Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146584.roa
File:                     AS146584.roa (raw, json)
Hash identifier:          pvSC9Xe0XeBItgM71IEDJxeAQ5KgolT+oKHn+HVKBkM=
Subject key identifier:   E7:69:95:F4:04:C7:44:18:29:84:03:E0:8C:5D:CA:38:A5:5A:B7:CE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       53AA067A72A7F38209EF7FB45D2FD9A667EBE934
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146584.roa
Signing time:             Tue 26 May 2026 01:13:15 +0000
ROA not before:           Tue 26 May 2026 01:08:15 +0000
ROA not after:            Tue 25 May 2027 01:13:15 +0000
asID:                     146584
IP address blocks:        240a:af5e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:aa:06:7a:72:a7:f3:82:09:ef:7f:b4:5d:2f:d9:a6:67:eb:e9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:15 2026 GMT
            Not After : May 25 01:13:15 2027 GMT
        Subject: CN=E76995F404C74418298403E08C5DCA38A55AB7CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:0a:08:bd:5f:f1:f0:14:ba:8a:6b:61:46:
                    e4:7d:91:72:84:11:d1:83:14:32:fe:96:ee:55:48:
                    96:ed:a9:d1:f0:91:46:2b:df:e3:a4:db:61:4e:45:
                    cb:ce:25:d7:62:2a:9b:84:1b:d7:b7:de:2b:bf:81:
                    64:53:70:eb:ec:97:97:3d:8d:e5:5a:93:7c:61:d1:
                    b2:a0:af:80:f8:da:99:79:db:f9:7a:55:60:84:8c:
                    26:7e:02:9a:94:ac:4e:82:19:61:b0:57:fb:03:5a:
                    cc:aa:7d:6d:48:5a:fc:59:f7:13:2b:76:13:0c:8f:
                    3a:0c:2f:cd:83:28:d2:a5:ae:a8:c8:da:c4:4b:1d:
                    bd:3a:c6:25:16:e5:c0:7e:b4:28:47:be:ef:f5:67:
                    42:5e:65:2f:ce:78:93:f4:0e:eb:bc:85:0f:b6:5f:
                    7c:85:c7:ab:a5:88:fd:87:e1:45:19:38:b5:32:59:
                    f2:fd:91:97:ef:f3:98:2c:a9:3c:3d:64:23:e2:62:
                    28:d6:c2:c9:14:32:d5:bd:d5:50:a2:f9:c4:62:db:
                    39:20:3c:df:98:bb:90:ce:2f:e2:7c:63:0a:ba:0b:
                    d2:cf:27:e2:2a:45:19:1a:c0:09:a4:84:c0:ab:c2:
                    8e:21:bc:b5:a5:f4:9a:74:4a:33:38:46:a2:f7:7c:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:69:95:F4:04:C7:44:18:29:84:03:E0:8C:5D:CA:38:A5:5A:B7:CE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146584.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af5e::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:f8:42:92:07:fe:20:67:2a:eb:55:d7:a6:dd:63:09:8a:eb:
         93:b7:21:df:d2:93:2c:1d:1c:7e:92:71:c5:23:b1:68:5b:93:
         5d:be:a3:20:7a:0e:a3:ce:df:ee:ab:e5:9f:28:b3:ca:a4:46:
         97:53:51:5e:26:1d:61:fe:27:e7:66:91:11:0e:2b:18:c7:fc:
         87:7c:84:b5:12:e2:1f:65:c0:fd:d4:80:cb:a9:1d:41:07:87:
         94:18:b8:02:c3:cd:7b:ec:bb:eb:cf:a3:7c:f0:8f:14:e8:2d:
         8f:1d:b4:bc:2e:08:96:e1:8d:16:04:b4:d8:1f:39:8c:03:7a:
         f7:e1:06:f7:d7:28:32:53:61:d8:ac:3e:80:ca:6e:9f:a2:f8:
         30:5c:8f:02:ac:31:da:44:70:88:d6:fa:b1:41:aa:a8:70:b1:
         66:85:bf:c4:36:a9:90:1f:43:9f:89:c5:44:3e:0f:bb:03:a3:
         01:f5:d1:03:d7:de:6a:2c:52:6f:48:95:5a:c2:96:84:16:46:
         31:c2:56:42:21:77:77:16:4f:f2:28:66:25:90:9f:4a:c4:6f:
         a3:7a:8e:b6:57:9d:a4:9c:72:f0:42:17:c3:d9:7e:04:4c:bb:
         63:cd:f2:cc:81:32:af:45:f7:c9:5f:81:28:3e:52:09:28:7f:
         29:de:0a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----