Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145219.roa
File:                     AS145219.roa (raw, json)
Hash identifier:          vBsO2XHhGcUGv+Xje3ijpDPr08OWg/H+B4NvTtZYJzA=
Subject key identifier:   63:95:9E:A4:FE:7F:F5:8B:5C:36:A0:54:01:13:BB:44:C3:EA:EA:4E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7B6036FA3E5DE651D9BE05E369ECE85C80A3B545
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145219.roa
Signing time:             Fri 22 May 2026 04:08:06 +0000
ROA not before:           Fri 22 May 2026 04:03:06 +0000
ROA not after:            Fri 21 May 2027 04:08:06 +0000
asID:                     145219
IP address blocks:        240a:aa09::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:60:36:fa:3e:5d:e6:51:d9:be:05:e3:69:ec:e8:5c:80:a3:b5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:06 2026 GMT
            Not After : May 21 04:08:06 2027 GMT
        Subject: CN=63959EA4FE7FF58B5C36A0540113BB44C3EAEA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:cc:48:9c:9d:db:da:9d:c9:34:6f:b5:70:
                    5a:9b:a7:7a:a6:33:c0:66:24:00:28:bd:c6:61:e5:
                    c1:80:47:9f:ba:ca:bd:35:f7:a0:f8:82:5f:3a:69:
                    7e:9c:a4:7c:b1:9a:a2:c4:c6:c9:7a:6f:90:26:35:
                    6c:9d:91:85:3f:6a:92:64:7d:20:30:bf:d2:4e:73:
                    9d:c2:6c:4e:e6:6c:66:f1:b9:98:50:56:72:f7:23:
                    b5:17:13:73:bf:77:2d:9f:55:f9:fb:33:67:e3:fb:
                    af:18:25:41:4e:b3:13:8b:24:32:1d:90:82:17:0b:
                    c6:b2:c3:7b:07:a0:e0:9f:66:30:7a:ff:53:25:bc:
                    23:d3:e0:f7:74:10:1d:f3:ec:7f:9d:dd:41:70:67:
                    39:e5:1a:68:b2:59:8f:a3:c7:48:4b:e7:e6:29:7e:
                    11:18:67:d6:7f:3e:d5:4e:6e:b0:3c:c1:b5:f5:72:
                    5d:15:43:33:f3:2b:e5:5f:1a:28:61:cf:83:a6:70:
                    bf:77:4d:42:1b:86:e4:56:a0:8d:cd:78:08:6e:49:
                    19:0c:23:c0:3d:48:97:a1:b3:b2:30:43:6b:a1:ad:
                    a8:20:a8:fb:b3:6e:c7:1d:85:51:26:2f:1e:0c:6f:
                    81:9e:67:00:4b:fb:16:a1:65:42:bf:23:4a:3e:7e:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:95:9E:A4:FE:7F:F5:8B:5C:36:A0:54:01:13:BB:44:C3:EA:EA:4E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145219.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa09::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:e9:b3:0b:f5:a9:d4:ba:1b:6d:48:51:c5:0a:80:92:9e:cf:
         76:3e:9a:63:6b:e5:17:5a:e4:88:ff:7d:0d:f1:92:bd:ae:3c:
         a0:47:19:94:10:31:81:ce:b0:a7:88:d0:64:45:7a:6c:f4:e7:
         1c:0b:69:4e:2e:7f:51:79:c1:96:dd:4e:af:b6:e4:4a:49:94:
         44:2d:66:79:20:69:80:ac:29:bc:48:1f:a4:a3:83:ac:55:7c:
         cb:0e:69:38:50:1c:14:c4:0d:4e:3e:56:52:22:64:c5:25:d3:
         8c:3a:ed:15:32:02:84:ac:c0:74:7a:0c:f4:82:e6:b1:54:c3:
         a2:b5:6b:45:19:59:81:f8:34:3c:7d:83:7c:05:54:36:fb:1e:
         e3:e6:59:53:70:97:03:6a:84:c5:1a:0d:01:36:45:05:df:75:
         0d:f4:a0:8f:e0:35:f0:a3:9d:ac:11:98:e0:ec:d3:b8:68:68:
         a0:5c:db:bc:20:39:eb:14:64:70:de:0a:d1:c7:c3:9c:33:bc:
         a4:b3:88:85:42:78:84:0b:88:48:13:90:dc:a9:28:da:08:d2:
         57:a8:7a:3b:a9:24:2c:17:d2:96:ee:34:93:fd:a2:a7:d9:e8:
         8d:15:ab:c8:6d:16:69:04:14:15:76:75:3f:71:ae:f2:96:12:
         e5:d4:4c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----