Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146575.roa
File:                     AS146575.roa (raw, json)
Hash identifier:          JSPP2UB8oUPd9w3iHKZGZdZVQCF6x/RAvurkkyQ6ch0=
Subject key identifier:   1A:C2:4D:AF:CD:A5:02:A9:5F:40:E2:47:B5:DB:F5:26:60:0F:5D:40
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4A203C0EDBC78FA3D4FEE82392E1B1231532EF1B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146575.roa
Signing time:             Fri 22 May 2026 07:40:42 +0000
ROA not before:           Fri 22 May 2026 07:35:42 +0000
ROA not after:            Fri 21 May 2027 07:40:42 +0000
asID:                     146575
IP address blocks:        240a:af55::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:20:3c:0e:db:c7:8f:a3:d4:fe:e8:23:92:e1:b1:23:15:32:ef:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:42 2026 GMT
            Not After : May 21 07:40:42 2027 GMT
        Subject: CN=1AC24DAFCDA502A95F40E247B5DBF526600F5D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:b2:23:22:cd:21:85:d0:f9:9e:3f:e9:7d:
                    b6:29:c4:b5:f0:12:c9:1a:7d:2c:8b:d7:63:80:52:
                    17:c4:8a:a0:f2:01:d6:10:55:f3:d8:9f:a2:3e:4c:
                    69:ff:fa:c9:c9:91:a4:83:85:60:c2:48:87:b7:43:
                    51:b4:c2:d8:e9:bb:1e:c1:86:0d:48:b8:82:c3:a9:
                    a4:7a:ab:ae:18:0a:30:36:cf:db:c5:09:15:fc:30:
                    3d:ef:6b:b9:02:5d:d7:e0:d2:ce:d4:39:3d:0a:60:
                    fe:cf:b4:f4:ce:df:f4:c0:86:d0:50:ef:66:a6:2e:
                    a4:11:c7:d8:99:06:48:02:d6:98:d4:fb:46:9b:bd:
                    5e:20:8f:6a:3b:63:d8:3a:15:23:25:4d:24:ee:fa:
                    04:f9:89:c7:8d:6f:54:68:5c:35:33:08:14:94:80:
                    67:17:64:6f:c9:05:4c:f2:a6:f2:52:6a:19:4f:31:
                    cb:47:6e:e9:1c:bd:76:02:f6:01:25:63:44:73:34:
                    3b:99:d9:86:2b:ea:b2:53:23:1d:95:ae:bc:9f:59:
                    41:4c:4c:aa:e2:74:c1:df:b9:ec:54:45:7e:71:94:
                    f7:d1:4d:8b:63:a3:63:e7:fc:4b:69:d2:3a:dc:a3:
                    4c:83:5d:30:9e:07:22:14:17:03:ef:a4:cd:f4:2e:
                    93:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C2:4D:AF:CD:A5:02:A9:5F:40:E2:47:B5:DB:F5:26:60:0F:5D:40
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146575.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af55::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:81:61:89:24:04:83:c5:8b:de:8a:40:61:25:d0:b9:b2:60:
         81:df:66:3a:f3:d0:f5:01:02:c1:2d:b4:e6:37:26:7c:b0:07:
         7f:44:a3:06:69:f2:74:e0:21:ea:aa:ba:3b:f7:02:0c:2f:75:
         d3:89:af:c5:85:b7:29:fc:57:57:50:d0:3f:4f:e3:2a:0f:cb:
         cf:08:58:33:76:eb:40:03:d0:ed:d1:77:5f:ba:af:3e:16:94:
         f7:1c:4c:de:ce:f4:a9:3e:08:cd:f2:24:c6:1c:5a:c2:87:31:
         25:8f:6d:33:25:f9:b4:0f:8a:13:57:43:d1:d7:76:e1:dd:a9:
         26:e2:5c:4a:2c:3d:41:6c:c0:7b:fe:1f:c2:e3:02:13:e7:ff:
         75:36:04:1e:c6:0c:f4:7a:c8:ae:3e:c9:12:2a:43:b8:c0:cb:
         e7:eb:65:4c:db:46:7b:ab:ce:cf:a0:5b:ab:40:20:56:30:6c:
         ac:11:50:58:72:1b:81:4e:80:8c:e4:27:a3:99:95:21:a7:74:
         24:93:50:6f:82:5f:68:ee:47:9d:ea:cb:72:54:fe:ec:36:8c:
         79:84:14:9c:d6:f1:4f:c5:20:b1:6f:71:03:c4:cc:0e:92:ad:
         96:a7:62:50:f7:d6:26:6e:2a:bd:4a:9a:4f:df:66:20:f6:34:
         9b:4b:b2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----