Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145204.roa
File:                     AS145204.roa (raw, json)
Hash identifier:          Ylg1dq3+DnOxovXARpLAs/76K5ayrebJIjavjNvzSJ0=
Subject key identifier:   89:1C:83:E2:6D:4B:A0:B7:4D:20:E3:51:8B:67:E3:CA:05:CF:AE:3E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       354D7A14EA9AE4806A5903E5FF6C8444AEF6110C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145204.roa
Signing time:             Fri 22 May 2026 06:05:32 +0000
ROA not before:           Fri 22 May 2026 06:00:32 +0000
ROA not after:            Fri 21 May 2027 06:05:32 +0000
asID:                     145204
IP address blocks:        240a:a9fa::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4d:7a:14:ea:9a:e4:80:6a:59:03:e5:ff:6c:84:44:ae:f6:11:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:32 2026 GMT
            Not After : May 21 06:05:32 2027 GMT
        Subject: CN=891C83E26D4BA0B74D20E3518B67E3CA05CFAE3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:a9:4e:45:62:f5:12:92:b5:53:4f:5e:c1:
                    92:45:8d:a4:ed:2e:66:fe:f1:da:af:5d:c2:72:dd:
                    81:de:36:3b:34:20:17:4a:a0:ab:d8:d4:30:30:c2:
                    76:f8:e6:a0:9e:98:ac:7d:13:67:50:71:80:46:02:
                    e4:12:48:a5:50:9b:e5:af:15:ca:64:cc:28:11:4a:
                    d1:d7:30:fc:9d:38:a4:75:8a:da:cc:b1:b9:47:2a:
                    fc:7b:e8:8b:de:73:71:e1:09:e4:ed:2d:ee:df:62:
                    a8:ca:8b:6f:a7:c7:8f:dc:86:d8:35:f8:4e:29:a9:
                    17:fc:f1:64:ee:f6:e9:5c:9d:89:40:6e:26:71:7f:
                    6c:ec:22:3d:c0:ac:61:16:0c:fb:50:ad:6a:b0:47:
                    0f:b0:99:01:fb:5a:ac:e9:dd:aa:ee:b7:f1:e1:54:
                    37:50:ce:7b:53:e4:9f:fe:14:3b:ed:88:c9:09:47:
                    0a:77:e3:60:f6:0a:37:9e:91:ab:73:44:28:2b:23:
                    d3:d1:03:7b:56:3c:b4:c2:de:c1:1e:06:b8:a0:95:
                    b8:2d:3e:b4:40:52:98:6f:13:e5:75:c9:a4:77:37:
                    e6:3c:a2:02:4b:5f:89:36:cb:e4:71:01:ff:25:93:
                    2d:be:53:ac:d5:66:fd:ba:13:3f:d4:e6:3d:53:a6:
                    b7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1C:83:E2:6D:4B:A0:B7:4D:20:E3:51:8B:67:E3:CA:05:CF:AE:3E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145204.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9fa::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:6f:73:8d:37:83:fc:55:42:2a:3b:ec:7c:b8:e3:8d:bd:d1:
         49:28:9e:2d:2f:88:81:82:8b:d3:40:17:3f:5b:39:bc:95:8e:
         8e:76:a6:80:75:bc:84:6d:88:66:32:6b:c3:ce:c1:36:23:d8:
         86:98:fb:de:63:ca:75:1d:12:6c:24:8a:09:47:29:18:0a:fa:
         a8:3f:8c:79:be:26:d8:2a:57:8a:cd:72:d1:33:b0:09:d7:06:
         c0:d5:ba:6b:91:67:5d:84:9d:62:69:49:f3:99:1b:7a:63:c4:
         82:87:1a:f6:7f:68:be:91:de:e8:a0:47:25:dc:32:6a:f8:b3:
         0b:4c:1d:38:04:e8:6b:55:6c:00:ce:82:9b:d1:59:79:b6:0a:
         94:19:30:15:f9:fa:e2:05:a8:1e:ff:8f:4f:1b:71:15:4d:db:
         ba:db:1e:8d:d2:3a:9a:43:3b:9d:b5:ca:2d:fd:db:b4:d7:85:
         bd:a0:16:f1:76:6e:00:87:d0:47:7e:8a:c9:8f:c7:be:2d:a1:
         95:7f:78:62:f3:4e:97:a9:f2:d7:a5:20:82:7f:76:c3:19:37:
         38:99:6e:5a:44:01:9d:00:34:d5:df:2a:d6:cd:5c:62:c4:9e:
         57:4e:ff:b9:de:e8:e0:58:34:e9:64:7c:89:ff:6c:df:41:cb:
         41:6f:58:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----