Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145310.roa
File:                     AS145310.roa (raw, json)
Hash identifier:          0Nf0GAUvVGpgvPu1K4bFOE9uWg7J6ha4xbjI47tXEHU=
Subject key identifier:   33:0A:CF:65:C0:BB:58:1C:F8:12:DA:53:54:CA:83:8A:6F:47:82:44
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3D010C98FDF38A0E3FB4DDA9FD84998773233372
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145310.roa
Signing time:             Mon 25 May 2026 03:19:07 +0000
ROA not before:           Mon 25 May 2026 03:14:07 +0000
ROA not after:            Mon 24 May 2027 03:19:07 +0000
asID:                     145310
IP address blocks:        240a:aa64::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:01:0c:98:fd:f3:8a:0e:3f:b4:dd:a9:fd:84:99:87:73:23:33:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:07 2026 GMT
            Not After : May 24 03:19:07 2027 GMT
        Subject: CN=330ACF65C0BB581CF812DA5354CA838A6F478244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:13:c4:23:3c:a0:fe:4d:a2:49:48:50:3d:
                    81:bf:8c:56:e8:56:bf:52:41:dd:a2:1d:66:47:46:
                    28:c2:73:49:06:58:df:73:e6:5a:ff:ad:ec:23:32:
                    e0:9c:d9:dd:89:43:2d:c3:15:eb:f3:88:2d:ad:56:
                    18:9f:99:a7:68:71:1a:74:d6:5d:cb:41:5d:c4:7d:
                    ad:2a:66:5c:3a:73:0c:ba:db:00:39:9e:77:43:0f:
                    a9:d9:23:a6:97:68:28:01:8b:56:29:c7:38:01:38:
                    6a:2e:8d:57:cb:f3:e0:45:a7:f3:d7:0b:cd:c6:0e:
                    03:d5:dc:34:ff:3e:fd:4d:47:57:ca:96:45:f4:7c:
                    6b:20:2e:06:c1:00:b1:24:ee:7b:84:9d:97:61:00:
                    4b:fe:ae:fc:bf:ac:89:c3:a7:2f:ab:10:01:e1:e1:
                    c5:00:56:ac:39:9a:e7:7b:cd:2a:d6:50:d7:50:9c:
                    0b:b4:97:75:39:54:8f:49:02:3d:2f:40:dd:a4:5b:
                    8c:c4:9d:24:ef:8e:73:88:a1:7e:a4:1b:c3:9e:26:
                    f5:2b:dd:42:ba:1d:8b:b2:f9:5d:50:5f:43:fa:7b:
                    10:f5:dd:f4:e9:b2:0e:ab:da:c0:d3:42:a1:20:76:
                    6b:96:ec:89:ec:c7:1b:54:ea:9b:e4:33:9f:9f:dc:
                    b7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0A:CF:65:C0:BB:58:1C:F8:12:DA:53:54:CA:83:8A:6F:47:82:44
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145310.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa64::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:d0:7d:f3:ca:b6:88:bc:9a:9e:49:45:c6:03:49:ef:b6:fb:
         14:2f:b6:f5:29:ca:f4:ff:4a:02:3f:f1:13:f6:60:27:4b:45:
         ac:0f:fc:9d:e2:11:f2:af:06:bd:ed:5d:76:bf:6c:0a:66:c9:
         fb:11:f7:45:c1:9f:d8:db:8f:54:ee:1d:84:ab:14:ef:77:9d:
         f0:c7:be:2d:dc:d2:83:bd:d9:79:3e:c3:8b:0f:0e:57:c9:0a:
         c3:25:8b:87:c5:c4:81:bd:93:ae:6b:03:19:9a:c7:e4:3f:5e:
         c8:fe:b1:df:61:a4:a1:69:c0:80:96:b9:1d:6b:87:9f:2a:33:
         3b:8f:ac:e0:e8:43:25:b1:10:38:35:66:bb:6b:b9:aa:82:31:
         0a:18:e6:59:94:17:56:3f:6e:cc:5d:20:bd:01:a7:f5:3d:7e:
         26:65:1f:44:34:43:74:c3:bd:4b:be:1e:f7:8f:e2:da:cb:ba:
         7f:9d:ca:58:bb:00:97:3e:45:a0:e7:02:56:c0:3a:11:24:2e:
         b4:d0:0c:ef:ae:ad:5e:c3:8c:98:c5:be:02:e4:60:d6:dd:2a:
         2f:04:30:69:bf:59:87:8a:72:9d:fe:c2:36:d4:3f:3d:4c:df:
         8d:40:20:5a:ae:98:ae:0b:04:49:1d:c9:ca:25:69:b9:e0:04:
         8a:0a:16:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----