Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145082.roa
File:                     AS145082.roa (raw, json)
Hash identifier:          JBhEelHK9hc+Blv5K/AvEOn4gEmbAcF0QWAJTrBHcYg=
Subject key identifier:   84:26:F3:FC:C4:BA:35:E8:10:6F:7F:AB:3B:FA:1B:93:DA:55:AB:40
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       12154CC9852E0F7732EC12A4137B52FA940A544A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145082.roa
Signing time:             Fri 22 May 2026 06:28:02 +0000
ROA not before:           Fri 22 May 2026 06:23:02 +0000
ROA not after:            Fri 21 May 2027 06:28:02 +0000
asID:                     145082
IP address blocks:        240a:a980::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:15:4c:c9:85:2e:0f:77:32:ec:12:a4:13:7b:52:fa:94:0a:54:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:23:02 2026 GMT
            Not After : May 21 06:28:02 2027 GMT
        Subject: CN=8426F3FCC4BA35E8106F7FAB3BFA1B93DA55AB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:25:b6:cd:46:67:fa:bd:b3:0a:41:d9:3f:cb:
                    e7:6b:d8:6a:04:3f:82:a1:18:c5:0f:b2:ec:0a:3e:
                    c3:d4:00:3f:fc:06:33:70:fd:56:8b:7f:c5:9c:8a:
                    2b:a5:3a:f3:88:05:4a:fb:2f:5b:e6:32:71:aa:d9:
                    1c:4c:af:c2:0e:9b:12:30:d5:06:e1:e9:33:9f:90:
                    87:25:4e:44:b9:88:fb:46:13:aa:2f:fe:84:de:b4:
                    70:fd:64:1a:ed:f2:7c:40:99:e3:24:06:35:1f:cc:
                    91:a9:fc:95:22:08:d4:a9:05:17:28:fa:7c:d3:d6:
                    88:1e:f4:f8:07:03:f4:e2:26:d9:3b:58:f4:ba:ba:
                    a6:ab:61:ca:d6:80:23:3a:48:d5:9d:21:4f:b4:b3:
                    c0:47:e0:a2:6d:91:af:52:d9:66:c5:1d:93:fe:bf:
                    76:01:b1:95:64:47:9f:6e:b5:ff:5d:0f:38:50:41:
                    7a:92:31:f5:d4:bc:12:50:6e:48:4c:99:33:68:8f:
                    0e:d4:2f:d9:e4:cc:7c:10:d3:c1:26:a4:44:63:34:
                    5d:25:6d:f9:88:b0:31:99:4f:8c:68:7a:28:98:24:
                    49:47:29:6e:95:7e:46:60:9a:ed:4a:9c:9f:89:4e:
                    b5:af:7e:c8:86:83:fc:c6:f7:e2:1f:69:d4:32:81:
                    02:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:26:F3:FC:C4:BA:35:E8:10:6F:7F:AB:3B:FA:1B:93:DA:55:AB:40
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a980::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:a4:ef:4b:9b:f7:3d:04:00:2c:fe:ea:28:9e:ad:04:fa:eb:
         76:b7:9e:51:cf:28:85:f4:da:df:a7:e8:a5:39:fc:76:5d:4e:
         36:29:34:ff:f7:c6:f4:24:2d:b7:d4:a0:c6:81:60:d8:f0:c7:
         fa:a5:a7:56:c7:97:2e:a6:8d:c3:45:2c:ea:34:15:ce:99:a1:
         02:12:31:d6:ed:10:38:b0:b5:4f:a3:a9:6b:3c:d1:d9:e6:72:
         4c:e9:05:69:1f:ae:ff:e0:9a:84:82:47:67:da:7a:d4:2c:8c:
         9c:3b:6d:6d:7e:76:50:54:9b:73:27:c5:e7:60:9e:45:58:a4:
         3f:83:e8:90:11:29:2e:6f:89:cb:5d:3f:6c:c0:fe:cc:03:ee:
         5c:d8:44:3f:f3:b0:60:ee:1f:75:29:a2:c7:ee:da:61:54:3b:
         57:ee:79:35:a7:f4:3f:9c:0b:df:ff:7e:60:4d:5e:57:53:bd:
         61:11:1c:d9:fc:55:c9:eb:aa:77:bb:5b:20:bf:50:b7:95:78:
         fb:aa:05:e6:4a:9c:ba:89:7b:b7:7f:69:7d:6d:95:34:71:bb:
         a5:ea:70:e9:18:9c:7e:82:5c:90:b6:8e:91:98:09:55:28:a0:
         3e:fc:5c:f7:e6:46:db:d8:df:ce:d5:80:64:86:e1:49:b2:b0:
         73:7d:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----