Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145047.roa
File:                     AS145047.roa (raw, json)
Hash identifier:          8CBJzItm9fggU+TB2pw8MquALQfqneRn6GrqXvkLGiY=
Subject key identifier:   B0:3D:38:C5:ED:B4:44:29:51:26:65:79:E8:F7:44:8E:91:3B:0D:8D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4629C09B4D5CDA1AEDDF0000E4529DFCAF83C0B8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145047.roa
Signing time:             Fri 22 May 2026 04:26:52 +0000
ROA not before:           Fri 22 May 2026 04:21:52 +0000
ROA not after:            Fri 21 May 2027 04:26:52 +0000
asID:                     145047
IP address blocks:        240a:a95d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:29:c0:9b:4d:5c:da:1a:ed:df:00:00:e4:52:9d:fc:af:83:c0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:52 2026 GMT
            Not After : May 21 04:26:52 2027 GMT
        Subject: CN=B03D38C5EDB4442951266579E8F7448E913B0D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:54:5a:1b:86:3e:5b:a3:ae:0f:38:4c:53:b7:
                    81:03:de:bd:7a:3c:3d:3e:2c:87:db:7b:91:67:be:
                    92:93:aa:a8:d9:45:e1:82:43:2d:c0:84:82:81:90:
                    f7:0b:7f:50:e6:86:41:30:dd:32:ea:47:7e:f7:ea:
                    ba:3d:eb:4f:48:4d:5b:74:b8:2b:bf:34:f1:50:d5:
                    b0:45:79:d6:c6:dc:38:be:6b:98:67:28:f9:1a:f7:
                    7d:02:40:eb:c0:74:1a:5d:1d:1e:39:6a:f3:39:e2:
                    7e:99:c5:90:f1:11:be:5d:d9:a5:02:1d:3b:ea:33:
                    04:e4:2d:9b:63:38:a9:a5:98:cc:88:cd:fb:00:a8:
                    9e:51:b8:c4:29:24:6a:69:d2:56:65:62:89:7a:f8:
                    fc:0b:4a:f6:30:c4:e5:e1:23:76:6d:3b:71:24:ff:
                    81:a4:b3:88:5a:50:ac:6c:50:c5:c5:8d:3a:54:8a:
                    00:e8:61:ad:eb:15:ba:cc:b0:61:78:a2:fc:2f:f6:
                    92:ae:d1:13:d0:52:34:8a:e4:e2:e2:b9:e1:6c:55:
                    b8:ea:0b:3a:7f:12:8a:33:46:6b:8f:c0:29:b2:58:
                    d2:1b:b6:c8:48:42:4d:b5:ff:2e:61:bd:8b:fb:5b:
                    69:ab:11:a3:40:90:9d:46:22:2f:1c:61:85:42:76:
                    2c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3D:38:C5:ED:B4:44:29:51:26:65:79:E8:F7:44:8E:91:3B:0D:8D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145047.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a95d::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:9c:a8:ed:db:f8:76:4d:db:b3:94:06:d7:28:a2:11:1c:
         dc:fc:8e:d8:49:2c:82:88:89:39:36:17:84:d0:60:91:91:93:
         90:85:a5:c3:43:ec:2e:7a:e5:a2:79:f9:d6:77:a4:f6:14:0b:
         92:0f:aa:85:b5:ae:5a:e9:06:2a:15:9f:ef:2e:27:ff:74:0b:
         34:16:bb:5c:24:d0:a8:3e:99:57:43:95:21:79:fd:1a:6a:24:
         3b:bb:7e:5e:9a:ab:1f:d2:87:12:52:74:25:0d:1e:5e:eb:03:
         a5:10:d0:7c:a2:25:a0:2d:c7:d2:4d:ac:ca:4a:23:11:3e:dd:
         5b:1b:bc:55:9d:6a:b5:7d:5e:ba:ab:f7:86:64:5b:48:8d:98:
         2f:38:74:79:bf:a3:32:31:1e:e4:54:5c:56:4b:30:47:de:e9:
         d8:3d:b7:eb:97:c6:ba:0d:03:a9:61:b1:02:24:62:a1:3c:05:
         0e:a4:1f:7f:32:bf:2f:26:f6:bf:76:95:95:31:8e:2b:97:70:
         71:12:0d:83:eb:ac:f6:78:5b:d4:5b:97:58:fb:41:42:d3:2c:
         57:ab:75:f5:fe:c4:aa:cf:2c:e1:b1:a5:e2:df:2d:59:eb:54:
         54:59:2b:de:60:d2:cc:40:4e:5a:85:55:fb:72:45:b1:ad:1e:
         25:7f:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----