Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145217.roa
File:                     AS145217.roa (raw, json)
Hash identifier:          r1YLK6P3w9lMIUfX6C0DUDL/XjR/5tFdQAiswR+NYu4=
Subject key identifier:   95:0B:7A:F8:D4:FD:E1:51:1C:DD:CD:AD:DD:E7:81:7F:07:54:43:44
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7625D5AF54E2F74033939BD49930245828956FC9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145217.roa
Signing time:             Mon 25 May 2026 06:49:08 +0000
ROA not before:           Mon 25 May 2026 06:44:08 +0000
ROA not after:            Mon 24 May 2027 06:49:08 +0000
asID:                     145217
IP address blocks:        240a:aa07::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:25:d5:af:54:e2:f7:40:33:93:9b:d4:99:30:24:58:28:95:6f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:08 2026 GMT
            Not After : May 24 06:49:08 2027 GMT
        Subject: CN=950B7AF8D4FDE1511CDDCDADDDE7817F07544344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3b:83:c1:85:c9:15:b7:3b:db:73:b4:0c:1d:
                    be:ed:a9:4a:13:57:c8:46:91:aa:5f:59:82:de:47:
                    e0:ae:46:3a:fb:3f:f8:91:85:c7:1f:1e:37:ee:ec:
                    06:ae:a5:c5:34:95:c1:7a:88:d7:4b:06:d3:de:a2:
                    fd:2b:68:81:a6:fd:25:35:b3:3f:47:b2:2f:fb:38:
                    56:cf:60:99:72:fb:ff:1f:1f:8d:62:3e:1c:fb:ee:
                    27:6f:13:0a:68:c8:24:26:a1:56:b5:d3:fb:ea:c2:
                    39:c4:c9:fb:9f:29:66:fb:21:e7:5e:bb:4c:46:07:
                    15:5e:86:43:cb:a1:d9:a3:b7:10:ed:f5:0a:dd:d1:
                    5f:93:ef:8e:ba:77:95:5b:1c:f7:0c:9f:ac:15:c6:
                    f6:e8:3d:05:20:df:82:60:bc:e1:64:68:aa:47:13:
                    f5:64:73:16:af:42:51:d1:a4:9f:37:8f:15:1d:cc:
                    fc:11:23:e6:26:44:68:8b:d3:fc:bf:02:f4:8b:6e:
                    5b:7a:61:8d:64:4a:cc:11:fb:7a:63:41:fa:31:e3:
                    ec:83:6b:95:41:7f:6b:09:ac:34:4f:a5:66:be:f4:
                    e7:d7:4d:6e:8c:97:c9:c4:7e:69:ac:da:00:4a:6f:
                    0c:3d:0a:5b:af:26:99:9b:1d:b0:0e:65:e0:07:1c:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0B:7A:F8:D4:FD:E1:51:1C:DD:CD:AD:DD:E7:81:7F:07:54:43:44
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145217.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa07::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:d6:4a:2a:11:12:93:fb:ee:38:dc:c8:a2:45:8a:8f:bb:9f:
         c7:83:95:0f:8f:50:ae:28:cd:bd:8f:09:c1:8f:c7:c2:20:95:
         61:22:d3:57:b8:d0:ac:a4:bb:fb:35:3b:26:7a:e6:8b:b0:f9:
         8c:be:e6:a3:4c:c2:27:dc:c7:36:a3:24:55:fb:60:d4:83:74:
         02:a8:9f:3a:a0:3e:f2:3e:4c:2f:85:a3:ab:44:e9:e1:a0:44:
         63:a8:f1:cf:54:af:fc:e9:30:bf:22:62:be:f0:79:3c:7c:2c:
         b3:a2:e1:c1:38:12:ee:a5:f0:98:41:e0:20:1a:20:f6:55:10:
         11:6b:b9:63:4b:fb:a7:1d:a3:fc:77:8c:67:64:6b:0d:c6:f4:
         fd:3e:99:e0:73:e3:38:1c:f4:3f:3e:15:e3:2e:77:87:6d:28:
         0f:5b:3d:2e:e3:6b:90:09:b9:bc:db:33:71:fe:25:23:c4:19:
         a4:9e:7d:bf:c4:89:70:2f:09:da:84:ed:bc:06:57:aa:fa:e2:
         80:8f:19:ae:ff:3c:9c:70:d0:cb:aa:bc:e5:25:b1:8d:a8:e6:
         3d:3f:c4:1c:13:39:1d:b9:2e:82:77:77:5d:35:d2:67:cd:7b:
         cd:07:a2:24:4f:dd:06:b7:cf:24:b9:d8:e2:9b:fb:27:e9:72:
         fd:0e:45:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----