Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145154.roa
File:                     AS145154.roa (raw, json)
Hash identifier:          O8/Y85XpIvjetWlzzyFz0C95NAlJke3cN1k+KSLT9Qc=
Subject key identifier:   BD:9D:4E:25:4F:41:3F:C5:B3:AF:73:84:24:3E:4C:AB:7F:D0:3A:E9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7C7065A055ABB18EF364A0D73A5565E7F29D3986
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145154.roa
Signing time:             Tue 26 May 2026 06:31:06 +0000
ROA not before:           Tue 26 May 2026 06:26:06 +0000
ROA not after:            Tue 25 May 2027 06:31:06 +0000
asID:                     145154
IP address blocks:        240a:a9c8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:70:65:a0:55:ab:b1:8e:f3:64:a0:d7:3a:55:65:e7:f2:9d:39:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:26:06 2026 GMT
            Not After : May 25 06:31:06 2027 GMT
        Subject: CN=BD9D4E254F413FC5B3AF7384243E4CAB7FD03AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:d2:ca:a2:6e:b2:83:4e:4a:2f:fa:99:d0:
                    69:ad:6e:13:1c:66:56:97:16:c5:e0:dc:de:19:ed:
                    f0:20:fd:6e:74:ae:db:8d:ce:73:c4:ef:51:1e:da:
                    98:a8:98:00:ed:9c:f9:e8:b6:d0:7a:ed:43:f3:b4:
                    0f:5b:f6:16:a7:df:bc:fd:0e:a6:c1:97:b0:e9:56:
                    b7:42:ac:7f:d0:82:77:a4:33:fe:a4:48:ef:19:25:
                    e4:d9:59:e2:e9:29:28:27:7d:ab:d4:06:e3:f9:d5:
                    23:cc:b9:24:a9:ca:ee:0c:ca:29:36:fd:25:91:44:
                    1b:e6:e6:0a:b9:f9:8f:2d:fd:bc:d2:f9:82:7a:b7:
                    9a:bf:8b:91:bd:2b:9a:cb:83:b4:cf:31:93:46:d6:
                    43:31:13:03:21:68:09:79:37:43:69:15:b1:36:64:
                    dd:64:f1:fe:8d:ae:d2:84:5d:fa:98:bc:75:7b:fe:
                    40:89:ee:a7:38:e1:f0:c6:af:ea:b5:13:c3:52:cd:
                    58:43:62:7e:61:93:60:3d:b1:a8:62:8e:da:0a:87:
                    d1:ab:76:73:6b:b9:8d:bc:08:bc:8b:e6:80:4a:58:
                    15:39:4d:ad:6d:85:26:22:8b:38:d8:bd:8e:96:75:
                    82:28:e5:53:fe:d3:36:1c:7f:cb:5c:88:1e:7e:cd:
                    f4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9D:4E:25:4F:41:3F:C5:B3:AF:73:84:24:3E:4C:AB:7F:D0:3A:E9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145154.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:fc:45:04:b8:44:b9:bf:c0:ed:b9:73:f1:d2:eb:b3:d0:0d:
         23:99:a2:83:de:ad:3f:31:70:94:64:01:7d:1f:13:f4:0f:23:
         82:2e:77:ca:63:94:20:8a:11:b5:85:7a:c8:9d:df:f6:73:81:
         a2:0e:41:e3:75:86:3e:d0:5a:e1:0d:70:25:ee:3e:9c:d0:f1:
         79:8e:e1:12:23:61:a0:fb:84:bd:8e:24:c7:95:a7:d3:ee:a2:
         bb:f9:9a:e1:7b:ba:69:88:20:d1:cd:64:66:e6:95:55:8e:6c:
         e3:9b:52:8a:8f:44:2f:d8:78:f4:3b:03:84:0e:04:12:db:94:
         7f:89:0b:c1:d4:65:36:96:af:65:a7:e8:be:8a:97:0a:65:09:
         7a:16:3c:60:bb:2b:41:a9:c5:c4:a3:b3:b9:cb:c1:08:5b:50:
         e4:70:0c:0f:31:be:c7:6a:a5:5b:d6:47:ad:32:0a:25:f3:2c:
         2b:fc:3d:31:7f:90:e6:a8:42:09:ab:6f:d9:4a:80:37:4b:52:
         7b:6a:bc:16:42:c9:4f:5d:90:ed:04:56:18:19:9e:89:39:de:
         6b:25:93:2e:d3:48:8d:95:92:7c:0d:2f:b9:be:10:12:a7:a9:
         27:26:49:7f:f9:1d:81:af:56:de:9c:d6:31:4c:d3:6f:29:e9:
         23:86:05:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----