Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145039.roa
File:                     AS145039.roa (raw, json)
Hash identifier:          c3Th0Pi95QBoIVSLxM8R1jAegY5lNK17YsZ2cwNUFbk=
Subject key identifier:   B8:82:13:8B:E5:E9:C1:A6:A8:2E:86:84:75:68:5D:35:36:76:1B:25
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7EC45BB0FFC153A6E57BF9ABB6E77E334BD1D828
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145039.roa
Signing time:             Fri 22 May 2026 07:32:33 +0000
ROA not before:           Fri 22 May 2026 07:27:33 +0000
ROA not after:            Fri 21 May 2027 07:32:33 +0000
asID:                     145039
IP address blocks:        240a:a955::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c4:5b:b0:ff:c1:53:a6:e5:7b:f9:ab:b6:e7:7e:33:4b:d1:d8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:33 2026 GMT
            Not After : May 21 07:32:33 2027 GMT
        Subject: CN=B882138BE5E9C1A6A82E868475685D3536761B25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:34:19:cf:44:c7:4a:01:63:d5:0d:f1:a6:
                    3e:c9:ac:c0:64:67:07:4d:d9:1a:03:84:80:69:16:
                    a8:cd:e3:b5:da:c4:5f:99:03:68:09:20:df:b7:36:
                    0a:59:46:76:c9:a1:fe:72:a7:67:ca:8b:da:e8:6d:
                    1f:b2:99:cc:f5:c7:47:80:31:29:2c:db:32:b8:9a:
                    8a:94:af:7b:18:3c:47:c8:28:73:01:62:80:dc:a5:
                    52:4f:c6:83:ce:47:ad:d4:2c:b4:7b:f4:7c:cb:d6:
                    e6:65:01:92:b2:9e:4d:3e:04:98:82:f1:ea:94:79:
                    c7:62:5e:cd:49:eb:b8:41:d0:09:43:de:30:13:36:
                    79:50:dc:e0:8f:8c:a1:21:65:23:b1:04:9f:30:b2:
                    80:40:2c:ea:b9:f2:ba:4b:5e:38:f2:28:6a:81:b7:
                    a4:5e:41:50:0f:39:27:9a:b0:f9:7b:06:57:88:e6:
                    33:1e:95:1c:87:ed:29:53:5f:d1:f1:b9:4d:0a:c2:
                    95:c1:a6:ba:a2:ca:6c:18:43:10:19:ea:5b:dd:c9:
                    e4:e8:e0:dc:7e:ac:03:d0:11:43:fe:3f:d8:f4:d7:
                    42:4e:37:07:a6:ad:2a:eb:b6:34:db:1d:05:9c:10:
                    0f:9e:b8:52:21:30:ec:a1:80:0c:42:96:dc:fc:4f:
                    2f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:82:13:8B:E5:E9:C1:A6:A8:2E:86:84:75:68:5D:35:36:76:1B:25
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a955::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:1d:3c:48:a5:d3:ec:aa:2d:56:29:c5:7d:b1:f1:7a:da:35:
         bf:51:ac:97:7a:bf:f4:e3:30:7a:0c:39:28:52:57:a5:61:65:
         ae:19:9e:06:f5:86:83:3c:5d:96:73:aa:29:94:b3:bd:23:7a:
         39:23:08:7c:c3:b9:ff:e6:00:a1:ac:c8:3c:d7:c1:8c:3a:a4:
         21:af:b1:81:44:86:c0:df:b5:67:8f:ba:85:e8:93:80:d0:4f:
         fa:f2:f1:3c:df:4a:a4:cb:56:42:18:6f:69:fe:98:a5:26:db:
         22:02:a8:9a:22:80:30:a3:9d:19:19:d4:cf:ee:e1:12:0d:00:
         3e:b9:b2:ce:0e:68:04:1f:37:cb:0c:25:2b:71:bb:3f:2a:e2:
         05:78:23:b7:13:ca:90:71:cb:ca:2e:3f:43:8d:55:4d:d1:c4:
         d2:77:ba:32:9a:12:da:52:da:46:52:f4:2b:43:91:a2:2f:18:
         95:e0:f8:1f:75:da:93:cf:10:03:0f:8a:8a:64:8a:32:f1:b4:
         06:50:b1:0d:d7:b6:8f:b0:e0:62:51:ee:81:2d:92:87:1f:26:
         6b:72:85:00:72:3a:c0:be:7d:11:22:31:16:37:45:b0:80:80:
         ea:ae:b6:9a:a0:8e:74:5b:cd:2d:ed:6c:03:fe:67:a6:76:dd:
         3f:7a:03:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----