Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145341.roa
File:                     AS145341.roa (raw, json)
Hash identifier:          LqLFSIhnRvqbZBtsjljSuG1DMoQg1HKD+t/qo3sjgKI=
Subject key identifier:   76:F1:CD:57:CB:46:3C:E8:2A:B5:F7:4A:E3:E8:37:E5:33:D4:AB:94
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       59CBAA7CBF812CB6F0C2E29D3C79F5B819D05606
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145341.roa
Signing time:             Mon 25 May 2026 06:28:10 +0000
ROA not before:           Mon 25 May 2026 06:23:10 +0000
ROA not after:            Mon 24 May 2027 06:28:10 +0000
asID:                     145341
IP address blocks:        240a:aa83::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cb:aa:7c:bf:81:2c:b6:f0:c2:e2:9d:3c:79:f5:b8:19:d0:56:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:10 2026 GMT
            Not After : May 24 06:28:10 2027 GMT
        Subject: CN=76F1CD57CB463CE82AB5F74AE3E837E533D4AB94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ef:70:15:a0:76:f9:20:54:72:92:e6:35:02:
                    39:88:47:b9:0b:34:32:05:bc:a9:12:ae:d3:61:fc:
                    21:5b:71:80:f7:47:8f:54:f1:a2:4f:32:79:83:a9:
                    9a:46:4d:7f:71:6c:44:ea:c5:d9:7c:8f:98:5c:26:
                    be:f9:55:2e:aa:95:62:62:16:82:51:1e:1a:83:5a:
                    4a:2b:dd:f1:5b:88:d1:02:4d:af:58:6d:24:88:a5:
                    17:c0:50:f0:f0:34:73:54:bc:28:29:5a:b1:50:53:
                    b2:3b:ea:96:10:6f:eb:fa:90:b6:4f:74:b7:d5:e5:
                    33:53:76:5d:fe:00:c8:42:88:fa:99:8d:63:c7:7f:
                    24:cd:3f:92:f0:01:6a:42:30:47:d9:71:1d:b7:ba:
                    b6:a0:9e:44:2a:eb:da:ef:d8:a2:0e:5e:5e:f8:82:
                    83:67:b7:d0:1a:c2:ba:1d:dc:87:ce:cf:ce:39:52:
                    2e:e3:26:8d:35:16:70:a0:0d:8b:e6:50:83:f6:02:
                    6b:54:36:8b:be:b0:46:60:47:c8:8b:93:df:37:87:
                    6b:71:a6:04:19:51:c5:9d:6d:1c:58:5a:3f:0e:c5:
                    5e:88:3b:ff:77:40:a9:2d:6c:a5:46:6c:d7:9a:c9:
                    13:bf:ed:16:75:98:cb:86:14:00:46:ef:e2:5f:be:
                    e7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F1:CD:57:CB:46:3C:E8:2A:B5:F7:4A:E3:E8:37:E5:33:D4:AB:94
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145341.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa83::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:46:9a:b6:da:5d:34:7a:ff:14:25:fe:a9:b0:35:1e:23:de:
         59:23:4b:ab:c7:0d:d2:a9:bf:2b:c3:3d:87:a2:c7:61:54:87:
         91:15:90:da:ce:07:b3:f0:e2:b1:c5:7e:7d:af:ae:ab:75:45:
         5f:30:d4:36:15:c4:58:ef:e9:0e:23:24:fb:5c:66:3c:42:4b:
         aa:bf:78:d3:0f:bd:eb:76:11:ef:94:ca:9c:35:87:dc:97:e0:
         a6:39:99:66:5a:2a:33:31:17:23:8a:a6:dd:9c:dc:1b:cd:ec:
         26:72:6c:6c:b4:95:5c:9e:e1:c8:76:30:8d:e9:c4:64:58:00:
         33:7d:a9:35:11:31:a3:f5:5b:ff:d7:4e:64:25:b2:08:48:bd:
         45:e6:59:72:53:24:83:08:1d:88:05:13:3b:a3:c4:8a:09:ca:
         41:0a:27:f6:15:64:b6:8b:63:0c:f3:aa:99:05:f1:ed:e0:9a:
         4e:cc:f1:ce:0e:37:5d:b4:46:b5:32:f1:1a:db:29:a5:55:ee:
         a9:a4:18:ac:c9:5b:53:1d:d2:c1:23:17:8a:81:f2:df:82:54:
         e9:98:ee:ae:0b:b7:de:0e:54:c5:4f:d5:68:d1:8a:2f:c1:b3:
         06:73:07:33:7a:98:ed:29:3c:c4:34:9d:fb:ad:3d:50:36:56:
         bf:f6:38:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----