Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145051.roa
File:                     AS145051.roa (raw, json)
Hash identifier:          n3RFcgy30SKoXCAWD7AraM+1Xb93EQbq1Jc8ObBDs9o=
Subject key identifier:   C4:A8:E5:2F:E8:97:9A:0C:6E:32:44:76:56:A7:7B:B1:EF:CE:C4:AE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1A5286B2A4A0B51B20A596C5C1DFF99C9305129F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145051.roa
Signing time:             Tue 26 May 2026 01:13:04 +0000
ROA not before:           Tue 26 May 2026 01:08:04 +0000
ROA not after:            Tue 25 May 2027 01:13:04 +0000
asID:                     145051
IP address blocks:        240a:a961::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:52:86:b2:a4:a0:b5:1b:20:a5:96:c5:c1:df:f9:9c:93:05:12:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:04 2026 GMT
            Not After : May 25 01:13:04 2027 GMT
        Subject: CN=C4A8E52FE8979A0C6E32447656A77BB1EFCEC4AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a3:74:06:9a:16:0a:a6:0c:70:e3:90:c5:94:
                    51:d4:d8:e7:1e:7d:10:27:3f:b6:ee:16:cd:01:4d:
                    80:59:94:db:ea:a0:a9:04:ce:c2:22:12:1a:d4:69:
                    48:59:48:86:f3:33:94:95:0d:ef:7a:c8:51:99:9e:
                    b5:39:a4:69:94:17:e8:98:b9:e3:52:82:9e:e3:70:
                    ad:f3:61:0a:46:aa:53:d0:23:e5:83:ab:b1:8f:69:
                    94:b4:9c:49:11:ee:71:59:c0:ed:be:7d:97:9d:1a:
                    b7:3f:1e:fd:28:2c:e2:48:01:86:85:ae:9c:24:68:
                    05:15:00:54:0b:fa:75:bf:61:64:7f:f2:8a:c8:5d:
                    84:d1:68:ac:e1:92:68:4b:2a:ce:98:c7:ad:bf:74:
                    bc:d0:cd:e7:9b:a9:12:0f:1a:a7:c4:0f:39:e6:85:
                    7e:6b:f8:d5:0a:f3:1c:e2:39:28:98:6c:c2:3e:f7:
                    7d:19:96:d0:e0:f3:fd:69:e7:dc:fc:a7:bb:a0:5e:
                    b5:4c:43:7d:b1:0f:25:47:b5:88:9f:10:84:e0:08:
                    f9:2e:20:e4:f2:f1:4d:29:11:d1:02:c4:49:54:b0:
                    18:32:f0:85:3a:2d:ac:5e:b7:e5:58:9f:94:84:32:
                    17:57:b5:40:a2:f0:ca:9b:e1:0b:29:3d:9d:58:3b:
                    51:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A8:E5:2F:E8:97:9A:0C:6E:32:44:76:56:A7:7B:B1:EF:CE:C4:AE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145051.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a961::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:c8:7f:54:10:1b:0b:0e:31:5e:24:da:c3:c4:62:07:3b:2e:
         34:01:d5:34:30:83:91:0d:e1:55:f9:79:5b:0d:8c:e4:7b:9a:
         44:81:03:de:42:26:a3:d6:c5:59:64:e8:ff:86:d9:86:83:99:
         bb:79:cd:7e:57:30:fd:8c:f3:f0:5b:08:33:58:ca:31:47:11:
         75:a9:9f:9f:ee:aa:08:eb:aa:41:0a:fb:3c:eb:0b:f6:78:f3:
         1a:a5:98:3c:d5:c0:df:1d:c0:70:7c:ec:0d:eb:49:81:ed:28:
         fe:2d:ea:93:24:9a:b3:88:2b:a3:46:30:51:b9:d2:d8:95:cc:
         97:6e:f6:6e:6a:da:79:79:b2:54:eb:74:7a:d6:41:4b:08:a4:
         f2:19:56:b1:8f:18:7b:a5:da:9e:29:42:a1:d3:c7:1c:d2:4f:
         7b:98:de:26:81:98:5c:94:c0:7f:51:c8:52:9e:a7:7d:97:ae:
         a1:9c:55:f8:53:8e:82:92:4d:15:4c:7a:72:42:e3:30:63:1c:
         53:23:93:b6:a4:9c:20:00:f9:d3:b9:3a:01:9b:a5:79:b6:38:
         31:99:40:b8:57:0c:23:7e:a6:53:67:18:3f:8c:c5:61:2f:37:
         ab:f8:e8:92:ff:91:68:60:26:b7:5f:93:ae:c4:63:8f:d1:06:
         f0:d6:96:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----