Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145162.roa
File:                     AS145162.roa (raw, json)
Hash identifier:          ytElN8WNrqFfCEqeQLOKZ2169sJ0v1XIPr/Qs9phGyw=
Subject key identifier:   7C:D9:9B:C8:9D:28:3E:F0:E2:E4:71:95:92:39:09:89:22:51:66:4C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5740AF6C190614C94F29B93372860AE4813FEC9B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145162.roa
Signing time:             Mon 25 May 2026 01:20:30 +0000
ROA not before:           Mon 25 May 2026 01:15:30 +0000
ROA not after:            Mon 24 May 2027 01:20:30 +0000
asID:                     145162
IP address blocks:        240a:a9d0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:40:af:6c:19:06:14:c9:4f:29:b9:33:72:86:0a:e4:81:3f:ec:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:30 2026 GMT
            Not After : May 24 01:20:30 2027 GMT
        Subject: CN=7CD99BC89D283EF0E2E47195923909892251664C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:fe:3b:40:c5:aa:93:24:ed:3a:b1:aa:dd:
                    f7:e0:e2:1b:ec:8b:49:af:d2:a6:17:31:dc:db:80:
                    26:c2:70:47:c1:c6:d4:be:78:cf:47:06:c8:7c:43:
                    01:51:dc:5d:3b:95:de:81:9c:87:ad:19:e3:eb:e1:
                    ed:38:5c:e8:34:7a:66:c6:c6:e0:de:d4:49:1d:9c:
                    06:8c:78:31:3b:0c:68:26:79:b7:59:09:32:6f:c6:
                    7a:89:6c:58:35:ca:c6:b2:58:1d:2f:b2:e5:b5:d3:
                    74:d6:97:8b:b5:d5:1c:4e:ce:07:e5:de:2a:bd:bd:
                    19:0f:5c:33:97:f3:a3:a7:62:cf:10:1c:6e:52:a5:
                    16:68:0a:f0:10:34:b0:79:22:12:d8:cb:a6:b1:a3:
                    b8:23:79:31:72:83:16:28:c6:df:ca:4d:86:63:0d:
                    2d:f4:e0:d1:3b:51:16:c0:93:2a:ca:f1:df:35:70:
                    94:e5:a7:9f:84:52:f1:0e:f8:cd:c6:30:34:d3:9b:
                    51:f5:75:b0:40:1d:10:7b:cf:31:9e:d8:ef:75:c9:
                    c4:48:29:17:e5:4e:f4:8f:59:c7:36:3e:e6:2b:81:
                    c2:23:d1:1c:48:a7:9b:a0:5d:2d:6d:fd:e9:23:2b:
                    bf:c1:d7:bc:18:cd:06:a5:cf:e3:dc:66:e7:44:ac:
                    33:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D9:9B:C8:9D:28:3E:F0:E2:E4:71:95:92:39:09:89:22:51:66:4C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145162.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:aa:ff:3a:b0:16:d8:7e:52:38:db:0e:4b:5c:03:1d:32:fa:
         1d:b4:87:82:59:08:e2:40:33:57:8a:31:2c:6d:59:bb:93:20:
         51:2c:f9:97:a6:cc:4d:70:51:ec:4a:b1:f8:a6:68:6f:2a:80:
         c3:01:11:74:d2:87:c3:6e:4a:52:15:0f:a8:41:c4:3e:db:f0:
         bd:41:62:89:2a:76:18:62:de:bb:dc:27:3c:35:b5:2f:72:4f:
         83:a9:c6:69:a5:1f:76:43:c4:c4:7d:82:ef:fc:43:c2:4d:55:
         5f:e4:2a:fb:7f:8c:f9:76:ad:f1:cd:31:e1:6e:6b:36:0c:22:
         55:9f:50:d2:09:82:bf:e4:d5:6b:c8:9e:e3:d3:90:4c:7b:ee:
         10:ea:04:8d:4e:93:d6:62:35:57:e0:9f:c2:8c:36:2f:dc:af:
         ab:82:04:33:15:71:d5:37:a4:63:d3:5a:2b:d4:bc:ff:cb:0e:
         ab:84:fd:ad:d6:2a:41:55:d4:15:9b:0c:62:9f:56:ba:a3:39:
         a9:b1:51:a5:4d:60:f4:da:7b:cd:5e:4d:b5:26:72:99:01:40:
         da:8d:44:9b:80:09:1d:b2:55:e6:43:5c:fa:f8:25:20:19:ca:
         96:42:70:bd:74:7a:3a:6e:7f:da:03:0f:8f:15:17:3b:d4:01:
         2f:ae:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----