Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146555.roa
File:                     AS146555.roa (raw, json)
Hash identifier:          czqMgRRLDYYVbyYwOT23uhdJPQ+9VUToFrs8WCw/D5M=
Subject key identifier:   39:74:35:71:A5:1A:34:8C:19:21:F3:2E:13:53:98:C7:27:8B:4B:F8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       72EABA28F83FD5EE60B2FD626DBF37B3742D8EBC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146555.roa
Signing time:             Fri 22 May 2026 01:50:39 +0000
ROA not before:           Fri 22 May 2026 01:45:39 +0000
ROA not after:            Fri 21 May 2027 01:50:39 +0000
asID:                     146555
IP address blocks:        240a:af41::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ea:ba:28:f8:3f:d5:ee:60:b2:fd:62:6d:bf:37:b3:74:2d:8e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:39 2026 GMT
            Not After : May 21 01:50:39 2027 GMT
        Subject: CN=39743571A51A348C1921F32E135398C7278B4BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:00:8b:15:ac:a3:f2:4c:4e:e0:de:4c:94:
                    c9:9d:6a:55:10:6b:ec:8a:e2:25:ee:ea:3f:0c:8f:
                    46:9c:0a:03:d5:e0:03:ef:ed:e9:17:67:d2:98:88:
                    3b:7d:01:2e:d2:bf:6c:35:f5:93:72:82:f5:2d:99:
                    cd:86:05:30:63:b0:ab:14:34:ea:5e:5c:ef:6c:18:
                    7d:15:4b:62:9c:42:60:6e:6d:5c:81:9c:bf:24:c9:
                    bc:48:9d:ca:f4:95:3f:aa:b7:7f:cf:59:54:8c:d8:
                    ea:f2:01:62:82:97:79:cb:44:50:5c:03:a2:40:af:
                    9e:c1:52:7a:b5:4c:e4:79:5c:7c:e2:8f:69:ef:81:
                    b3:50:f9:ad:46:6d:fe:92:ef:76:b8:72:28:4c:f6:
                    44:45:c6:8e:6b:28:fe:76:60:d8:f8:1e:d6:09:1e:
                    cd:1f:38:94:e9:5b:70:d9:e3:6c:9d:ed:02:61:33:
                    70:9c:25:5d:e3:dc:ab:69:a3:2d:de:87:3c:36:99:
                    bf:4c:5f:62:e5:5d:77:02:6d:af:db:2e:ff:21:83:
                    3d:88:96:91:c1:28:38:1f:19:bc:2f:a4:98:e2:dc:
                    4a:94:b8:49:b5:30:e7:7f:6b:9f:0d:bc:fe:79:c5:
                    83:66:a1:c4:62:f8:d5:a5:45:75:b2:f4:46:b6:1d:
                    74:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:74:35:71:A5:1A:34:8C:19:21:F3:2E:13:53:98:C7:27:8B:4B:F8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146555.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af41::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:1b:74:9e:ed:35:ef:45:49:32:f6:4a:28:c9:de:2b:d3:9c:
         96:41:d6:f0:e7:10:c2:14:a2:13:0e:12:14:50:fc:18:09:93:
         1d:d6:57:3d:c0:12:41:8e:35:47:93:79:6c:22:48:54:fc:77:
         f8:ae:7d:7b:50:e7:ab:7e:d1:63:81:e0:62:d9:03:9d:cf:8b:
         e9:1b:26:91:99:b5:86:4a:1d:0a:2c:eb:1d:7b:e3:54:c6:d6:
         a9:8e:bc:b4:2d:72:70:b4:f3:94:6f:01:80:74:d9:68:eb:ef:
         fa:81:7a:be:1f:68:03:61:96:4b:93:ec:08:a0:ef:d9:1f:a6:
         87:ce:70:69:9d:3e:52:c5:cf:ea:b2:70:74:a5:95:3c:f1:ef:
         cc:f1:99:47:7e:fd:30:30:9e:49:d6:ae:12:e8:3a:e3:8b:f9:
         91:81:a3:55:7d:68:07:45:67:ca:71:8f:3f:9d:b5:ba:d4:ce:
         1a:c0:28:f4:ba:f4:b3:77:0c:00:a6:1c:bb:a0:79:56:c6:f6:
         8e:fb:c6:90:cf:cb:9f:83:82:ca:9a:cc:e2:05:6a:78:79:75:
         dc:c9:01:4d:67:d7:3b:a8:0f:f8:0f:ee:70:73:1d:44:49:dd:
         ce:ff:99:ae:a4:7f:7b:9d:fd:14:d1:8d:a5:5b:fb:99:57:a6:
         9e:95:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----