Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146729.roa
File:                     AS146729.roa (raw, json)
Hash identifier:          GFzDGrxqyFF/98zxE7g1ziF/V996SUb+ffM7HIJRDOI=
Subject key identifier:   18:B7:16:5C:1B:E4:D7:F8:24:20:8B:D9:DB:A5:78:E1:76:07:95:E6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0DED1B8247B4FCAAC227DCDB5C615A841D35EA12
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146729.roa
Signing time:             Mon 25 May 2026 02:22:50 +0000
ROA not before:           Mon 25 May 2026 02:17:50 +0000
ROA not after:            Mon 24 May 2027 02:22:50 +0000
asID:                     146729
IP address blocks:        240a:afef::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ed:1b:82:47:b4:fc:aa:c2:27:dc:db:5c:61:5a:84:1d:35:ea:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:50 2026 GMT
            Not After : May 24 02:22:50 2027 GMT
        Subject: CN=18B7165C1BE4D7F824208BD9DBA578E1760795E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:4b:47:ed:26:20:71:e6:23:69:10:1d:8d:
                    3d:d0:1d:b8:6a:ef:16:2d:dd:c5:4b:de:f4:02:83:
                    7d:1c:cb:67:6a:9d:0a:40:d5:ab:0a:13:73:35:2e:
                    3b:5b:52:5d:cd:25:a1:3d:3c:55:e7:0a:ba:1e:97:
                    55:c9:7d:3d:a8:90:94:4d:0c:a7:23:4f:0d:67:4d:
                    90:5b:87:c8:89:68:b5:8f:c5:ff:a4:83:7a:ad:38:
                    2f:28:f7:6e:a9:c1:fd:ea:f9:0a:ab:1b:76:c6:2d:
                    30:d0:fe:e6:e2:d4:cc:61:e4:fe:e2:0b:72:35:42:
                    0a:86:95:ff:60:f4:67:4c:ae:69:eb:cb:38:67:c9:
                    d2:c8:c2:99:16:6e:1e:d1:6c:93:a8:53:88:73:0e:
                    0d:2d:a3:82:09:7b:01:31:5c:85:8b:b9:04:26:96:
                    a4:4d:2c:c4:bf:30:97:20:36:6c:d3:92:3f:d1:b9:
                    66:bd:67:81:71:bb:90:1d:3c:3d:9e:13:f7:cb:ab:
                    18:47:74:b2:6b:d5:3f:d2:97:f2:bb:30:f7:ff:f9:
                    33:5c:16:28:ff:48:74:34:9d:05:fb:cc:e4:11:56:
                    77:c8:3b:0b:0b:77:f7:23:a3:da:5c:70:6e:b8:67:
                    df:c7:9a:e9:17:36:2e:e9:07:b6:16:d8:02:99:5b:
                    69:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B7:16:5C:1B:E4:D7:F8:24:20:8B:D9:DB:A5:78:E1:76:07:95:E6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146729.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:afef::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:8e:f4:76:8f:8e:e5:87:90:5b:f8:63:d0:5b:09:13:de:a8:
         6e:1c:84:48:7a:69:39:d4:a9:a1:26:1d:90:67:aa:c5:d6:8a:
         a5:e0:ec:af:a1:a2:4f:bc:09:a1:d2:65:93:24:5c:3e:9e:01:
         e5:ea:65:62:5f:bf:35:ee:dd:f4:91:4f:98:b1:4c:0d:e0:86:
         87:66:8c:d0:e1:b2:b3:c2:5e:c7:1a:dc:dd:92:43:79:b7:8c:
         ef:cb:d5:fc:95:b7:b3:30:e4:07:d6:2c:55:25:2a:38:c2:ff:
         6d:bf:ab:d5:89:b6:e9:2a:77:a8:4f:f2:58:cc:18:f9:ea:28:
         a9:9b:34:0a:e6:7a:fa:2f:fe:9d:e1:2d:67:45:50:5b:e8:16:
         9d:20:30:30:6f:77:26:85:5e:53:12:16:49:a7:4b:f3:8d:8e:
         59:52:b6:91:82:b6:be:58:2b:6c:b0:bf:e8:72:c7:45:a2:be:
         94:35:99:ec:bd:62:8c:07:7b:00:36:09:4a:23:b7:4f:6a:9e:
         2c:f5:63:3e:d4:9e:01:08:c1:72:41:86:f0:65:57:31:43:62:
         d5:77:8c:96:89:7b:35:e1:14:2c:b1:c3:83:41:bf:bf:1e:ab:
         04:f3:de:7b:0a:d2:a6:7f:6b:9f:80:42:11:c9:c4:0b:e5:0c:
         6f:0c:b7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----