Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145412.roa
File:                     AS145412.roa (raw, json)
Hash identifier:          QZjGFBsEYmdCBs9p2u87MWuKvamzFodEdOiLwOz7KaM=
Subject key identifier:   CB:F1:BA:13:92:FB:CC:CE:24:3A:52:E1:6F:DB:42:C4:97:CD:5F:45
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4232EAC7203292BFE5BB605A091B0A2F00A647A9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145412.roa
Signing time:             Mon 25 May 2026 01:20:19 +0000
ROA not before:           Mon 25 May 2026 01:15:19 +0000
ROA not after:            Mon 24 May 2027 01:20:19 +0000
asID:                     145412
IP address blocks:        240a:aaca::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:32:ea:c7:20:32:92:bf:e5:bb:60:5a:09:1b:0a:2f:00:a6:47:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:19 2026 GMT
            Not After : May 24 01:20:19 2027 GMT
        Subject: CN=CBF1BA1392FBCCCE243A52E16FDB42C497CD5F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:c9:b8:f5:fa:54:36:5f:5c:10:c8:cc:cb:
                    52:84:13:43:8b:3a:b4:30:39:87:01:d4:c6:49:a1:
                    29:af:a9:cb:77:be:0f:da:22:c6:c2:87:72:bd:10:
                    56:37:de:b2:ad:45:b3:e6:76:e2:97:78:3d:fa:d7:
                    01:aa:fd:ff:46:fc:55:b2:d8:e5:da:60:a6:db:15:
                    21:a8:68:d4:27:77:45:38:b5:d0:b6:e3:e9:e9:a4:
                    ae:55:87:7a:f9:3c:75:28:d6:f6:a0:a1:e4:c5:13:
                    09:47:59:f1:f9:71:00:12:6f:b3:d6:43:6b:36:0c:
                    4a:cc:c8:c1:4d:60:7c:a0:3e:de:80:e2:f4:b5:6a:
                    d8:39:6c:9e:ea:0c:44:aa:ef:f9:f5:4e:3c:44:cf:
                    52:a4:e4:2e:ce:6d:69:c2:57:b0:8f:b6:89:72:ba:
                    03:44:38:ee:3b:32:83:6c:67:fb:a5:b6:93:35:a3:
                    b9:68:9d:4e:41:b4:fb:13:ab:26:cf:d6:47:c1:9b:
                    25:e4:c1:27:36:28:82:5a:22:cf:ba:4c:a9:06:cb:
                    ad:26:39:1d:cc:d1:35:d3:fe:65:bf:ed:1c:01:e3:
                    39:ad:c2:a7:56:3e:a0:3a:1c:18:98:46:9a:4f:51:
                    7f:d2:ab:bb:76:07:26:37:d1:a5:bc:80:a1:15:f1:
                    87:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F1:BA:13:92:FB:CC:CE:24:3A:52:E1:6F:DB:42:C4:97:CD:5F:45
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145412.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aaca::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:79:7b:2a:c6:b4:c6:df:85:46:49:bc:71:cd:74:d6:d6:
         6f:ae:d5:99:c6:3b:16:ed:f2:78:38:60:23:3b:3f:1c:cd:b2:
         bf:a4:16:de:74:a3:8b:85:09:7f:20:be:fa:25:2e:f5:79:39:
         99:09:4c:de:88:aa:e6:92:6d:a1:1c:bc:a2:31:83:42:ed:92:
         bf:d6:08:6c:31:70:a3:9d:a9:ed:34:ff:46:7b:dc:fa:30:26:
         fa:e6:7a:b7:d3:cb:44:9f:84:bf:04:f9:2f:67:9d:73:d3:33:
         85:64:c3:13:41:d7:0f:66:2b:74:a5:8a:69:7b:9c:86:92:b9:
         f3:f7:71:4d:19:86:df:c8:b5:1b:62:a2:54:7b:2c:a6:73:12:
         3e:42:3a:e6:0d:f5:5b:bb:94:c3:f3:20:b4:40:6c:12:da:82:
         97:04:6c:1b:d0:ba:f5:e0:ad:5d:56:6f:b2:b0:8d:f4:e6:c8:
         2b:00:62:3e:de:d7:cf:55:20:70:93:84:ff:72:15:0e:eb:94:
         be:80:1f:41:e7:c0:4c:e9:09:61:bb:78:70:0f:6b:ee:bf:4e:
         2f:08:f6:e0:35:1e:4c:0b:3d:8e:c0:80:a8:b3:fa:aa:ba:8a:
         21:97:23:95:c8:cb:82:50:91:11:34:66:7b:4a:1c:ea:e4:21:
         e8:49:bd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----