Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146615.roa
File:                     AS146615.roa (raw, json)
Hash identifier:          hksQGpmjnmLhdgkeIltkF7h1zWgHXY0sxLyBrH47X+4=
Subject key identifier:   C3:6C:35:CC:E5:09:FE:CA:FA:D1:C9:B6:C5:D8:77:18:D4:14:CA:BD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3886DBC9052585CBFC3FEBF7FACB03598585DB38
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146615.roa
Signing time:             Fri 22 May 2026 07:09:05 +0000
ROA not before:           Fri 22 May 2026 07:04:05 +0000
ROA not after:            Fri 21 May 2027 07:09:05 +0000
asID:                     146615
IP address blocks:        240a:af7d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:86:db:c9:05:25:85:cb:fc:3f:eb:f7:fa:cb:03:59:85:85:db:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:05 2026 GMT
            Not After : May 21 07:09:05 2027 GMT
        Subject: CN=C36C35CCE509FECAFAD1C9B6C5D87718D414CABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:8c:70:d2:fa:79:1c:bb:c8:42:e1:d9:5a:
                    9f:c5:ec:12:a5:04:91:62:0f:25:84:a9:68:42:43:
                    2a:00:bf:dd:9d:8b:ac:57:c7:f7:21:ed:8d:6a:11:
                    2c:ac:81:58:fb:55:57:fd:5d:81:21:9b:99:78:67:
                    19:e0:aa:27:31:37:6d:21:34:ed:3b:5e:6b:5b:5e:
                    13:d4:df:c9:b3:e8:97:5e:06:75:79:bf:bf:26:9a:
                    52:b0:d7:c0:4f:fe:93:93:55:00:31:fb:b4:1d:40:
                    7b:ab:fe:d5:d4:04:06:7f:ba:e3:07:16:dd:b3:65:
                    64:94:7b:31:00:b4:3f:12:9d:7c:85:bb:b6:3a:5e:
                    cf:40:d7:d7:5a:c9:36:41:a3:aa:67:25:97:55:3d:
                    30:b1:0e:3c:36:78:2e:d9:b2:ad:38:63:a2:55:c2:
                    bd:58:bd:f4:37:91:fd:c2:fa:9b:ca:92:0d:b5:52:
                    9b:0d:67:0a:0e:69:85:04:8a:90:7a:0c:b1:ef:58:
                    d0:e4:97:c4:9d:85:04:cc:ac:a3:11:b2:53:03:b4:
                    50:a4:00:50:e6:ff:67:d1:56:14:a6:3b:bb:8b:64:
                    b7:c1:e2:94:f6:28:17:6a:3d:25:16:78:57:4c:a2:
                    e1:b1:dc:dc:06:9f:f4:bf:ea:a8:72:a6:95:ef:28:
                    8e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6C:35:CC:E5:09:FE:CA:FA:D1:C9:B6:C5:D8:77:18:D4:14:CA:BD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146615.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af7d::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:a2:c2:bf:5e:b3:70:43:fc:8c:32:1e:6e:43:9c:7f:c9:84:
         45:74:f5:07:9b:95:dd:a0:75:9e:16:1a:d0:b4:87:d3:17:50:
         60:29:fc:6d:ec:61:93:03:c8:a2:f4:4a:37:c9:ce:4a:8a:ba:
         3d:86:23:27:4c:80:51:81:70:bc:42:ee:93:10:4a:be:9e:47:
         27:ff:d5:be:37:90:44:d4:e3:5e:55:75:f4:ec:4c:5b:fc:71:
         21:e2:ab:1a:ac:70:48:52:14:39:7e:c7:b2:b5:28:92:35:6e:
         7d:80:71:98:6c:c7:42:62:b3:5c:ce:b3:24:f1:d5:31:d4:66:
         3b:89:26:b0:a8:b0:a2:ab:40:cd:2e:ef:84:a8:d8:0c:47:40:
         54:a5:9d:bc:e3:3f:ce:a4:46:f8:93:c6:47:30:76:93:59:43:
         31:1c:5e:e6:da:62:01:65:ad:a4:60:23:d1:f0:14:45:ab:2d:
         66:64:5e:ef:1c:85:b4:53:18:ef:21:0f:e0:05:23:7a:e4:ad:
         1f:c3:18:8a:3d:31:86:25:67:2b:4d:45:3f:a4:18:a8:62:b1:
         45:df:4e:84:99:f6:52:99:d6:43:9d:8b:93:01:03:56:2d:63:
         c8:94:ed:47:84:d6:3c:1d:97:58:d1:50:76:3c:7b:cc:e0:db:
         02:dd:1b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----