Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146680.roa
File:                     AS146680.roa (raw, json)
Hash identifier:          lQgJwRdriydZ0SIXiqMmo8oxSv+TRAgrNjurA/o918c=
Subject key identifier:   5A:C1:05:2C:FB:32:74:79:51:DD:92:DD:CF:68:D6:6A:99:82:B0:B9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6C1BC9DEDE83AB75862AB994AC911E13A55BB4F6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146680.roa
Signing time:             Fri 22 May 2026 06:58:24 +0000
ROA not before:           Fri 22 May 2026 06:53:24 +0000
ROA not after:            Fri 21 May 2027 06:58:24 +0000
asID:                     146680
IP address blocks:        240a:afbe::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1b:c9:de:de:83:ab:75:86:2a:b9:94:ac:91:1e:13:a5:5b:b4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:24 2026 GMT
            Not After : May 21 06:58:24 2027 GMT
        Subject: CN=5AC1052CFB32747951DD92DDCF68D66A9982B0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:e3:06:53:5c:70:b6:fc:44:98:3e:32:4d:
                    39:43:ab:52:69:38:59:94:7d:14:c3:db:6d:fc:fc:
                    b6:eb:d7:12:e7:f1:f6:f5:c0:2b:4e:d2:d1:df:3d:
                    ce:66:e6:fa:1a:8d:9c:d7:4b:b9:de:8e:64:b8:e4:
                    cd:85:6e:94:cc:99:56:db:ef:0b:a3:96:4a:3b:0f:
                    cb:a0:9f:03:e0:80:84:9c:f2:60:86:dc:c4:cf:38:
                    27:8d:46:b6:de:87:66:06:a1:7e:5b:4e:d7:ca:fc:
                    4a:e0:27:8c:c5:c8:ed:e6:cf:73:bf:43:84:14:97:
                    aa:f4:d8:40:6b:04:2e:e0:eb:31:a6:40:00:9a:1a:
                    54:8d:b2:f7:0e:3c:33:fd:03:3a:67:cb:ad:93:c3:
                    1e:cc:9b:26:8b:db:6e:1a:08:c7:77:62:30:0f:39:
                    41:3a:3c:f2:41:f3:95:72:5b:48:c9:7c:11:54:8a:
                    7d:3a:65:38:7c:da:ef:9e:c6:1f:dc:ff:b6:1b:18:
                    10:ec:b0:70:bd:ea:9c:20:74:b7:59:0e:e3:d4:45:
                    99:9c:a8:77:ce:3c:36:69:76:0d:8d:c8:13:ab:f2:
                    b7:cd:ff:c7:e6:01:18:8e:ab:b0:a1:26:8d:42:15:
                    21:31:69:f8:70:18:89:a4:bf:fa:12:92:29:4e:f1:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C1:05:2C:FB:32:74:79:51:DD:92:DD:CF:68:D6:6A:99:82:B0:B9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146680.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afbe::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:c2:86:78:de:39:4e:a6:47:01:99:ba:6f:e4:de:f4:53:1e:
         b1:bd:20:3e:71:3d:a7:8d:fe:16:75:02:91:35:ef:74:69:82:
         48:41:ee:e5:c8:24:7d:fa:dd:db:0f:a6:5e:fa:db:53:b4:34:
         9a:d2:10:04:66:c6:50:33:93:5d:f7:9c:7d:96:ee:e7:ea:60:
         52:72:26:c5:2c:47:31:41:aa:46:f8:9d:6a:4b:4f:7b:92:48:
         45:6f:07:07:e4:76:b4:03:68:13:44:f5:01:b9:79:f2:ac:66:
         48:fc:14:5d:3e:37:dc:ad:89:a1:19:d0:52:43:07:03:58:16:
         bf:ca:e3:35:5b:90:69:fe:3f:5b:01:a7:59:db:12:de:46:2b:
         da:b5:42:5a:9a:c0:bb:57:33:6b:ff:45:1a:33:67:f5:2b:0e:
         57:4d:8c:a6:f2:67:c3:2b:76:96:51:9c:db:e9:ce:34:16:9a:
         a4:68:cf:44:56:75:19:b8:6d:ac:25:16:f6:4f:30:e4:d0:5e:
         31:2e:c7:18:27:52:9d:8f:3c:db:cc:5f:5b:23:00:ba:fb:a9:
         ea:14:81:b4:ee:2b:da:1c:fe:14:79:18:a6:d0:bc:ae:4d:af:
         59:09:ff:67:22:14:e2:14:78:33:26:ad:8c:3f:d3:a7:ad:fb:
         ff:a3:0d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----