Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145318.roa
File:                     AS145318.roa (raw, json)
Hash identifier:          eImSzZC1mO+z97G7r7IQ/0Ay+dk3FlkTaU41Xx3XD/I=
Subject key identifier:   DE:C7:FE:FC:49:71:50:03:29:FA:2C:2A:27:A5:70:77:59:3F:DB:73
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       697E7C2132DDFE29E49F1DAE3698B3B3F5934BB1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145318.roa
Signing time:             Fri 22 May 2026 04:08:06 +0000
ROA not before:           Fri 22 May 2026 04:03:06 +0000
ROA not after:            Fri 21 May 2027 04:08:06 +0000
asID:                     145318
IP address blocks:        240a:aa6c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7e:7c:21:32:dd:fe:29:e4:9f:1d:ae:36:98:b3:b3:f5:93:4b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:06 2026 GMT
            Not After : May 21 04:08:06 2027 GMT
        Subject: CN=DEC7FEFC4971500329FA2C2A27A57077593FDB73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:cf:de:56:cd:cc:b4:21:04:54:8c:16:5e:
                    00:64:1d:fb:1d:b5:a5:83:cc:84:80:32:34:62:af:
                    95:4b:04:45:9c:89:d6:6f:df:f0:dd:63:72:b9:bc:
                    ae:93:67:9f:c9:07:0a:91:f2:99:6b:ef:67:cd:d4:
                    97:ce:1f:ce:29:06:71:68:ea:e3:83:f1:95:1b:fb:
                    21:88:e8:60:fa:b4:5c:99:51:13:c1:d8:64:13:fd:
                    8c:97:a3:17:ea:2d:ba:50:0c:37:f3:c5:62:de:1f:
                    48:e7:7c:2a:97:bb:3e:27:cb:99:3f:66:d4:0f:be:
                    fd:b5:36:25:ec:fa:77:54:88:6f:3c:19:8f:2a:01:
                    dd:fc:e4:64:8e:ca:e7:d4:dd:a9:a2:64:35:7d:d2:
                    c0:e2:69:6f:b6:2e:8a:29:6e:3d:e9:01:70:69:e3:
                    f6:d9:c6:10:63:4b:c0:07:04:59:d8:d3:85:3c:a4:
                    f7:ea:db:94:e8:50:d3:8d:96:2f:12:c1:27:82:91:
                    f4:ae:ec:cb:67:87:03:e3:9b:f7:37:0f:65:fd:e7:
                    ac:ce:83:e6:a0:21:6c:31:db:f1:a9:86:fd:d8:e1:
                    78:15:3b:dd:c1:d5:07:df:0f:e6:ab:27:8e:29:01:
                    12:11:5f:c7:89:83:19:7c:5e:c7:05:29:9d:04:82:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C7:FE:FC:49:71:50:03:29:FA:2C:2A:27:A5:70:77:59:3F:DB:73
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:5a:d1:7a:60:b7:79:93:10:c6:47:d2:3a:ad:a3:7c:7e:14:
         4a:17:55:c9:4f:ef:0d:b5:b2:70:87:45:08:8a:ab:ce:91:9d:
         9e:9d:74:32:3c:4d:ce:f0:58:ee:9c:77:b7:3a:20:b6:68:f9:
         93:ee:cd:7c:b4:c4:64:0f:bc:28:dd:ac:c8:dc:94:45:d3:3b:
         d4:9e:b6:43:8b:90:1f:0e:71:33:cb:35:ca:83:5b:4b:24:d4:
         90:1e:be:11:62:f5:90:32:e5:9e:ea:b4:2a:f3:55:1b:0e:70:
         5f:4d:5c:c4:8b:3c:0b:62:5a:8c:6b:98:f9:d1:cd:81:2d:67:
         23:76:ab:ee:6b:dc:af:e3:bb:eb:b9:85:8e:b7:dc:94:2c:a8:
         07:42:cd:c2:19:9f:b4:11:29:95:59:dc:f3:1d:e3:a2:24:fc:
         8d:82:b4:c3:38:2e:20:69:90:6a:e9:d2:4b:36:ce:48:c0:cc:
         5a:3f:b5:25:33:df:31:42:56:8b:d5:eb:d6:8c:77:bc:1b:54:
         5b:b8:e7:04:e5:da:07:1c:49:ed:93:ae:7b:c6:c8:a8:ce:86:
         98:b5:cf:aa:93:8d:52:a8:a7:a8:61:d5:44:8f:3b:d8:9b:43:
         e8:8d:e4:e0:b7:43:32:89:93:a9:a9:15:09:b2:6b:49:ba:10:
         33:88:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----