Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146663.roa
File:                     AS146663.roa (raw, json)
Hash identifier:          6964bG3+HcKdMz+LTGtjg6vr0qIs2drWDOtZUwzB270=
Subject key identifier:   2F:0D:29:EE:FF:4B:33:C1:6B:C8:8E:29:0B:D5:75:18:1B:F6:1E:EF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4FD562160C8632844150031D9E4C12529DF892AA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146663.roa
Signing time:             Mon 25 May 2026 01:20:27 +0000
ROA not before:           Mon 25 May 2026 01:15:27 +0000
ROA not after:            Mon 24 May 2027 01:20:27 +0000
asID:                     146663
IP address blocks:        240a:afad::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d5:62:16:0c:86:32:84:41:50:03:1d:9e:4c:12:52:9d:f8:92:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:27 2026 GMT
            Not After : May 24 01:20:27 2027 GMT
        Subject: CN=2F0D29EEFF4B33C16BC88E290BD575181BF61EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:6f:aa:d9:3a:7b:bb:82:e9:5c:2c:f1:d2:
                    ba:0a:10:bf:2e:d1:5c:37:fb:20:8e:f9:44:5f:18:
                    bf:74:41:eb:f7:51:3b:04:47:73:c0:7f:71:1f:68:
                    c3:0f:05:07:fd:03:ef:3e:1a:de:64:54:d8:16:66:
                    a6:15:e0:51:2d:dd:28:ec:c9:cb:b0:6f:0e:2d:9b:
                    bb:e0:9d:c1:94:93:8d:fa:d0:6e:91:60:a5:3a:8b:
                    9b:e4:b1:2c:6b:bc:83:59:fe:26:b3:e0:6d:de:49:
                    0e:b9:43:d1:18:b8:70:cb:69:da:b7:6a:57:34:24:
                    46:ba:5d:1c:85:ff:98:71:b7:c8:c5:1d:9a:e1:f8:
                    53:1c:e4:cc:a8:bc:c0:8a:72:ae:ec:9c:03:2a:63:
                    cc:a9:d5:44:4f:69:3e:cb:2b:bd:62:6b:08:b8:c1:
                    bc:af:d3:dc:d3:77:ff:88:93:b3:38:16:03:11:2a:
                    0e:a5:5c:a3:d1:23:90:e9:9d:fc:58:55:2c:3f:07:
                    f9:c4:3e:e3:cc:46:77:ed:42:4f:ce:41:2a:eb:53:
                    65:d5:8c:4f:b9:69:00:2d:f4:f4:ae:3f:b0:01:66:
                    1c:53:73:b8:45:7d:c5:04:46:72:65:07:b0:20:03:
                    c4:d9:10:83:bb:2f:a1:2f:89:ff:15:bf:57:a5:5c:
                    b5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0D:29:EE:FF:4B:33:C1:6B:C8:8E:29:0B:D5:75:18:1B:F6:1E:EF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146663.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afad::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:5e:d7:f7:9c:7c:99:75:71:f9:df:cb:72:6b:27:7a:86:7b:
         6e:63:61:d5:67:31:0a:00:ee:fd:97:3d:07:18:f2:c9:b8:ce:
         48:51:3e:3b:c5:b1:9d:49:0c:4a:8a:b8:ea:bb:b2:92:59:44:
         49:63:ea:d1:81:c6:8e:04:23:17:0c:51:eb:f4:03:b3:bc:6b:
         4c:13:94:d1:b0:95:22:31:63:25:a7:bb:bc:25:d7:3a:20:bc:
         6c:1b:c0:e1:66:9c:ca:8d:67:d8:35:d5:77:aa:00:96:23:39:
         06:64:b6:53:22:c2:9a:d3:2e:36:06:7a:0f:4e:93:8c:bc:da:
         8b:f5:03:ba:d8:92:55:8d:0d:67:f0:cc:de:0c:ef:61:a5:9a:
         e5:78:90:4f:85:c4:8d:5e:fe:48:03:dd:9b:67:bc:77:44:77:
         c1:6d:44:ec:b5:71:b4:38:a8:ae:bb:65:00:13:3d:05:4e:53:
         c9:bd:84:6a:e4:a4:4c:0d:81:e9:67:2b:a2:d9:75:eb:c6:a9:
         67:c0:2d:b2:13:85:6c:62:6a:56:39:7c:88:46:b1:e1:f6:64:
         7c:7f:20:78:24:83:5d:43:18:04:4c:37:11:bf:dd:7a:86:66:
         3f:b5:61:be:f0:5d:16:88:7e:d1:b6:48:e9:44:57:34:7b:9a:
         25:22:e7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----