Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145294.roa
File:                     AS145294.roa (raw, json)
Hash identifier:          pWNh3hQZHoZwA4JMPXfPro2zJq8szOUGOD6b6xedt4k=
Subject key identifier:   92:20:BE:16:E8:C0:C4:9A:B1:11:45:1D:61:57:7D:87:3F:3C:EF:7A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       28F8EF2A3B4C40714BAA621291DD2CEDE7A7F85C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145294.roa
Signing time:             Fri 22 May 2026 07:24:38 +0000
ROA not before:           Fri 22 May 2026 07:19:38 +0000
ROA not after:            Fri 21 May 2027 07:24:38 +0000
asID:                     145294
IP address blocks:        240a:aa54::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f8:ef:2a:3b:4c:40:71:4b:aa:62:12:91:dd:2c:ed:e7:a7:f8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:38 2026 GMT
            Not After : May 21 07:24:38 2027 GMT
        Subject: CN=9220BE16E8C0C49AB111451D61577D873F3CEF7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:42:b1:8b:f4:aa:c2:5a:a8:52:29:05:10:
                    bb:bc:55:45:89:da:7d:01:63:16:cd:42:46:d7:50:
                    73:ff:e1:6b:9f:95:c6:99:3c:ba:94:02:7d:51:83:
                    e0:7f:fc:3b:14:fe:e9:f0:7e:c5:da:0a:23:03:ff:
                    9e:c6:48:95:4b:95:a3:02:ac:3a:73:05:8f:70:98:
                    0d:6d:7f:ff:fb:61:97:a2:f2:12:83:87:43:a4:2f:
                    b1:9b:1f:94:22:e7:fe:b3:61:f7:1b:0c:15:ff:e7:
                    3b:a7:15:de:3e:b6:7d:bd:c2:c2:57:90:c8:08:eb:
                    8a:10:ea:48:1f:b5:90:22:d0:84:44:e8:7a:45:1f:
                    fe:dd:9b:e6:0b:af:6b:ea:40:be:a5:94:fa:26:d3:
                    0b:a3:49:d6:a4:93:ec:b1:84:87:24:6a:96:1a:4c:
                    57:08:78:07:1d:16:6d:4b:a7:1c:ee:2b:c4:f4:ca:
                    1d:7e:f7:e9:55:aa:59:dd:be:5c:eb:62:89:72:44:
                    3c:56:d2:5b:f6:d7:ff:6e:92:a6:f2:ba:c1:af:fd:
                    b9:bc:da:54:a7:91:47:36:ea:e0:fa:1a:31:52:8c:
                    72:9e:66:c2:d5:5b:04:2d:5f:87:19:85:c0:dc:09:
                    be:78:f3:6a:a8:5c:4f:97:c4:dc:22:df:bf:5d:a4:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:20:BE:16:E8:C0:C4:9A:B1:11:45:1D:61:57:7D:87:3F:3C:EF:7A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa54::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:a5:c7:72:b9:e6:9a:15:d4:1d:c0:3f:7a:94:ec:5b:5e:ba:
         70:72:3c:3d:2a:a2:1d:36:9b:76:4b:08:a2:de:e4:16:4b:a8:
         8f:44:98:45:a9:14:d8:be:b3:54:cd:b3:25:85:0d:6b:6d:b9:
         6a:4c:14:35:13:cc:99:e1:d2:c4:c3:38:4a:31:43:de:7f:3a:
         2a:4c:2e:fb:7b:68:3a:36:a9:c2:74:04:be:98:74:54:f3:3d:
         7b:9f:92:ce:4b:fc:cc:3b:3f:b5:24:12:06:ef:29:93:50:44:
         f8:43:d6:4e:91:60:46:fe:de:50:a6:13:a3:40:d2:e0:08:f2:
         ca:d6:ec:f9:88:6c:7d:fb:ea:df:25:67:b9:39:be:ae:94:07:
         63:1c:d0:ec:4a:b4:4d:5a:7b:69:c4:d4:46:67:1b:09:43:16:
         77:d4:55:8f:68:30:8e:4d:04:97:b2:a2:b2:c4:89:01:a4:a0:
         1d:81:d5:d4:c2:22:ef:77:c3:7b:a9:39:ce:f8:e7:e7:a9:0a:
         01:5d:06:61:cf:1d:fd:9b:2c:2e:d7:be:cc:f7:a8:77:c9:6b:
         7f:77:52:e9:a0:e4:b6:a7:12:ce:23:34:3d:1f:c1:8f:92:e2:
         3c:99:55:62:bb:7b:6f:5d:2b:65:f8:62:54:f7:46:90:7d:57:
         f4:d2:7f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----