Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145130.roa
File:                     AS145130.roa (raw, json)
Hash identifier:          tUayuS/tn5zXw+eN2wTN0bsboLfSLHW2RwJWCbxncic=
Subject key identifier:   9F:01:0D:98:71:79:AB:75:39:82:10:8F:78:9B:71:14:74:F1:FB:FE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4BE00771DE61DD7C4A0680AF6BEF70128DCF9199
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145130.roa
Signing time:             Tue 26 May 2026 08:52:48 +0000
ROA not before:           Tue 26 May 2026 08:47:48 +0000
ROA not after:            Tue 25 May 2027 08:52:48 +0000
asID:                     145130
IP address blocks:        240a:a9b0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e0:07:71:de:61:dd:7c:4a:06:80:af:6b:ef:70:12:8d:cf:91:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:48 2026 GMT
            Not After : May 25 08:52:48 2027 GMT
        Subject: CN=9F010D987179AB753982108F789B711474F1FBFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:49:53:de:0a:e8:2b:24:c6:48:e0:d2:ed:
                    db:9d:53:cd:b2:24:61:d7:6c:f2:43:d1:d4:74:38:
                    46:6d:3e:f2:6c:28:e4:a4:53:62:85:58:59:27:81:
                    6e:a0:b4:22:03:31:86:c7:fb:6c:1c:69:9a:94:d4:
                    09:d5:0f:52:6c:10:6a:36:42:e3:2d:d2:2d:45:de:
                    d3:c5:9f:b7:00:70:8e:2b:e7:7e:19:4b:e2:5a:7d:
                    fd:e3:ff:35:e7:81:a0:c0:f4:f3:da:4d:10:69:cd:
                    51:ce:27:03:9d:42:e2:c7:ae:19:4d:57:80:a2:34:
                    b3:a7:c4:bd:4f:42:9f:0c:df:c2:ae:da:d0:67:b2:
                    3d:ff:bc:2d:ff:25:f3:73:18:34:a2:cd:ff:8b:12:
                    3e:34:d3:92:d6:c0:ea:56:ba:ce:3a:7b:7f:26:38:
                    95:6e:a6:f6:3a:76:87:1a:60:5f:4d:c3:07:8c:1b:
                    17:6f:ee:95:a5:0c:01:05:56:62:b0:42:5c:76:3c:
                    ba:a2:5c:bb:7d:6e:b9:fa:ad:b3:a5:c3:66:aa:77:
                    36:f6:15:82:88:1b:f7:68:fa:04:14:ba:2d:51:2d:
                    7e:d6:1c:a8:23:61:31:8d:cc:29:54:73:ae:6e:aa:
                    cb:25:be:de:7b:3a:67:d4:88:d5:47:a2:73:ad:0c:
                    f7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:01:0D:98:71:79:AB:75:39:82:10:8F:78:9B:71:14:74:F1:FB:FE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:f7:79:92:43:96:8c:a8:da:14:70:fc:2e:c1:77:73:9e:fe:
         22:a4:6a:e3:17:d8:29:31:0c:8d:64:17:6c:b2:9f:09:3a:03:
         ca:71:06:47:9b:0a:49:81:5a:75:fc:9f:db:47:6a:31:d7:db:
         af:ab:34:6e:b8:fa:cf:89:29:d8:ba:2f:08:0d:04:5e:55:92:
         12:cc:ee:f0:50:0a:63:0e:3e:82:3b:4c:98:bb:c9:f8:55:8c:
         87:a1:5b:bc:76:f9:4c:82:d9:02:14:dc:10:c6:73:b3:41:55:
         d7:cd:ca:42:f7:f0:08:35:9b:a4:2b:28:0f:e8:17:a8:82:4c:
         3b:ea:7d:e7:7d:11:78:99:b5:9b:b6:48:60:fa:e6:2f:62:ef:
         e6:c0:3f:e4:35:c2:67:73:64:0a:73:de:a6:23:b6:87:f3:20:
         5f:5f:14:d7:45:2a:2e:ea:6a:10:be:5d:41:73:c0:29:db:c9:
         17:67:3e:1e:9e:ea:23:ba:d2:76:dc:05:c9:07:19:f6:8f:d1:
         77:1c:0f:bc:0d:39:19:72:98:e5:64:2a:31:d0:a0:4f:27:1a:
         cf:e0:b6:51:c9:51:e2:63:2e:5e:d6:ba:6e:37:17:30:92:f6:
         6c:a8:33:4b:c6:ac:89:96:b7:7f:bc:8a:b1:18:0e:10:6a:1b:
         b9:b3:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----