Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145292.roa
File:                     AS145292.roa (raw, json)
Hash identifier:          +PjzFyjS/fxWjcb5ysoEubuWD2t718AvLyu4PC5WEKE=
Subject key identifier:   90:2A:04:AF:32:10:76:04:AF:EE:D8:EA:B4:2A:19:26:DF:26:C1:D1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       73940243F958B5CB37783E2D5500F81CA3F1455E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145292.roa
Signing time:             Fri 22 May 2026 07:40:51 +0000
ROA not before:           Fri 22 May 2026 07:35:51 +0000
ROA not after:            Fri 21 May 2027 07:40:51 +0000
asID:                     145292
IP address blocks:        240a:aa52::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:94:02:43:f9:58:b5:cb:37:78:3e:2d:55:00:f8:1c:a3:f1:45:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:51 2026 GMT
            Not After : May 21 07:40:51 2027 GMT
        Subject: CN=902A04AF32107604AFEED8EAB42A1926DF26C1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:7b:8c:a4:e3:47:e1:4c:a4:32:d4:4b:a2:
                    51:17:ee:bb:70:31:74:26:bb:e1:03:b7:c6:8f:db:
                    21:ef:9a:4d:40:13:4d:a8:55:a8:94:d3:95:fb:61:
                    be:e5:f3:9e:16:a7:44:3f:3c:07:3b:d9:72:3e:ff:
                    04:bd:a7:af:55:67:15:52:14:47:33:a1:38:a6:d9:
                    57:bb:27:00:61:df:cc:81:08:a3:df:ce:91:bb:f1:
                    0d:e3:f0:89:29:f1:51:b5:04:96:39:64:eb:a4:14:
                    91:30:55:93:34:0c:c9:68:4f:1d:75:a6:b0:ff:24:
                    f4:b0:24:96:95:75:ca:d9:5a:69:7a:f4:e4:3f:ac:
                    f2:13:42:84:07:87:a9:32:3d:99:55:68:c2:b9:dd:
                    73:62:71:24:c3:2c:c7:b2:ae:f4:8a:4e:b2:f1:1a:
                    3a:3c:a2:ec:56:d8:05:b3:a7:94:28:9f:ce:9a:e0:
                    d1:72:22:c2:2b:e9:8c:ab:90:66:ac:7c:57:63:60:
                    7a:73:b9:84:31:b3:b6:3b:1c:f4:9a:04:96:78:d1:
                    d1:a1:7d:03:16:89:06:14:90:28:d8:81:6b:18:d0:
                    2b:ce:b0:61:d6:c8:9f:9b:23:36:89:93:e0:33:d6:
                    3e:53:fa:a1:5d:fc:b6:d1:27:13:b3:09:ac:d9:78:
                    a2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2A:04:AF:32:10:76:04:AF:EE:D8:EA:B4:2A:19:26:DF:26:C1:D1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145292.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa52::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:d8:28:71:0a:d7:91:3a:a1:0b:75:af:11:f1:0b:3e:cd:de:
         de:f2:11:48:f7:ec:56:29:f8:fe:be:e3:7d:8d:6a:9b:f0:f1:
         a3:3e:c1:33:cd:fc:df:14:e2:eb:b3:71:5e:a6:23:44:b1:35:
         d2:7a:3d:a8:c8:57:81:95:07:6d:f6:28:e5:fd:82:a7:88:91:
         11:14:8d:45:3e:ec:21:c3:75:f1:d2:be:4c:64:39:42:57:3c:
         05:27:89:3c:44:9d:1b:58:08:17:a5:d4:9c:b1:15:13:41:e3:
         36:2d:1a:0f:bb:ba:45:77:22:14:aa:31:23:fe:22:9e:2c:0c:
         92:4c:93:a8:75:a8:35:55:8a:aa:a1:95:6b:f5:10:ff:f9:b6:
         59:e0:e1:64:06:6a:10:5e:b9:06:52:cb:0b:76:34:d5:76:af:
         ea:3a:96:a3:fe:f0:36:d6:3c:f7:39:71:a1:01:91:1a:ae:28:
         71:85:3b:c4:b0:a3:db:a9:4a:59:2f:9b:05:52:47:ea:46:e9:
         9f:36:89:10:0b:3c:6e:72:70:36:df:ab:b5:4d:c5:45:db:f8:
         b8:0f:30:37:46:81:4b:18:eb:0a:d3:b7:20:94:d6:9b:66:bf:
         3d:4c:7d:94:bc:16:5a:c9:5b:81:a5:58:80:dc:75:eb:f8:52:
         49:08:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----