Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145279.roa
File:                     AS145279.roa (raw, json)
Hash identifier:          aQxSFWZQhcoBoYz+OVeX9TAN8Gyne+cfdsl3to1GguM=
Subject key identifier:   5A:2C:D2:4E:1F:2C:BD:16:E3:6F:1C:E8:60:95:B5:FA:18:E3:35:B1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0C8B74007D2122EEDD2B9B6682EDAAE0B5B477E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145279.roa
Signing time:             Tue 26 May 2026 06:12:25 +0000
ROA not before:           Tue 26 May 2026 06:07:25 +0000
ROA not after:            Tue 25 May 2027 06:12:25 +0000
asID:                     145279
IP address blocks:        240a:aa45::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8b:74:00:7d:21:22:ee:dd:2b:9b:66:82:ed:aa:e0:b5:b4:77:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:25 2026 GMT
            Not After : May 25 06:12:25 2027 GMT
        Subject: CN=5A2CD24E1F2CBD16E36F1CE86095B5FA18E335B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:88:6c:0a:67:89:86:68:bb:af:5d:fa:a9:
                    27:a8:38:77:41:7a:64:82:08:72:9c:e5:4a:9f:e3:
                    6b:28:7c:07:23:43:e8:bc:01:46:0a:9f:d9:26:e5:
                    97:c3:96:d2:16:5d:4b:2f:59:2a:de:84:23:31:b7:
                    60:8e:3e:48:e8:e1:2c:5a:89:1e:a6:e3:3f:97:c3:
                    d2:68:2f:ad:b0:09:da:70:7d:79:f1:0e:c6:f1:36:
                    56:62:62:38:54:a4:22:e3:82:10:80:e5:7a:02:73:
                    54:47:62:3a:20:88:3a:b4:b3:d1:ec:5b:52:00:4a:
                    cc:42:4a:7e:9f:1a:26:ce:fa:63:cd:41:07:9d:0f:
                    4c:58:02:5e:5f:7f:d0:44:3c:f7:90:ce:7c:25:47:
                    74:da:dc:5e:39:92:d3:31:03:1b:e9:a2:5e:a1:b5:
                    98:97:31:34:0c:66:14:a4:95:7f:3b:33:57:65:f4:
                    b6:50:39:d6:4d:5c:aa:47:65:64:d4:e7:d2:b0:c2:
                    5c:d1:5e:93:c8:cb:ef:9b:5f:4d:e3:c5:79:37:f0:
                    cb:bf:3f:b9:ab:f4:7b:f0:2e:02:25:f1:fc:10:44:
                    d2:dd:55:c7:2c:3c:57:5f:9a:3e:73:0e:0b:3d:16:
                    f7:8a:20:b2:69:55:2d:00:2c:75:61:e3:07:b6:4b:
                    13:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2C:D2:4E:1F:2C:BD:16:E3:6F:1C:E8:60:95:B5:FA:18:E3:35:B1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145279.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa45::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:97:4e:db:76:19:89:2a:53:39:33:57:b0:de:1e:c8:8f:e5:
         85:1e:f2:d2:5b:d5:59:0f:cd:d0:8a:b0:2e:33:c2:56:3b:ac:
         6b:02:a9:3f:a4:60:7e:9f:36:34:bc:f9:00:7b:11:e3:38:df:
         e3:fb:62:df:8d:54:fe:d7:00:6f:f4:a7:8d:a7:ca:69:18:09:
         27:ca:aa:99:dc:25:92:75:cb:93:54:0a:96:76:b6:9f:25:93:
         52:43:b3:a8:d7:b4:1b:fd:34:44:1e:d4:8d:4d:26:91:98:39:
         9b:ff:b9:55:fc:05:3a:de:6f:0b:1a:b7:54:70:c2:89:98:ae:
         4d:60:03:6d:f1:c3:79:44:2d:66:f4:f1:29:a5:bb:a0:c3:e9:
         b4:93:e2:cb:ea:be:46:d3:90:49:33:6b:43:2d:4b:5b:05:65:
         49:d2:8d:a8:b6:17:f2:6d:44:33:fb:7a:bd:6e:f7:6f:77:59:
         43:4e:fb:a1:b4:fe:8f:75:09:67:8d:7c:ff:9e:03:3b:57:0b:
         4c:aa:18:b7:1d:8b:c0:a1:6b:73:b6:be:45:a8:5a:87:f5:54:
         00:bd:1e:bf:a6:c8:8f:37:9f:65:48:f8:97:da:1c:bf:ac:88:
         51:b7:ad:38:42:5e:53:6b:ad:60:f9:36:cf:2f:2d:22:6e:32:
         cf:5a:ce:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----