Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145311.roa
File:                     AS145311.roa (raw, json)
Hash identifier:          TejNPmUj+Nu+hHIDnHZGm/uumW0yX/FJA3Rk66LuCCc=
Subject key identifier:   6B:3B:8A:E6:58:84:21:19:3A:F4:7C:FD:BA:3D:86:4E:8A:75:78:B3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5B0D16D61DC96849ACB2E11CC67E7B23A24D2D60
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145311.roa
Signing time:             Mon 25 May 2026 01:38:13 +0000
ROA not before:           Mon 25 May 2026 01:33:13 +0000
ROA not after:            Mon 24 May 2027 01:38:13 +0000
asID:                     145311
IP address blocks:        240a:aa65::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0d:16:d6:1d:c9:68:49:ac:b2:e1:1c:c6:7e:7b:23:a2:4d:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:13 2026 GMT
            Not After : May 24 01:38:13 2027 GMT
        Subject: CN=6B3B8AE6588421193AF47CFDBA3D864E8A7578B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:46:4e:46:8d:1e:50:3c:bd:4f:35:f7:6f:
                    d8:3e:af:8d:a5:a2:5f:35:dc:de:3b:ca:4c:18:78:
                    33:e6:27:39:cd:b2:ae:eb:cc:7b:3a:f3:66:28:d3:
                    7d:cf:09:6d:80:1d:96:0a:3f:df:c7:9b:99:ff:b6:
                    96:85:7e:3d:09:c6:6d:e7:ac:f1:aa:fa:e6:75:c8:
                    76:5b:0a:9b:92:54:07:2b:5a:34:dc:0c:cb:b3:45:
                    49:73:ed:fe:0d:da:2c:11:bf:a0:27:35:3b:a0:cd:
                    b6:8e:a4:f1:a2:e6:74:37:65:ce:77:28:41:0e:10:
                    40:0e:fe:7a:41:06:6f:a6:cd:1b:dc:0d:2c:f6:2e:
                    03:27:95:17:ce:d8:a6:e9:33:37:25:28:8e:2b:fa:
                    64:d7:30:b1:f9:d1:2f:ec:a5:ea:c0:b6:17:94:eb:
                    ba:13:ca:2c:3f:f6:a2:fa:1e:d1:b9:69:77:b9:49:
                    39:61:06:cc:5a:40:8c:3c:23:4d:2f:88:11:1d:e7:
                    cc:6e:30:53:ac:15:ed:b1:e1:c2:dc:2a:df:0a:1e:
                    98:d8:13:25:87:1d:c9:a0:fd:39:8d:b0:51:d1:6b:
                    58:32:b0:c8:d0:23:2f:99:d4:40:d7:18:57:42:16:
                    fa:f0:70:a7:3e:16:1e:59:01:4a:af:ef:3e:40:e5:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3B:8A:E6:58:84:21:19:3A:F4:7C:FD:BA:3D:86:4E:8A:75:78:B3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145311.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa65::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:92:46:a4:94:fb:93:97:eb:c8:00:0a:b7:cc:9b:e0:0c:76:
         9a:f9:b0:02:03:14:0d:fc:d0:31:ff:6d:8d:ab:99:1a:6c:8e:
         60:e3:37:4c:c7:f8:83:d5:b2:f0:56:fc:2a:0c:3a:69:02:7a:
         b9:45:24:10:66:8a:97:de:cd:5c:05:0e:4e:d2:cd:bb:b5:50:
         d3:37:f7:48:d7:75:39:c4:24:14:6a:be:2e:04:fb:27:f7:a1:
         d4:70:09:cc:f3:3d:ed:9c:e9:f2:ac:d4:0f:99:8e:33:23:1e:
         22:35:5d:0f:92:86:61:14:5f:cb:26:f9:d5:2e:b3:6a:6f:06:
         7b:d4:7b:3e:a8:ea:11:9f:1b:80:ed:b1:0b:7b:15:ac:1d:f2:
         4d:cc:49:e1:fe:5d:33:eb:40:9c:0e:a2:87:71:f5:70:73:38:
         fc:bf:f0:05:17:df:fb:66:9f:03:c0:91:f9:63:23:4b:bf:4c:
         72:fa:d3:5a:57:db:22:ef:f5:53:ac:98:da:1d:40:77:62:c1:
         51:63:54:e8:a4:53:28:68:0e:69:5e:6f:bc:56:20:3f:c4:76:
         43:84:2a:a8:83:71:65:ef:30:60:5d:aa:ab:d9:de:2d:0c:6b:
         2e:7f:0d:57:95:92:c8:9f:38:1e:fd:19:bd:16:79:de:bf:e0:
         22:d0:49:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----