Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145293.roa
File:                     AS145293.roa (raw, json)
Hash identifier:          vlt9s8kGvANbzhYgw5PWwnIb2Qq0VHTR9shx3HhVtdQ=
Subject key identifier:   DD:C5:4A:41:63:A5:DE:C5:4D:B2:1C:2E:BF:95:93:D6:43:CA:34:A1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1808F8FFD89404D62BA68EE0651C7790086E4896
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145293.roa
Signing time:             Fri 22 May 2026 07:41:00 +0000
ROA not before:           Fri 22 May 2026 07:36:00 +0000
ROA not after:            Fri 21 May 2027 07:41:00 +0000
asID:                     145293
IP address blocks:        240a:aa53::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:08:f8:ff:d8:94:04:d6:2b:a6:8e:e0:65:1c:77:90:08:6e:48:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:00 2026 GMT
            Not After : May 21 07:41:00 2027 GMT
        Subject: CN=DDC54A4163A5DEC54DB21C2EBF9593D643CA34A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:5e:b2:6c:6d:23:36:0b:6c:10:10:30:66:
                    cf:b3:c3:f7:e2:94:57:dd:3c:a4:db:08:78:c0:57:
                    f2:46:8a:dd:dd:72:16:2d:79:ab:5b:ef:c5:bc:a3:
                    5e:28:57:22:d6:c9:a5:38:51:fd:91:a5:57:79:e9:
                    fa:8b:87:8e:77:f7:3b:f5:c3:30:76:fd:6d:95:e3:
                    bc:6e:55:a2:29:41:dc:25:51:2b:11:6e:73:69:3c:
                    7d:92:5b:e6:19:43:a4:47:fe:e6:32:f6:8d:5d:67:
                    62:14:b6:12:da:a6:d7:fb:57:fc:36:98:9a:1b:fe:
                    3b:50:48:18:36:3d:e8:ce:da:50:14:2a:15:af:83:
                    ce:f5:0d:8f:ac:37:62:c6:4f:ff:db:1d:cf:3b:66:
                    82:99:f9:e6:0b:5a:e7:6f:21:28:c5:da:8e:c0:56:
                    5d:04:d3:4a:99:51:57:0e:8d:c3:34:b6:01:5f:18:
                    08:35:99:33:c4:2a:4b:cb:00:4b:01:c6:00:ec:d2:
                    26:ba:3f:b6:90:ef:98:23:05:4a:c3:57:1d:ce:21:
                    79:80:56:b5:a7:e5:a8:7e:94:34:bf:5b:ea:3d:5d:
                    59:30:7a:f5:34:64:e9:1c:c7:c9:fa:1d:19:d7:54:
                    a4:cc:04:0a:f2:12:1b:65:93:66:e1:8f:49:d2:94:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C5:4A:41:63:A5:DE:C5:4D:B2:1C:2E:BF:95:93:D6:43:CA:34:A1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145293.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa53::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:67:2b:a8:49:f9:bb:0e:9a:09:1a:54:57:ba:1a:16:5d:e6:
         c5:62:ea:67:40:c5:26:70:88:9c:e2:de:97:ee:3d:fb:6e:b4:
         83:00:3d:66:97:9a:23:09:d1:24:42:53:06:ba:f5:fb:9e:31:
         03:43:58:64:58:9d:b4:64:dc:6a:65:6e:fe:f5:5c:44:03:09:
         97:af:c6:0a:63:26:03:ba:f3:ea:87:8a:79:2f:8b:94:d4:8d:
         ac:76:bc:52:c1:42:af:df:9f:47:13:27:fe:ae:e1:07:4c:e7:
         6f:0c:94:33:19:7d:2c:94:fa:48:fc:d7:85:80:ea:be:d6:7d:
         c5:45:ea:5a:cc:60:57:1f:06:12:d4:cd:92:81:e5:5b:f1:3f:
         50:5d:e2:6c:b3:70:dd:54:7a:00:99:c0:88:47:aa:36:45:07:
         95:ce:e3:8b:de:d6:fb:17:ec:a2:9e:31:df:d6:bf:0b:98:4c:
         d4:98:07:0f:7d:5a:dc:72:7d:af:f6:6f:5c:79:f2:b4:b2:32:
         b8:e2:7a:3b:70:d9:dc:b6:67:02:7e:c8:d8:b2:3a:64:cd:00:
         19:9a:cd:8d:01:91:40:a5:dc:3b:1e:87:12:0c:df:f5:e4:07:
         17:8d:d6:78:87:4c:0b:86:a4:07:30:4b:2d:b4:81:50:d9:f4:
         42:e4:5a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----