Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146658.roa
File:                     AS146658.roa (raw, json)
Hash identifier:          hF5dAbs7AY1E9+eZAvSCMxR2Bh6cK68wWMqOjqfWRCo=
Subject key identifier:   DB:6D:22:F2:56:9A:47:BC:B9:C9:AA:41:F6:E6:B8:9E:4C:EF:A3:99
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2E518F6C28A33D3F95DE3CE4CFDB3D0BB11CCBCC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146658.roa
Signing time:             Fri 22 May 2026 06:58:26 +0000
ROA not before:           Fri 22 May 2026 06:53:26 +0000
ROA not after:            Fri 21 May 2027 06:58:26 +0000
asID:                     146658
IP address blocks:        240a:afa8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:51:8f:6c:28:a3:3d:3f:95:de:3c:e4:cf:db:3d:0b:b1:1c:cb:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:26 2026 GMT
            Not After : May 21 06:58:26 2027 GMT
        Subject: CN=DB6D22F2569A47BCB9C9AA41F6E6B89E4CEFA399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:56:46:00:ac:c3:df:e8:2f:f3:a4:48:d9:
                    9f:ac:04:f7:09:25:fe:94:e4:da:dc:bf:cf:93:5d:
                    ed:fc:7b:64:6c:ea:8e:d6:1c:2a:56:6e:17:77:79:
                    97:95:d3:ed:07:b3:2a:a8:bb:7d:74:b8:4c:e8:5b:
                    bf:4f:2b:6c:c0:a3:8d:11:63:c8:35:a3:2f:d3:03:
                    71:1d:fd:e3:94:bd:39:7f:6a:f5:8f:c1:84:c0:d3:
                    ef:8a:4b:00:0d:e9:7a:87:07:65:31:7e:14:1e:20:
                    66:62:32:7b:d1:ec:23:32:b1:67:b6:40:71:1b:5b:
                    4e:f6:1e:14:7e:ba:0a:1e:ed:8f:98:e2:fe:a0:b3:
                    14:c6:a2:d7:85:16:eb:c5:98:aa:be:3b:0b:1e:9d:
                    4a:b8:43:fc:88:08:9e:cd:f7:f4:d5:a5:f1:f8:a7:
                    e4:01:34:87:1c:27:bb:7b:99:a2:a1:04:36:44:31:
                    de:e7:94:a4:f6:8e:bc:75:be:fc:d8:a4:36:d0:cb:
                    d1:bf:de:95:2a:3b:03:4e:b1:f2:0a:c9:a9:cb:82:
                    17:5d:d5:60:a1:88:b6:50:e6:fc:3a:0c:5a:54:69:
                    f4:5f:72:c3:de:37:25:67:fa:f3:9c:f2:59:9e:cb:
                    83:3d:73:83:a6:26:e0:9d:66:c1:46:b7:36:50:74:
                    ea:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6D:22:F2:56:9A:47:BC:B9:C9:AA:41:F6:E6:B8:9E:4C:EF:A3:99
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146658.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afa8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:34:a8:bd:00:5a:36:35:02:9d:81:5f:2a:85:6f:4e:ba:83:
         34:b1:09:cd:1d:0d:07:de:79:88:b2:1b:8d:8a:9a:21:1d:22:
         2f:eb:b8:b8:3b:6e:27:84:d1:63:17:27:dc:36:78:1d:4c:42:
         41:2d:0a:6a:78:81:3d:de:f9:d8:8d:51:5c:24:a3:ba:20:d8:
         8c:81:0f:96:8a:ef:25:e6:92:89:c3:d6:05:8e:cb:5a:94:49:
         d9:f0:63:31:c8:cb:ac:e3:d4:2d:50:cc:c1:fc:34:09:4f:06:
         95:0c:1b:9a:75:36:91:26:1a:60:99:3d:91:ea:21:0f:42:7c:
         82:ea:29:8e:ac:14:84:2b:5f:d5:b5:95:c4:91:ff:19:2e:a9:
         d1:fc:db:22:82:9f:47:5d:5f:dd:83:eb:c2:18:59:95:cc:ef:
         11:37:f7:bb:34:b4:97:01:7b:9b:b4:f3:52:66:ec:f7:72:89:
         e0:bd:ff:ed:74:8e:d0:b9:1c:82:c2:a6:74:1e:42:05:96:12:
         d7:94:98:e7:c2:cd:1e:6b:fa:e3:e8:4b:dc:4e:80:25:29:eb:
         56:9d:62:e6:27:bb:35:ff:66:fa:0c:22:89:76:be:61:0b:53:
         0f:52:a4:64:cb:93:e7:ea:fa:79:02:5c:ca:5a:0f:fe:58:3b:
         5e:01:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----