Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146553.roa
File:                     AS146553.roa (raw, json)
Hash identifier:          3cLbVzCwPNF9JETif8w3HPRNX3jtxrW2//wkccsw/3M=
Subject key identifier:   1E:0A:3C:17:32:A5:E6:4C:7D:57:F3:DC:68:29:2A:C0:96:B1:CF:D2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6B81A5FD25A25ECFF1750C868262C2BCA5D5A8F0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146553.roa
Signing time:             Mon 25 May 2026 01:38:36 +0000
ROA not before:           Mon 25 May 2026 01:33:36 +0000
ROA not after:            Mon 24 May 2027 01:38:36 +0000
asID:                     146553
IP address blocks:        240a:af3f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:81:a5:fd:25:a2:5e:cf:f1:75:0c:86:82:62:c2:bc:a5:d5:a8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:36 2026 GMT
            Not After : May 24 01:38:36 2027 GMT
        Subject: CN=1E0A3C1732A5E64C7D57F3DC68292AC096B1CFD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:99:fa:ef:e4:39:b3:94:2f:a6:99:29:14:a4:
                    d6:21:23:8a:cd:31:72:da:3b:35:12:31:78:eb:2f:
                    df:e5:f8:b4:83:be:ac:13:c6:a5:1f:a5:cd:30:de:
                    d1:05:b4:c5:65:b4:4c:29:9a:16:d5:7b:f8:e5:fa:
                    b8:06:c8:fa:b6:11:75:3e:e9:05:51:89:34:a5:89:
                    da:30:e9:a7:19:fa:08:34:ee:32:46:13:66:9b:40:
                    24:7c:72:19:a0:ff:97:f6:8c:8d:3d:2e:f3:28:d0:
                    12:08:a7:7f:a2:d3:b2:95:56:a9:75:89:c1:28:e6:
                    50:38:f4:09:0e:e3:ad:93:9a:a9:05:40:fc:86:c0:
                    10:1d:1d:ff:73:46:7d:40:f0:ca:25:4d:32:1b:ae:
                    41:e2:e0:63:c1:0a:ac:c2:c2:e7:2c:89:2c:e7:3e:
                    97:0c:89:0b:5e:6a:8e:57:0a:49:a6:c1:71:d7:0d:
                    23:0a:cd:36:7e:e8:89:7c:b2:1f:3a:f9:2d:b7:04:
                    9e:bb:3d:ca:55:e0:ce:ba:7f:34:85:c8:94:b1:b8:
                    4a:3e:7a:75:0f:32:58:49:99:66:f1:fd:e4:5c:5d:
                    76:11:a3:2a:f6:cc:93:39:58:7a:b4:d3:5d:5a:22:
                    b9:d1:57:e5:2e:2b:8d:b5:d8:99:ab:87:d4:ca:36:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0A:3C:17:32:A5:E6:4C:7D:57:F3:DC:68:29:2A:C0:96:B1:CF:D2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146553.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af3f::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:fe:d7:e0:ac:a6:8b:96:98:be:2f:b3:d1:1e:95:3b:a2:59:
         fa:06:c8:f5:e3:6a:ff:9b:d0:b8:71:b4:a8:05:22:13:c3:75:
         c4:cc:02:de:a3:33:06:b8:37:2f:ad:47:cf:e3:bc:bd:d5:64:
         63:e3:a7:89:15:28:e5:49:06:ca:ac:f7:4f:a8:93:80:f0:bd:
         32:f6:0b:1a:f1:9c:6c:2c:1c:bf:f8:6c:0c:47:a9:91:ec:56:
         43:9d:43:3f:2d:47:33:63:b2:29:28:f5:32:f2:9e:79:d5:32:
         5e:d7:64:35:1b:93:56:21:d9:99:f6:84:09:22:03:82:f9:85:
         bf:d3:06:9e:e7:38:df:63:17:76:37:2f:1c:54:1e:8e:c7:0b:
         29:ae:ce:fb:98:76:43:16:c6:e3:4c:01:88:0c:5c:a6:78:58:
         5d:71:ad:28:b9:be:8e:65:f3:c9:68:bb:24:84:36:d3:e6:f3:
         6f:37:4d:76:37:86:79:3f:00:fd:4c:95:ce:9c:6f:f3:c6:4a:
         1b:04:47:60:fa:f6:68:cc:df:18:4a:ec:c4:8b:7d:73:01:2c:
         48:83:ff:c6:df:bd:55:11:2d:1e:2f:33:9c:23:e8:61:b3:b5:
         c8:5e:fb:c0:2e:a7:b4:fc:f8:ca:34:e8:23:c3:c2:ad:d3:65:
         4a:05:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----