Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145287.roa
File:                     AS145287.roa (raw, json)
Hash identifier:          JBuoWDQ44adfaCIVaS76ltCEGNEqJD+sFSg3iwZ/nhY=
Subject key identifier:   7D:BF:C5:37:D1:2F:A1:3C:3D:6C:BE:2D:85:49:BC:96:79:37:F8:8B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6615909A1827BF02CC89517B23319EE97993AB03
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145287.roa
Signing time:             Tue 26 May 2026 02:34:54 +0000
ROA not before:           Tue 26 May 2026 02:29:54 +0000
ROA not after:            Tue 25 May 2027 02:34:54 +0000
asID:                     145287
IP address blocks:        240a:aa4d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:15:90:9a:18:27:bf:02:cc:89:51:7b:23:31:9e:e9:79:93:ab:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:29:54 2026 GMT
            Not After : May 25 02:34:54 2027 GMT
        Subject: CN=7DBFC537D12FA13C3D6CBE2D8549BC967937F88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:b7:b2:f5:70:23:bd:d1:d8:e5:0f:33:db:
                    5a:e6:ff:39:07:19:ed:c3:37:99:89:90:c8:6e:7a:
                    d6:1d:80:ce:f6:2c:76:c6:ca:f8:3d:23:2d:e9:10:
                    e8:70:dc:82:a9:2a:d5:19:3d:9c:f0:7c:d6:51:3a:
                    61:a5:94:88:9d:fc:ce:6c:2d:87:59:72:97:04:46:
                    7a:db:64:6d:ee:e2:1c:14:7a:be:92:12:0c:6a:84:
                    9b:ec:01:9f:26:72:be:7b:54:80:5b:5f:94:0c:39:
                    9d:97:19:38:73:e7:08:12:17:7a:70:4a:c3:e3:9b:
                    54:22:f5:b5:ff:30:4a:39:02:80:17:4a:9e:24:56:
                    ac:7a:c6:15:f0:50:b9:bb:ce:23:e3:c8:27:b9:a7:
                    ab:b9:ac:95:f5:9a:28:5b:9f:d5:0a:e6:5a:81:10:
                    9a:ff:ca:74:bc:9f:1b:e6:de:2a:6a:1d:64:11:38:
                    ab:f5:3d:ba:47:4f:b6:57:71:e8:20:39:08:2b:fe:
                    32:b0:63:46:d6:4b:5b:b0:6e:a1:86:bd:46:77:ad:
                    5b:73:ad:db:02:cf:06:42:80:4a:e2:3d:62:83:a8:
                    1d:8a:cb:f2:4b:a4:e3:2e:f9:47:9c:de:bd:b2:2a:
                    af:97:be:c5:2b:99:33:85:c5:8e:c5:f9:67:7e:ee:
                    4c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BF:C5:37:D1:2F:A1:3C:3D:6C:BE:2D:85:49:BC:96:79:37:F8:8B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa4d::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:08:bf:3b:a5:6f:2e:2d:d0:60:89:46:60:2d:b7:0f:94:df:
         6c:8b:fc:c7:e4:e0:27:64:26:ea:8f:2a:6f:c7:9f:de:13:c8:
         b6:d8:88:50:a5:31:97:61:50:01:be:ca:bc:93:42:6a:5b:e8:
         8e:58:98:9a:26:e0:aa:33:48:0c:3f:8f:22:15:fe:19:37:17:
         d2:54:13:d1:7b:69:8b:be:a2:23:2d:26:a7:c3:1e:77:2a:c1:
         5c:56:6b:eb:74:22:90:a4:71:e0:42:20:f1:df:74:5f:3e:97:
         92:01:d3:07:8a:67:91:66:b1:bd:b7:63:b1:08:20:62:51:54:
         b4:5c:e2:b6:1a:12:29:c4:47:04:77:e1:fe:9f:d1:9b:00:1f:
         f8:fe:83:8c:22:25:1c:96:82:37:23:2f:67:4a:40:be:eb:17:
         11:c2:31:41:bc:ed:74:d4:13:65:4e:0b:5d:49:45:61:39:5b:
         b7:45:92:98:5d:28:c4:bf:6e:58:1d:01:e3:2d:71:4d:ba:73:
         13:41:06:88:b7:6a:ee:81:14:4a:76:73:b3:8d:08:63:bb:b0:
         2d:6c:5d:63:82:44:6e:66:da:15:45:e3:14:7a:33:cf:f6:a6:
         bd:45:6e:6c:17:a9:c3:29:47:cf:ca:c0:2e:f1:fb:2d:1e:3b:
         ff:69:2a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----