Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146614.roa
File:                     AS146614.roa (raw, json)
Hash identifier:          NS906f67nJvl1jZ4egEM+2C17eUcPGO5nDDOcDTOP+A=
Subject key identifier:   60:6D:9E:C5:C4:A1:CA:54:9F:12:C9:39:DB:8F:8C:2E:7D:F8:52:CB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       50AC0724372DB144EF40CFCFBE44DB04B38EBDD9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146614.roa
Signing time:             Fri 22 May 2026 07:40:44 +0000
ROA not before:           Fri 22 May 2026 07:35:44 +0000
ROA not after:            Fri 21 May 2027 07:40:44 +0000
asID:                     146614
IP address blocks:        240a:af7c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ac:07:24:37:2d:b1:44:ef:40:cf:cf:be:44:db:04:b3:8e:bd:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:44 2026 GMT
            Not After : May 21 07:40:44 2027 GMT
        Subject: CN=606D9EC5C4A1CA549F12C939DB8F8C2E7DF852CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:7c:72:ba:44:ad:be:55:af:19:05:01:c0:
                    08:41:1c:bc:d0:7c:a0:cc:c0:c5:53:f7:b8:66:b8:
                    14:cb:66:07:b5:84:9d:90:41:f9:0a:fd:e5:80:97:
                    46:ac:af:4d:4b:e4:20:17:c7:ca:02:37:43:c2:c9:
                    9d:ea:26:b4:87:32:ff:c8:89:99:3e:8f:71:18:f3:
                    24:5f:88:ea:e2:7b:be:6f:57:83:b9:91:94:01:e5:
                    88:57:8e:82:1b:77:08:07:35:ea:d7:a7:18:54:49:
                    d8:a7:67:96:56:87:1c:af:ff:ba:5e:8f:bf:81:08:
                    d9:6c:8c:dc:b3:88:df:40:43:13:63:cb:92:89:4c:
                    d3:b6:e7:5b:80:33:87:62:7e:91:96:65:b5:6f:91:
                    e4:0f:ba:71:0d:24:02:07:11:93:59:05:2d:82:e4:
                    8a:8b:88:97:0d:5e:4e:be:f0:2d:07:04:21:29:a8:
                    cf:fe:81:f6:a6:6c:f1:d6:c6:58:09:aa:51:d8:cd:
                    24:b2:39:e9:1d:9f:1e:2c:d4:c1:ab:0e:61:58:31:
                    b4:bd:58:f5:0d:e2:f8:22:68:af:e2:7a:52:62:73:
                    6f:ba:d5:33:d5:c0:87:c1:ee:7b:b2:24:12:fe:f9:
                    24:51:76:5b:69:58:44:3c:39:d1:b5:c8:6a:a4:99:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6D:9E:C5:C4:A1:CA:54:9F:12:C9:39:DB:8F:8C:2E:7D:F8:52:CB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146614.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:5e:ae:21:e6:f6:4e:7e:59:56:bd:28:95:c4:d4:8f:8b:8a:
         66:3d:fa:2e:23:4b:b5:e5:fe:07:9a:64:e3:b6:17:97:8c:9f:
         eb:3c:fa:65:2b:c7:9a:ef:fa:0f:95:16:6d:d9:61:d9:b6:35:
         71:f5:ac:8b:6c:40:a3:e6:71:55:e0:06:6c:ea:f8:42:a0:69:
         64:16:6b:c8:6b:cb:00:61:ab:a4:5d:6a:ef:f7:6c:18:68:c6:
         c8:cc:69:02:36:85:56:9b:99:1e:89:ed:93:20:40:e4:5d:c8:
         81:3f:73:fd:8e:3c:46:05:6d:e6:04:48:8a:4b:80:9d:6a:d4:
         d6:86:c2:1c:7a:12:bc:69:bc:87:62:73:d6:d5:bb:dd:e0:58:
         e0:ca:06:f7:f7:0c:0b:2b:fb:4f:5d:b2:40:45:e3:06:24:ee:
         0b:11:b9:0e:41:b8:99:6a:5d:9a:f0:a2:7d:70:2a:71:8a:7d:
         9e:44:c0:8f:ed:91:c9:c4:e7:e8:53:2a:73:d2:41:e3:86:b3:
         6d:f0:c7:96:d4:f2:b8:62:f2:df:28:84:da:00:86:71:6b:29:
         8a:1f:b4:90:94:b1:3d:cf:8f:49:01:fc:10:13:d8:a7:ee:21:
         ab:b6:95:81:00:7c:67:a7:11:d4:1b:03:75:a4:fd:a4:33:b9:
         61:3f:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----