Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145083.roa
File:                     AS145083.roa (raw, json)
Hash identifier:          KesCirwntQUaDXhy6cjpZ5FUminl+FOFIhOu4ITuNno=
Subject key identifier:   09:75:B9:9B:86:BC:4D:32:74:B9:E9:F2:70:6A:67:9D:E0:09:B3:5F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0BF04E156EA1764A898756EF45EB32310E2F67C3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145083.roa
Signing time:             Tue 26 May 2026 06:12:54 +0000
ROA not before:           Tue 26 May 2026 06:07:54 +0000
ROA not after:            Tue 25 May 2027 06:12:54 +0000
asID:                     145083
IP address blocks:        240a:a981::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f0:4e:15:6e:a1:76:4a:89:87:56:ef:45:eb:32:31:0e:2f:67:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:54 2026 GMT
            Not After : May 25 06:12:54 2027 GMT
        Subject: CN=0975B99B86BC4D3274B9E9F2706A679DE009B35F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:5a:43:47:c2:28:c6:c5:e5:93:47:a5:93:
                    51:ac:45:71:c2:b3:25:d3:9d:93:0d:fb:d4:21:68:
                    b8:2e:f7:49:e6:90:60:ef:eb:fd:8d:5a:84:54:0d:
                    8e:1c:cc:6f:a0:f6:29:ca:33:ef:1c:e2:db:4c:2b:
                    0b:59:62:f1:4b:cf:cd:e1:6b:17:f1:c6:40:b2:5e:
                    7e:6b:78:44:fd:01:ae:43:dc:6f:f5:5c:13:52:cc:
                    5e:b9:93:74:4c:e6:0f:67:bc:e6:b1:75:fd:63:c9:
                    d1:00:2b:a6:6b:98:55:0f:61:67:ca:31:42:e3:4d:
                    e5:bf:6c:38:cf:86:88:66:81:07:0d:72:56:a2:d5:
                    55:33:2f:2b:a7:df:27:86:d4:03:7b:86:e0:15:c4:
                    20:12:7f:97:7f:91:a6:89:4f:74:ad:c7:8d:83:a4:
                    41:5f:c1:35:e6:f0:f1:09:5d:47:73:c3:c5:44:ae:
                    dd:bb:bd:33:96:e4:3a:f4:a9:aa:c1:d2:51:5d:15:
                    09:e6:33:6f:f6:26:bf:d2:7b:95:e8:70:66:3f:c5:
                    7b:ba:0c:50:57:a3:80:80:a4:51:3f:97:28:1e:ae:
                    8b:3f:80:4a:16:18:64:94:32:c2:c4:f1:33:37:88:
                    35:56:43:d1:14:32:b2:3d:fc:8a:17:dc:17:ea:a5:
                    f5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:75:B9:9B:86:BC:4D:32:74:B9:E9:F2:70:6A:67:9D:E0:09:B3:5F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a981::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:46:38:3d:c5:15:ef:43:14:3d:68:1f:e9:e3:aa:e0:6f:72:
         10:16:a7:0a:c3:7b:0e:3e:e1:4d:bf:32:a4:ad:bf:89:ee:80:
         d7:9f:d2:c6:1c:40:ab:c8:5d:aa:4c:31:92:45:5b:ec:e9:ab:
         80:95:c7:58:76:5e:c5:53:e8:5f:7e:56:b5:76:f6:22:da:17:
         19:03:28:c9:82:5f:59:78:cf:97:69:91:22:82:fb:80:03:89:
         50:d6:57:70:0a:3b:36:79:45:97:78:30:3a:3a:9a:39:77:37:
         8d:35:de:5a:70:6a:35:f1:ab:95:70:aa:f8:11:25:e3:05:f3:
         6d:2a:eb:27:ca:ad:a6:e2:66:7b:83:53:24:a6:6e:75:f4:6c:
         57:fb:86:bc:67:9f:11:73:9d:28:e7:6c:42:00:9b:ba:31:d0:
         6a:66:60:15:8c:8c:e3:90:7f:33:03:29:04:1e:fd:cd:61:77:
         1a:8f:22:19:3d:33:e5:6e:99:99:67:ee:e0:68:e1:7d:b4:c1:
         2e:cd:a7:cf:df:ab:01:73:45:9d:01:0a:33:e5:d3:0d:c8:81:
         dd:a7:d5:ac:6c:30:ed:4a:19:6a:7e:e5:1c:e1:14:7d:57:2e:
         72:7c:76:2c:22:99:3d:21:3f:1e:6d:de:90:80:06:a7:28:d1:
         ea:dc:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----