Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145068.roa
File:                     AS145068.roa (raw, json)
Hash identifier:          yLtRe/OTfWsZF8/xiaMruenMDZyU16Xt5zkF0DD1KBU=
Subject key identifier:   2D:12:19:36:58:3A:AF:E4:A7:02:84:D5:73:03:DB:BD:19:E9:6F:25
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0C233D422EA6FD549F2461EA3D083E8868180242
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145068.roa
Signing time:             Mon 25 May 2026 01:20:33 +0000
ROA not before:           Mon 25 May 2026 01:15:33 +0000
ROA not after:            Mon 24 May 2027 01:20:33 +0000
asID:                     145068
IP address blocks:        240a:a972::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:23:3d:42:2e:a6:fd:54:9f:24:61:ea:3d:08:3e:88:68:18:02:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:33 2026 GMT
            Not After : May 24 01:20:33 2027 GMT
        Subject: CN=2D121936583AAFE4A70284D57303DBBD19E96F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:0e:0a:b2:79:44:6d:b4:ab:b6:df:22:b3:
                    c5:98:3a:85:46:3d:59:b9:d4:9c:3f:4c:b7:c7:7c:
                    20:c1:0a:d2:f9:94:17:f2:f1:bc:3e:da:87:15:15:
                    15:05:02:71:9a:78:a4:b3:24:5b:db:53:50:2a:67:
                    96:09:93:4d:36:0d:0b:10:9b:8d:9f:7a:eb:6e:e3:
                    97:e1:9a:6a:f0:56:e2:f5:10:a2:be:c9:3b:15:b0:
                    87:e4:dd:97:f5:f4:e6:c6:02:41:52:00:ff:99:35:
                    1f:88:f8:b9:b0:3b:b1:64:f5:58:5c:aa:73:8a:a0:
                    d1:08:90:6e:cf:fb:d8:e2:66:a5:4e:78:5a:bd:7a:
                    94:60:0f:62:a1:61:19:6e:d0:85:7d:d5:9d:9b:eb:
                    62:5e:f7:23:58:e7:ef:d7:f5:38:b9:af:0f:2d:39:
                    b0:41:22:c6:ab:b4:d8:f2:3a:80:72:d0:d7:a6:60:
                    23:90:46:29:07:ab:a4:56:e4:de:65:f3:2a:aa:93:
                    48:a8:73:a9:53:a9:00:0f:de:a5:0c:4a:cf:24:4e:
                    23:b2:47:ca:ef:54:b9:79:d4:41:7a:7a:25:60:7f:
                    eb:93:57:76:c8:be:d7:b9:00:2b:08:39:be:d9:46:
                    6a:fb:6c:f5:c0:66:1e:b5:90:3b:f7:b9:6e:e3:94:
                    11:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:12:19:36:58:3A:AF:E4:A7:02:84:D5:73:03:DB:BD:19:E9:6F:25
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145068.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a972::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:0f:17:4d:05:0e:37:a5:de:af:2d:b8:1b:cb:19:f3:54:9a:
         28:84:f1:70:1e:54:35:49:c7:72:c2:eb:37:d6:ae:43:33:96:
         a0:8f:c0:7f:8c:c5:ae:6e:9e:c1:99:7d:60:90:d9:d1:23:41:
         a2:22:6a:ec:b5:25:1a:0d:3d:75:84:c3:53:37:2b:68:ad:94:
         1c:26:9a:52:cd:49:e9:9d:92:70:f0:39:49:da:98:8a:be:2f:
         11:6e:45:44:3d:6f:c5:bb:39:3f:a6:a8:d4:89:02:e4:d3:88:
         4e:64:d7:4c:70:01:f0:b4:f0:20:11:d8:c2:53:aa:f6:55:d5:
         83:11:a7:85:4f:e7:65:b6:16:ac:f5:c0:a7:5a:a8:6c:7c:76:
         f5:42:c5:d7:1c:2a:68:09:f6:bf:81:24:5f:e5:90:0f:12:01:
         f9:f1:ed:a0:b2:5d:83:29:0d:66:07:45:8c:75:57:60:89:cc:
         17:f6:97:90:00:2e:1f:61:c0:ea:23:75:69:d9:06:b8:da:98:
         0a:d1:23:23:10:36:42:2f:20:62:b3:e7:c7:34:6c:8e:aa:44:
         d9:5d:f6:2c:2f:25:aa:1c:81:0c:4c:78:38:ab:5d:ff:86:a6:
         5e:11:8d:16:b0:7d:7a:0f:5f:f5:de:a3:45:30:18:3e:0e:4a:
         15:ec:b7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----