Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145285.roa
File:                     AS145285.roa (raw, json)
Hash identifier:          +K5/NRDiOuP+38nQtnA13HBxK/u6LOVwqVmWCxKAJnw=
Subject key identifier:   47:88:4C:85:7F:53:EC:1B:D1:78:82:4E:DA:03:2C:E6:E6:EF:35:7A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       796C0603F284A8CA0C73B791AFA616B3A01A4D20
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145285.roa
Signing time:             Mon 25 May 2026 03:19:46 +0000
ROA not before:           Mon 25 May 2026 03:14:46 +0000
ROA not after:            Mon 24 May 2027 03:19:46 +0000
asID:                     145285
IP address blocks:        240a:aa4b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6c:06:03:f2:84:a8:ca:0c:73:b7:91:af:a6:16:b3:a0:1a:4d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:46 2026 GMT
            Not After : May 24 03:19:46 2027 GMT
        Subject: CN=47884C857F53EC1BD178824EDA032CE6E6EF357A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:46:9d:bb:0d:04:96:58:b9:55:bb:8e:11:
                    75:7e:bb:d0:8d:96:da:25:94:11:06:33:07:a6:2a:
                    4f:88:55:98:23:d3:33:be:d8:5d:93:ca:9c:14:91:
                    66:f8:7e:83:54:85:f5:f8:0c:ab:48:47:a7:02:e5:
                    df:94:67:1b:c7:c3:5a:a4:70:84:f1:43:a8:dd:4a:
                    a1:f7:0e:a7:1c:19:52:ea:48:a6:07:fa:f7:7d:e0:
                    94:c6:5e:11:a8:5e:6a:4b:d5:98:15:82:44:cd:08:
                    ad:f3:27:8e:64:53:96:25:cd:c6:ac:8b:84:1e:37:
                    48:8b:51:8f:59:d4:f1:b4:d6:43:a0:a7:3f:03:54:
                    cc:69:49:e9:d9:e1:cb:48:c7:ad:cd:cc:bd:3b:52:
                    c8:22:74:74:57:f1:b6:00:3e:a1:b6:91:16:ab:aa:
                    84:59:ff:3c:ca:91:b6:74:e6:e9:9e:29:df:e8:df:
                    58:1d:5d:6a:fb:c7:b1:fc:b1:77:3f:42:3d:b2:64:
                    0a:b8:e2:ef:96:d7:55:84:e0:37:77:da:60:6e:52:
                    bc:c8:9c:18:41:c2:c9:ef:15:cb:1e:6e:67:d3:47:
                    ba:e1:fd:d5:06:c4:8e:23:7c:b0:24:9e:75:e6:d9:
                    ce:40:dd:27:82:cf:c8:0f:b7:ad:0b:31:27:a5:c7:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:88:4C:85:7F:53:EC:1B:D1:78:82:4E:DA:03:2C:E6:E6:EF:35:7A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145285.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa4b::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:6c:d7:c8:76:58:6f:fb:24:42:7a:1b:d4:05:d0:95:c9:
         1e:05:fa:23:f1:76:96:41:c6:04:cc:42:3a:0c:e0:bd:5b:6d:
         53:0c:ff:2e:a6:3a:a9:6b:83:d0:60:b5:21:29:a0:ab:f1:49:
         57:d4:37:e7:4a:dc:80:99:ff:a0:1e:c0:e2:2e:fe:a7:bc:13:
         9a:f1:a9:58:3e:5f:e3:ff:0a:71:77:37:32:b6:04:da:82:db:
         99:06:64:a8:db:8c:5e:a8:0f:e7:6f:6d:4d:0d:03:d5:65:43:
         5a:39:b4:cc:36:6b:93:78:08:e6:56:ee:3b:bb:fe:0e:9a:fd:
         59:f0:8f:d5:c2:88:19:74:19:75:2a:68:a2:c1:69:0b:ef:7e:
         ce:de:96:53:f5:39:98:14:2a:cd:bb:21:b6:d7:cc:ce:7e:29:
         1f:a8:4f:6f:ca:a9:af:da:ef:86:e8:7a:1d:e0:0d:a5:cb:68:
         2f:aa:90:f0:04:d9:6d:e1:59:23:83:b8:5b:f4:3a:21:6f:5e:
         0b:92:f4:d4:5a:31:c1:8e:64:87:d5:9e:9e:15:06:ea:c1:24:
         c7:b0:8b:15:4a:bf:88:0a:65:f0:79:f2:b6:16:c5:97:bd:e4:
         ab:2c:1f:8f:02:a1:03:72:a1:cc:15:b9:84:ac:d2:37:b6:24:
         60:76:6e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----