Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145361.roa
File:                     AS145361.roa (raw, json)
Hash identifier:          0BF+QCZbys6lkWQEpAqBV1cMSuEP6PNl8B4oPrOyLbs=
Subject key identifier:   D9:C5:ED:5B:84:8D:45:AF:33:7A:F5:64:55:62:F2:53:1E:D2:43:AB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       41E81B3819690F0401F70588DFB4024B90A3AE01
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145361.roa
Signing time:             Tue 26 May 2026 03:16:43 +0000
ROA not before:           Tue 26 May 2026 03:11:43 +0000
ROA not after:            Tue 25 May 2027 03:16:43 +0000
asID:                     145361
IP address blocks:        240a:aa97::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e8:1b:38:19:69:0f:04:01:f7:05:88:df:b4:02:4b:90:a3:ae:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:43 2026 GMT
            Not After : May 25 03:16:43 2027 GMT
        Subject: CN=D9C5ED5B848D45AF337AF5645562F2531ED243AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:98:d3:b1:25:1a:d3:40:7c:d5:86:9f:64:
                    6e:b2:ab:bb:d5:af:d1:2e:38:2d:b9:dd:48:11:c5:
                    f8:82:4b:9e:e4:4b:17:67:65:81:ed:3a:56:ed:cd:
                    22:6a:3a:04:13:ad:84:3e:0f:5a:ad:e6:37:97:0c:
                    a8:54:11:fd:ce:51:0f:cc:2e:54:64:de:fb:80:47:
                    36:78:20:5b:c3:60:31:9f:65:e0:02:a1:93:69:a5:
                    77:24:54:20:a8:df:6f:3e:aa:c3:b5:c3:ec:14:39:
                    e5:f1:59:d9:4d:e5:c8:15:94:fc:33:92:ec:ce:29:
                    31:27:f4:52:f1:cf:90:2f:60:4d:e3:08:42:29:89:
                    ae:5b:30:b8:04:d8:11:4b:9d:4f:cb:91:d2:a2:ef:
                    f2:e4:fc:25:73:77:f2:09:44:10:73:4a:dd:97:c4:
                    22:01:f1:97:a2:4a:59:9e:f1:20:3f:ed:bc:d6:50:
                    1c:4a:9b:6f:39:0e:b6:19:16:6d:ae:c7:a7:1f:c7:
                    81:e3:c5:bb:49:d4:dd:d1:a0:5f:d1:71:91:cc:d7:
                    94:b6:71:4f:b1:e5:7f:a8:36:9f:2d:df:43:08:bd:
                    f7:13:90:fe:58:03:a6:80:9c:85:b4:53:94:1a:23:
                    76:b9:97:f4:3c:e3:6c:f7:34:e8:af:6a:bd:89:a0:
                    1f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C5:ED:5B:84:8D:45:AF:33:7A:F5:64:55:62:F2:53:1E:D2:43:AB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145361.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa97::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:89:14:0c:6d:c1:02:01:52:2f:b0:34:b4:e9:e5:a5:05:3b:
         54:e9:9c:ed:df:16:7e:6c:d1:cb:61:f6:d2:e2:0d:00:30:bf:
         2b:f4:77:63:72:04:a1:eb:76:8b:ef:bf:38:83:b5:8a:a3:bc:
         0a:c1:e9:8a:22:0a:f5:1a:b2:32:5e:7e:6a:f9:7e:27:f4:d0:
         8f:c5:ee:36:99:33:44:7e:76:77:5c:33:a6:68:39:1d:c9:81:
         10:d8:68:ac:0d:c0:a9:0c:19:d9:33:2d:6f:46:e2:2a:f8:a0:
         53:26:04:13:52:62:89:c3:99:39:75:d9:93:b2:f6:e8:e7:e7:
         fd:f4:3f:45:28:2b:24:8d:57:88:fe:85:73:30:46:47:92:0a:
         c5:57:04:f4:09:ac:fa:24:8a:a2:ca:a9:37:d4:af:81:ab:12:
         2b:76:19:f5:06:fa:35:b4:a4:d9:68:9c:0d:2a:c3:eb:f9:fc:
         a6:c3:6d:26:11:b9:82:42:d4:40:6d:0b:07:28:7f:7a:a6:3c:
         1d:25:3b:fc:0a:7b:37:62:a6:7b:32:07:da:01:d7:f5:02:2c:
         b2:83:1b:db:72:1f:38:63:33:6e:8c:63:fe:6a:53:3d:61:83:
         7c:33:f6:1b:f5:93:f3:55:44:0f:49:5b:00:a3:4a:a0:04:e9:
         a8:af:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----