Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146585.roa
File:                     AS146585.roa (raw, json)
Hash identifier:          lHmXZx/l3IywyvWrdtPufBSwHz5C0Dj+sWrsSVQZK30=
Subject key identifier:   4F:89:8B:C3:F9:C1:E3:10:14:92:32:77:EE:0F:63:D5:14:1E:9B:84
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2E51B24CCABCEBC6439DCDD84703404CFB0F2228
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146585.roa
Signing time:             Fri 22 May 2026 02:47:49 +0000
ROA not before:           Fri 22 May 2026 02:42:49 +0000
ROA not after:            Fri 21 May 2027 02:47:49 +0000
asID:                     146585
IP address blocks:        240a:af5f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:51:b2:4c:ca:bc:eb:c6:43:9d:cd:d8:47:03:40:4c:fb:0f:22:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:49 2026 GMT
            Not After : May 21 02:47:49 2027 GMT
        Subject: CN=4F898BC3F9C1E31014923277EE0F63D5141E9B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3b:bf:11:92:e3:43:b8:17:60:3a:00:08:1d:
                    ec:50:da:eb:b7:30:94:d8:94:48:67:e3:ad:b4:9a:
                    b5:9e:b2:ff:94:7f:ae:19:69:7c:35:1b:de:fe:79:
                    e7:77:d0:4b:2c:49:50:f6:24:ca:ca:7e:18:87:9b:
                    98:e5:1a:96:90:31:66:e5:6e:14:ab:24:38:41:99:
                    1b:ac:6f:d0:ba:41:df:3e:fe:07:e4:a0:c3:66:84:
                    69:26:a5:db:6a:21:53:cd:3f:c4:58:0c:f7:2d:d1:
                    dd:4a:ee:6a:9d:1a:4e:85:42:4f:12:0c:d9:62:a9:
                    06:ac:3b:8a:96:b0:04:1e:d4:30:12:74:6b:df:86:
                    59:01:61:54:df:1a:5b:87:4c:2c:70:56:b9:bd:34:
                    ae:f0:37:04:f0:81:c2:5e:9a:57:cb:64:52:7c:e4:
                    0e:b8:67:0f:1b:3e:90:7b:36:ac:3c:13:66:c9:9b:
                    46:d5:c5:85:e2:76:fc:91:cf:0e:8f:1d:13:ad:39:
                    24:84:93:f4:86:c9:5b:c1:93:a1:a8:04:a9:b4:d8:
                    89:f9:e6:30:92:af:b6:7f:14:b9:9f:be:a5:23:20:
                    8b:e1:75:87:7b:00:eb:90:fd:3b:27:a4:d4:6b:e5:
                    78:c9:d0:3c:9f:09:52:40:0e:24:bd:1b:c9:21:f5:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:89:8B:C3:F9:C1:E3:10:14:92:32:77:EE:0F:63:D5:14:1E:9B:84
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146585.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af5f::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:f6:ea:e8:ea:5e:cc:2e:f1:d5:3a:c1:e5:91:4a:fb:bd:cd:
         de:c9:07:a7:61:d7:ba:5e:ed:3d:5d:fe:d5:e1:17:40:be:e5:
         e8:0f:b2:6c:72:1c:f3:08:84:5c:e7:12:87:ca:61:f1:8f:04:
         cf:10:ed:14:20:21:ff:09:61:13:f1:7d:32:64:86:8c:d3:37:
         24:e8:9b:cf:e5:82:03:c5:b0:05:b2:4b:9a:29:ca:a0:80:84:
         fc:f6:e9:f7:c8:bf:db:cd:78:74:f9:d0:f0:e7:c5:c1:24:4b:
         6d:2e:cf:f8:30:0d:c4:80:8e:f7:a9:0b:0f:ab:40:04:dd:61:
         a5:6d:e6:57:24:27:f0:06:b3:09:00:91:ef:15:33:07:94:c6:
         ae:e2:76:16:8a:3e:b0:8a:af:7b:87:52:13:15:68:b0:32:d9:
         3a:27:dc:14:06:f5:34:37:0d:cb:4b:4f:b6:fc:06:64:00:51:
         6c:7a:d5:dd:b3:36:2b:a3:fe:52:df:91:66:c2:6f:4f:19:45:
         da:f2:41:6c:c3:c2:f7:e3:fb:39:ef:00:5a:b0:2a:77:57:34:
         6c:6c:b6:9b:ba:41:94:60:f3:25:e6:55:1e:95:0e:62:7f:ea:
         52:b2:f5:3f:d4:d1:99:3e:5b:48:43:b1:ca:99:32:57:57:c9:
         54:67:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----