Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145057.roa
File:                     AS145057.roa (raw, json)
Hash identifier:          vAErJMWWmrltc1CXObsuZSeHXtqzgXeh6AF5zuR4lmw=
Subject key identifier:   9E:91:F8:2A:DF:19:CD:90:10:C7:5E:E7:EC:B0:FF:B2:44:08:EB:64
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       01A34F27BCDB8ADA1A19DBC5B77C334E8DA98971
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145057.roa
Signing time:             Fri 22 May 2026 06:27:37 +0000
ROA not before:           Fri 22 May 2026 06:22:37 +0000
ROA not after:            Fri 21 May 2027 06:27:37 +0000
asID:                     145057
IP address blocks:        240a:a967::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a3:4f:27:bc:db:8a:da:1a:19:db:c5:b7:7c:33:4e:8d:a9:89:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:37 2026 GMT
            Not After : May 21 06:27:37 2027 GMT
        Subject: CN=9E91F82ADF19CD9010C75EE7ECB0FFB24408EB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bc:df:6c:91:67:b7:e9:7d:77:d0:d4:94:bf:
                    ae:7f:91:85:86:89:74:22:86:b6:a6:36:e0:3a:94:
                    77:b8:32:19:4a:37:e7:d5:e6:8f:cf:15:ab:78:7f:
                    c8:6f:6e:25:1d:a5:3f:f1:cc:c2:f6:a8:3b:01:42:
                    3e:f4:1a:62:45:0e:97:09:4c:b8:26:a4:ee:02:83:
                    5e:0e:37:32:97:7c:bc:b4:d2:17:15:f5:c3:ba:ef:
                    54:1e:14:1e:fe:d8:2f:5c:63:5b:57:07:53:e3:8a:
                    5a:4b:00:ec:9a:e8:d0:b4:a1:dc:51:0a:03:17:d1:
                    37:e8:d5:e3:9d:0c:e0:c1:95:6f:17:a3:65:a7:43:
                    7f:e6:96:17:d6:3a:4e:45:28:65:fd:62:3c:02:78:
                    1d:b9:a1:e9:ad:41:6b:2d:45:61:51:89:40:a2:11:
                    28:35:8a:26:da:cd:3c:71:14:65:c5:49:d5:4a:b2:
                    1e:20:da:29:bb:00:d9:e8:62:7f:9f:cb:4b:5b:52:
                    7e:1d:0b:9a:b8:54:0b:14:62:ee:0e:e1:90:d6:9a:
                    2f:fe:79:bd:4e:81:cc:19:eb:7b:dc:94:03:52:0e:
                    7f:71:b3:4b:9e:1e:cc:95:bc:a7:fa:39:4c:11:70:
                    f8:cd:09:7a:0a:c2:d6:d0:10:d7:4c:19:df:ed:e3:
                    d5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:91:F8:2A:DF:19:CD:90:10:C7:5E:E7:EC:B0:FF:B2:44:08:EB:64
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145057.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a967::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:e0:f7:cc:51:bb:0a:d6:05:88:9b:47:14:1f:8f:e3:6d:14:
         5a:4d:46:6e:dd:3f:60:d5:57:c5:11:db:68:53:fe:7f:bc:5b:
         93:f7:97:fc:c5:d4:dc:3e:0b:20:6e:3b:f3:d5:6f:b0:36:33:
         cc:f5:27:5a:18:19:27:3c:36:e1:fa:5a:b0:b3:91:24:3d:89:
         c7:c2:67:98:ad:57:af:fc:22:e0:fc:b7:fd:4c:a3:3b:fe:66:
         40:e7:54:fa:a1:c7:e1:80:ec:cd:a6:60:c5:22:b8:12:46:c5:
         92:55:84:19:64:f8:7e:62:21:d3:4c:8c:68:17:53:29:16:78:
         bb:84:54:1f:26:c3:6b:ee:d4:a1:d5:8b:00:50:54:70:35:f9:
         9d:ed:e1:2e:66:a6:1a:c7:56:e1:1a:1c:7c:35:c0:fc:b0:e1:
         3b:ff:20:be:1a:68:c3:ca:0e:0d:a2:c5:e9:3d:4e:3c:64:6f:
         b7:df:20:6b:b1:6a:b9:62:05:4c:36:34:9e:27:9a:22:00:c0:
         06:5a:6a:35:62:d2:ce:70:ab:19:af:da:3d:5f:3c:62:81:59:
         90:c4:9c:bf:f0:72:29:62:d4:d2:4e:0a:05:e4:42:9a:93:cd:
         0a:7a:35:d6:e6:5c:64:a9:51:74:95:e0:b8:7a:c0:33:2b:11:
         94:16:76:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----