Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145067.roa
File:                     AS145067.roa (raw, json)
Hash identifier:          6V0WEhNn+Y0rEkf72VbTvtnTaNXBp+X0uX16zw1NhEc=
Subject key identifier:   13:44:A0:4F:F3:04:5C:9E:CC:00:2B:BB:98:D4:F1:99:04:66:05:F2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       76F83CC7FFC8AC94805796126A1A914CB387F85B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145067.roa
Signing time:             Tue 26 May 2026 08:52:52 +0000
ROA not before:           Tue 26 May 2026 08:47:52 +0000
ROA not after:            Tue 25 May 2027 08:52:52 +0000
asID:                     145067
IP address blocks:        240a:a971::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f8:3c:c7:ff:c8:ac:94:80:57:96:12:6a:1a:91:4c:b3:87:f8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:52 2026 GMT
            Not After : May 25 08:52:52 2027 GMT
        Subject: CN=1344A04FF3045C9ECC002BBB98D4F199046605F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:70:91:17:50:52:56:fd:23:86:78:ca:2a:
                    73:fc:f9:49:04:f7:9f:0e:5d:c5:6d:79:9a:88:ee:
                    63:bf:e7:49:19:a3:d9:7a:29:ff:3d:8b:08:91:3a:
                    d4:93:c6:79:17:3b:f2:5a:1b:5a:f3:fc:c2:36:10:
                    6b:74:9d:7e:74:98:dc:c3:b5:b2:ee:2d:0d:c1:f9:
                    b4:d2:a7:6d:32:59:43:28:64:e1:5f:6b:10:7c:83:
                    6a:77:e0:e2:32:82:c2:c1:20:22:11:e1:11:5c:89:
                    fa:d2:bd:fb:47:81:b9:65:9c:61:fc:2c:33:6d:3e:
                    a9:45:e7:80:7a:f2:7e:66:9e:65:0d:71:be:f1:d6:
                    61:11:a2:62:0b:1b:e0:9b:44:fb:a7:c2:67:a1:6b:
                    22:40:4b:bf:f6:e3:e1:46:b5:19:01:81:8c:e2:7b:
                    f9:b3:08:aa:13:a1:b4:44:e9:8f:2f:c8:7c:35:74:
                    13:fb:40:c7:7f:0f:5e:ec:58:87:fe:80:c5:de:a9:
                    b8:cf:7c:0c:8f:4d:bb:b7:29:6f:74:2c:f3:f3:9e:
                    86:e9:80:68:3c:76:85:88:85:da:97:9f:40:89:a3:
                    e6:e7:21:e6:20:8f:89:f1:9e:fe:8f:d9:ef:20:3a:
                    c1:3e:69:93:24:94:ea:42:ba:a0:72:ca:16:dd:49:
                    76:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:44:A0:4F:F3:04:5C:9E:CC:00:2B:BB:98:D4:F1:99:04:66:05:F2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145067.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a971::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:91:d2:1b:51:de:70:03:2d:29:14:b5:51:61:5d:8a:fc:4b:
         3c:b0:32:e2:c3:16:33:85:7a:a5:f2:c8:5b:db:04:d0:c0:f7:
         12:4c:35:00:3a:3d:e3:03:49:16:1a:4c:19:26:48:24:dd:36:
         61:ae:19:a8:05:af:93:61:0c:0d:21:4e:5f:fa:f0:82:22:a1:
         4a:95:b4:2d:7c:bc:dd:65:bf:44:96:c0:a7:dd:4b:1e:b2:06:
         4f:01:a3:f8:0d:c3:e0:f9:18:83:ec:61:d1:b7:5f:fc:f1:c1:
         02:d5:a9:41:cb:44:fb:d2:5f:54:6e:b0:ba:2f:1f:0c:62:b0:
         1f:33:1a:7b:ca:bc:fe:f5:68:9b:52:0c:ea:dd:ee:e5:e2:45:
         27:0b:97:1e:e6:c3:ed:0b:0e:32:df:a1:b9:93:92:6d:c9:1a:
         5a:2c:99:87:28:df:be:66:10:82:72:82:e9:29:a6:7f:72:69:
         2b:a5:f5:7c:96:60:32:a0:f6:21:00:17:88:13:7d:8e:2a:7c:
         13:ef:a8:80:33:d2:c5:a1:78:49:63:e4:46:3f:1e:25:8f:40:
         4d:84:a2:52:bc:e2:d4:41:f7:98:62:64:e1:68:a8:76:e1:16:
         7a:6e:64:0a:db:8a:ea:80:29:7c:0a:2a:dc:c7:3d:3e:fe:f5:
         bf:cb:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----