bd:35:6b:09:36:98:4c:2d:22:49:72:1f:56:b8:fd:9f:
         fa:25:f6:12:03:ee:bd:33:32:42:01:0c:43:2e:fc:7d:e5:33:
         8c:bb:6f:7a:07:a9:0f:02:66:ef:8a:df:e5:4d:5c:a2:bb:a4:
         db:a5:70:77:ac:d0:7e:09:42:c3:6b:30:cb:4d:d1:d1:cd:ae:
         a9:7f:78:10:98:7f:af:2f:81:80:7f:4f:d7:9c:51:12:5c:09:
         b0:90:fe:64:32:e4:c4:59:07:3a:ff:ee:e7:bc:e8:0d:af:e8:
         a4:7b:d9:ba:50:c0:ef:2b:d4:45:59:05:da:1e:de:e7:37:5a:
         9a:6c:8d:66:87:6b:9d:99:35:a1:02:86:fc:17:d4:c4:3a:57:
         55:24:3d:d6:50:c6:bd:48:92:d0:7b:4f:41:fb:0e:d5:51:35:
         d3:8e:5c:75:c5:15:5c:24:57:2b:50:17:f8:f2:a6:64:26:a5:
         ec:32:2e:99:27:97:9a:6c:4c:7b:5f:45:14:0d:55:bd:42:cc:
         cb:28:6e:49:f0:71:4b:b8:73:89:e4:ba:92:57:0f:db:e8:0b:
         cd:ec:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----