Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146625.roa
File:                     AS146625.roa (raw, json)
Hash identifier:          rNSQi9bV+i7WrIhyvX+RTorJPguNTvY7CGeiNFAZr+s=
Subject key identifier:   E7:E1:57:75:AA:13:95:48:BE:01:11:B4:4D:D9:1B:A6:04:60:FB:E2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       27D4E9895DE99C4ADBDAF440E73F7CCE11A766A4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146625.roa
Signing time:             Fri 22 May 2026 07:08:40 +0000
ROA not before:           Fri 22 May 2026 07:03:40 +0000
ROA not after:            Fri 21 May 2027 07:08:40 +0000
asID:                     146625
IP address blocks:        240a:af87::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d4:e9:89:5d:e9:9c:4a:db:da:f4:40:e7:3f:7c:ce:11:a7:66:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:40 2026 GMT
            Not After : May 21 07:08:40 2027 GMT
        Subject: CN=E7E15775AA139548BE0111B44DD91BA60460FBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:54:f6:cc:8f:53:07:24:b4:53:ac:63:ed:
                    da:32:67:c8:e8:15:ea:f4:4e:09:68:76:9a:a8:26:
                    70:61:ed:7a:42:35:02:88:80:af:f7:9b:e5:e8:98:
                    79:be:0d:8c:3b:9b:c9:a4:b7:75:25:ca:d7:8d:82:
                    a0:07:9e:8d:bf:64:14:a8:e5:fe:5d:07:d8:b4:e1:
                    0f:ec:ef:f7:13:95:f9:6b:67:66:58:6b:83:bc:d3:
                    0c:94:ce:33:d6:14:82:3c:55:05:f7:5e:41:ee:69:
                    cd:60:7d:9e:7a:d6:08:b6:aa:5d:5d:a1:07:a0:96:
                    ee:82:e8:1c:4f:a9:1b:61:f1:da:4f:19:df:59:8b:
                    89:af:b5:a4:7e:17:f1:ea:3f:8b:93:f5:63:82:87:
                    5a:ad:6e:94:26:59:78:eb:0a:b7:c4:28:af:1c:e9:
                    94:49:20:0b:61:e4:87:2a:3f:b0:ea:29:3f:89:a2:
                    ac:e6:5f:6d:38:a6:31:96:86:78:c4:dc:d9:ef:23:
                    f1:72:67:da:7e:bb:36:39:24:2a:0e:28:78:dc:34:
                    44:83:d3:78:e3:de:70:d2:45:bc:0a:9d:e9:3b:c3:
                    81:89:ed:b3:d9:b6:9a:93:59:1d:20:16:97:39:4c:
                    2b:fd:d3:44:cc:cb:5d:cc:e9:f7:87:78:1d:b6:bd:
                    7f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E1:57:75:AA:13:95:48:BE:01:11:B4:4D:D9:1B:A6:04:60:FB:E2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146625.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:af87::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:ca:eb:89:d0:0a:6b:cd:56:b0:03:b1:86:b0:c7:fe:0a:04:
         af:a0:e6:64:81:64:5a:68:84:49:78:57:35:1e:82:64:0f:4e:
         c4:52:e9:38:b7:a3:b9:df:a6:af:22:e3:dd:70:61:f0:87:2b:
         81:34:6a:1e:42:c7:d2:6a:73:d0:cd:f2:f1:f3:8f:08:ca:0d:
         13:54:ca:20:92:bc:0e:dd:78:6a:09:23:49:5a:4a:52:a2:6e:
         ac:ac:e6:40:4d:28:11:d9:36:7f:2d:08:a8:74:f5:a4:ac:ff:
         a1:2b:d6:70:0e:75:d3:e3:07:bb:a5:e2:3b:4d:4f:a7:54:f5:
         9a:1e:40:de:f1:67:ce:ad:32:96:03:70:bf:6f:e4:9a:9d:9a:
         dd:99:4b:20:23:47:d4:08:57:7a:52:04:45:6c:1c:a8:29:4b:
         12:bb:94:be:0d:11:65:be:37:65:18:03:6d:74:e5:b2:58:a1:
         e0:78:72:95:35:75:ef:28:17:db:9a:49:c7:b0:3a:17:d4:03:
         ba:4f:bf:08:3f:82:a1:70:9d:ac:7c:41:ab:8e:0b:52:2f:50:
         3e:2d:73:79:03:34:2a:20:f4:7f:69:92:b8:da:ea:74:ab:c5:
         4d:eb:36:ed:68:82:c9:69:16:2d:98:a3:d4:d2:16:35:27:2c:
         c3:5b:ab:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----