Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146694.roa
File:                     AS146694.roa (raw, json)
Hash identifier:          7uB8sbt/AJ6/1kSsZQH8vMCPS35KABVFpy3jCnLqcVQ=
Subject key identifier:   B4:BE:19:A8:F8:61:2D:C6:78:59:23:64:98:19:91:5C:E9:02:08:59
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       329987D08C90361B21AD5DB4F514256D6AA513A7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146694.roa
Signing time:             Fri 22 May 2026 07:24:53 +0000
ROA not before:           Fri 22 May 2026 07:19:53 +0000
ROA not after:            Fri 21 May 2027 07:24:53 +0000
asID:                     146694
IP address blocks:        240a:afcc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:99:87:d0:8c:90:36:1b:21:ad:5d:b4:f5:14:25:6d:6a:a5:13:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:53 2026 GMT
            Not After : May 21 07:24:53 2027 GMT
        Subject: CN=B4BE19A8F8612DC6785923649819915CE9020859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2f:45:e6:3c:95:9d:4a:d8:a1:4e:66:77:d6:
                    be:f7:2a:74:26:44:b9:70:d7:8c:c4:2b:ed:91:62:
                    58:5c:7f:06:6b:af:a8:a6:6b:14:66:9a:5a:8b:67:
                    3a:91:73:6a:6c:3c:28:52:14:54:cf:b7:5a:2a:a8:
                    91:ea:c8:fa:16:30:d2:ed:28:0e:7d:32:cd:5c:95:
                    e3:36:61:a8:27:a9:50:4f:d7:7f:a5:1b:a1:c9:6c:
                    8f:ea:4f:32:62:16:c4:6e:5b:1b:5e:6a:8c:6d:2c:
                    5a:4d:fc:d2:b2:01:f4:6c:3a:61:20:bc:05:ea:99:
                    cf:af:61:4c:a1:e7:e1:18:89:36:42:53:cc:fc:0c:
                    aa:fc:53:7c:be:06:5e:65:32:f1:44:9a:f8:e4:2c:
                    2f:33:dd:dc:e1:0a:f9:0f:61:d2:5f:20:44:40:46:
                    31:4a:4a:d6:59:63:c6:0e:70:cd:c1:fe:c2:3d:ff:
                    7e:53:5c:7f:49:97:4d:83:d4:5a:21:8a:00:b3:e5:
                    24:63:3b:f1:6d:c7:2f:ba:98:ff:53:10:da:27:1f:
                    37:42:44:7b:b9:7c:33:f3:d4:35:e7:d1:41:37:95:
                    2f:d3:59:60:61:8b:7f:54:78:40:48:7e:1f:e8:e0:
                    45:c7:7c:15:c2:d1:dc:70:cb:c5:a5:02:ea:9c:9d:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BE:19:A8:F8:61:2D:C6:78:59:23:64:98:19:91:5C:E9:02:08:59
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146694.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:c3:c3:b5:2d:44:fc:33:eb:5e:f3:72:2f:d7:3a:f7:5a:95:
         a0:d6:02:4b:8c:51:fd:9a:43:59:fc:30:b2:8b:b3:e8:8b:ca:
         66:b0:a8:8b:30:48:78:93:aa:5e:45:f0:2d:6e:7e:62:0d:23:
         48:ee:73:54:14:43:1a:cf:c5:ee:97:18:2e:a0:ae:5a:77:18:
         88:99:95:bb:b5:e6:77:b6:d2:a9:e3:e6:e2:5d:f9:fc:01:fb:
         55:b7:db:c8:45:66:8d:bd:48:09:a4:6b:2d:e4:71:61:2a:2a:
         bf:51:ff:ee:9e:d7:db:a1:bd:6f:f3:12:b2:11:e8:fe:4c:32:
         1d:5a:93:b7:4a:41:35:91:a5:88:30:1d:fc:4b:68:d8:f5:dc:
         29:16:54:80:bd:08:70:ef:a5:67:c1:ce:a6:b4:17:51:a3:fb:
         d6:f3:2b:30:a8:30:e8:ce:b3:e0:e8:10:31:40:b8:88:e9:65:
         2b:5b:9c:61:74:4e:ad:cd:78:47:e9:6f:ca:bc:81:d8:d4:77:
         27:98:39:8b:9c:9c:fa:80:c3:91:f3:a8:58:16:53:ad:c1:4f:
         6f:70:22:2e:25:ff:f9:25:d3:0a:b1:2c:3b:20:47:7c:77:93:
         5f:84:ac:a4:6e:66:85:e5:b6:9d:ec:0b:b4:5f:f6:20:e5:a4:
         59:c5:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----