Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145230.roa
File:                     AS145230.roa (raw, json)
Hash identifier:          O2Qk94wzB2O3obKihTV2wuxqz+4q5/ZhnpJV5+rVouw=
Subject key identifier:   11:63:3D:ED:24:BF:16:F6:F4:B7:69:15:4B:6F:B6:51:F5:02:E8:53
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       190ABA01230459B6C921D8E3057BE7AEF737ACF9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145230.roa
Signing time:             Tue 26 May 2026 06:30:31 +0000
ROA not before:           Tue 26 May 2026 06:25:31 +0000
ROA not after:            Tue 25 May 2027 06:30:31 +0000
asID:                     145230
IP address blocks:        240a:aa14::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0a:ba:01:23:04:59:b6:c9:21:d8:e3:05:7b:e7:ae:f7:37:ac:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:31 2026 GMT
            Not After : May 25 06:30:31 2027 GMT
        Subject: CN=11633DED24BF16F6F4B769154B6FB651F502E853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ef:8c:f1:b5:3c:8a:b8:d6:df:c7:26:cc:96:
                    1d:11:3d:b3:bb:6b:67:7a:23:2e:14:8b:77:43:1f:
                    84:37:02:f3:ba:a7:b7:6a:f2:ed:7c:c1:69:3e:b2:
                    cc:e1:76:78:93:0e:31:d5:5e:db:ca:18:bb:89:8a:
                    1c:f7:7f:ec:04:15:36:b9:00:6d:84:81:61:e6:34:
                    54:99:84:77:46:20:da:19:91:10:da:f1:50:f0:68:
                    58:43:0e:e8:bb:07:82:7e:ee:07:29:67:39:11:9d:
                    04:8f:01:fe:0b:c4:08:4d:05:8c:07:06:d7:e4:0a:
                    41:6d:7d:23:c2:84:54:c6:75:ad:aa:4e:a6:f6:b1:
                    62:7f:c1:76:54:6a:f3:a2:1d:e8:a4:48:2d:c6:f6:
                    f8:af:81:17:45:60:6a:90:64:77:c3:2c:02:d0:18:
                    4e:8a:1c:d5:5c:e6:f4:83:1f:a4:89:f8:c1:51:a0:
                    60:a1:56:0f:4a:8a:88:e2:4e:36:93:1e:b0:73:97:
                    34:0f:c2:d7:7e:73:48:d4:b5:c8:94:a1:33:cd:08:
                    2c:fd:64:95:27:3c:e6:72:1e:71:13:71:91:f1:8e:
                    ba:b5:7b:59:a7:2d:d6:22:67:f3:75:4a:67:6a:f9:
                    c0:79:75:c6:60:84:ca:a3:1c:d4:56:2a:49:01:77:
                    69:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:63:3D:ED:24:BF:16:F6:F4:B7:69:15:4B:6F:B6:51:F5:02:E8:53
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa14::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:db:7e:72:3f:8e:03:85:47:ae:a5:98:92:7f:72:35:30:f9:
         59:99:ff:76:0f:b1:07:f4:9f:13:82:45:74:c2:fe:61:28:9f:
         15:a1:8a:c6:50:e1:ea:ea:70:9d:c7:89:a1:e4:22:61:07:5d:
         97:50:09:fc:30:4f:37:4e:5d:55:48:51:14:57:4c:14:5e:95:
         d1:ea:44:d0:24:e6:b4:18:a9:e5:a6:17:10:3c:10:46:60:c8:
         7c:a9:93:69:a6:74:43:3e:8d:66:66:b7:3f:28:b6:87:9b:c4:
         96:db:5b:9a:8a:24:8b:eb:93:2f:b0:4a:1b:77:3d:85:18:ae:
         6b:af:b5:eb:92:30:d6:6d:e8:01:c1:db:fd:60:7b:47:e7:65:
         79:d8:09:16:5c:c9:9a:30:a7:e9:b3:77:16:e1:33:56:fd:ea:
         bb:a3:05:ff:3b:ed:88:52:4a:5f:74:d4:93:16:cd:81:be:cb:
         32:3c:5f:e8:aa:d5:9f:a4:9d:99:7f:ec:57:36:0d:c8:05:00:
         88:3c:c5:be:e6:4c:ac:f3:f4:e0:fd:f7:96:38:84:37:e2:c6:
         0d:94:b8:22:a6:57:ee:d9:36:43:25:47:d8:8e:05:26:6e:be:
         9b:5d:29:5f:48:9e:f4:a7:c2:f4:56:06:dd:80:37:07:55:d1:
         27:79:89:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----