Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145424.roa
File:                     AS145424.roa (raw, json)
Hash identifier:          jA34tvfrqp9fbEfYuJnbTSD4lbbUOaJ2B0ppWhwb/fk=
Subject key identifier:   85:7A:F5:B8:3B:77:CD:B2:16:FE:28:D9:3D:CB:1C:F1:BB:C3:0C:CE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6D4D258EE5BB3AAC2586215EF6F9A751F36D20A7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145424.roa
Signing time:             Tue 26 May 2026 08:52:54 +0000
ROA not before:           Tue 26 May 2026 08:47:54 +0000
ROA not after:            Tue 25 May 2027 08:52:54 +0000
asID:                     145424
IP address blocks:        240a:aad6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4d:25:8e:e5:bb:3a:ac:25:86:21:5e:f6:f9:a7:51:f3:6d:20:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:54 2026 GMT
            Not After : May 25 08:52:54 2027 GMT
        Subject: CN=857AF5B83B77CDB216FE28D93DCB1CF1BBC30CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:18:b3:b8:f2:9e:a2:9d:2b:66:78:cc:56:
                    7a:66:45:a8:99:45:46:3c:31:db:b5:5c:71:fa:bb:
                    ff:bf:d1:10:a0:7f:e2:e0:4a:67:07:7d:2a:93:93:
                    e4:48:0d:51:b6:28:be:8a:3a:35:33:a0:a9:84:34:
                    b2:a8:c6:dc:38:ab:78:da:32:f6:6d:61:35:97:1b:
                    81:9b:34:62:d2:cd:07:69:e1:60:1a:46:a5:06:10:
                    cf:3e:f4:bf:48:92:71:cc:3e:09:50:9b:0b:6b:f8:
                    e0:98:c7:5c:36:4b:b6:49:7b:70:2c:23:bb:61:9a:
                    3b:88:28:62:9f:ea:4c:84:bd:19:78:35:4c:f7:90:
                    80:07:2f:15:d9:96:46:f4:f1:b7:46:9a:c8:95:0f:
                    3a:ac:ef:c0:94:55:d7:b8:7e:3b:7b:d5:24:ca:47:
                    d2:28:f3:1d:0b:d5:f0:82:37:79:95:13:ae:ee:79:
                    e6:d4:ab:e8:37:ef:ea:f2:dc:8e:9b:11:17:8b:c4:
                    a9:09:77:e5:fb:83:57:58:f6:5f:13:6e:bb:6d:a1:
                    4d:d3:1f:dd:2b:7f:04:b9:bf:2f:3e:0d:87:3f:eb:
                    3d:6c:82:cd:0b:d4:9d:ec:ca:b2:9d:25:e7:50:72:
                    84:de:64:7b:67:8e:d7:02:28:75:5a:2d:dd:bc:fa:
                    44:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7A:F5:B8:3B:77:CD:B2:16:FE:28:D9:3D:CB:1C:F1:BB:C3:0C:CE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145424.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aad6::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:eb:d8:35:e3:95:44:ff:fe:6c:f8:1c:34:03:bf:7e:cf:e9:
         7e:86:b9:c6:2e:d0:d9:32:c3:c2:ab:0b:58:bd:ad:00:0f:96:
         c6:3d:b9:12:26:b5:a3:be:00:62:c7:7e:43:a3:a1:53:e8:04:
         9f:84:9b:8f:f4:f6:ba:e1:80:b4:71:71:ce:a7:15:fa:92:aa:
         83:fb:cd:2d:a3:87:d4:51:4b:11:02:a8:c8:c8:d3:50:ef:70:
         82:99:4d:69:71:9c:c7:84:85:41:c9:84:63:a0:5b:6f:1c:81:
         18:8e:7c:95:0a:f3:02:c4:ea:57:bc:2b:ae:18:3a:09:bf:59:
         96:a0:ef:ea:6b:f1:de:c7:51:45:eb:41:da:f9:b7:c8:0a:3f:
         24:1d:f8:89:cd:f9:a9:bb:e3:2e:78:7c:13:8d:04:ae:a6:f2:
         4e:e8:a5:90:fa:2c:fa:9b:a6:6d:ba:2d:39:0d:f6:f6:c3:fc:
         b3:fe:58:ff:d5:1b:68:48:a3:6c:6f:d6:b0:21:98:b5:a0:63:
         31:53:10:e5:de:e2:4e:e9:fb:0b:74:87:b9:1b:88:53:42:af:
         0f:f4:96:57:f0:c8:8c:9e:20:e9:13:b1:1d:62:30:ca:82:ad:
         6e:8a:66:44:ad:ab:14:12:a2:98:f3:d6:f7:f1:30:2a:bc:ef:
         cd:ee:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----