Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145439.roa
File:                     AS145439.roa (raw, json)
Hash identifier:          5TM1Zc2Y338SiZFH7TI9cZ+pI3pxlSoEk/zPZlx+YeU=
Subject key identifier:   F0:FC:12:4F:C7:86:F3:F3:C7:1E:61:F9:E1:45:A9:B4:79:81:B0:69
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       68947016845604DDB2557E4219EB76F3A36801B1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145439.roa
Signing time:             Fri 22 May 2026 02:47:49 +0000
ROA not before:           Fri 22 May 2026 02:42:49 +0000
ROA not after:            Fri 21 May 2027 02:47:49 +0000
asID:                     145439
IP address blocks:        240a:aae5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:94:70:16:84:56:04:dd:b2:55:7e:42:19:eb:76:f3:a3:68:01:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:49 2026 GMT
            Not After : May 21 02:47:49 2027 GMT
        Subject: CN=F0FC124FC786F3F3C71E61F9E145A9B47981B069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:1a:1e:e1:97:8d:f1:da:52:02:5f:92:aa:
                    21:41:3e:33:3a:7a:79:ea:09:75:a8:86:ca:0d:29:
                    f1:89:9f:1c:66:01:da:dd:69:46:99:29:79:1d:bd:
                    f4:f1:04:b6:be:59:78:de:d9:8e:98:33:77:b6:64:
                    30:ef:cb:9d:6f:c8:13:6f:68:4d:31:23:e7:af:a8:
                    10:89:3d:80:57:06:14:e8:37:22:84:20:b5:a0:a8:
                    ba:15:1e:5e:38:62:10:99:65:4b:70:11:1b:f0:3c:
                    78:f1:ea:cd:0d:27:f5:7b:d3:3b:44:14:fa:e1:93:
                    64:49:54:d5:1d:9c:67:b0:22:78:d3:0e:85:cb:87:
                    6c:23:5a:39:ef:a2:fd:15:06:4f:5b:3a:95:f7:d6:
                    4b:a5:e7:d3:bc:00:a3:ed:9e:6f:87:bd:27:91:ee:
                    14:9f:4e:2c:79:1a:39:78:6f:cf:3b:d3:3f:b4:be:
                    5a:70:d0:f6:6a:c9:96:f1:68:d7:b4:92:71:1b:6d:
                    f5:f5:37:dd:10:74:4e:d2:28:0d:e3:bf:f8:98:e0:
                    a4:f3:c4:ed:c2:7a:09:c5:59:0a:87:53:e8:d6:fd:
                    78:5b:dd:d0:81:2c:92:11:95:5c:3a:72:5d:68:34:
                    5a:89:71:a1:c2:3d:4e:0c:39:2e:fa:04:c2:94:eb:
                    c4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FC:12:4F:C7:86:F3:F3:C7:1E:61:F9:E1:45:A9:B4:79:81:B0:69
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aae5::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:98:7f:cf:ac:7e:0f:54:f1:ba:f7:d1:02:38:d4:cd:aa:39:
         83:91:90:f2:e1:f6:df:04:52:a2:73:9a:a5:cf:6a:77:a4:c4:
         e7:12:a2:6e:b0:36:05:7c:4c:ee:46:e9:53:71:f0:5d:81:45:
         d7:f2:21:93:59:41:d6:13:48:1e:9e:3f:f4:8d:2a:3e:95:62:
         6e:b9:f2:70:ec:89:5a:88:5c:46:1d:4f:89:98:bb:e7:eb:f7:
         88:12:7e:1c:0c:f5:4a:d9:a0:4f:59:20:de:9c:6e:4a:31:48:
         98:93:b8:92:70:12:d1:84:59:9c:8c:08:0c:16:7e:5f:e4:9d:
         7b:7a:71:68:1b:f5:33:84:4d:81:46:da:df:df:c3:18:79:bb:
         11:cb:c4:b8:aa:b9:1b:cd:62:e7:fd:3f:19:21:72:22:40:e8:
         b5:63:a0:9f:73:4e:27:5c:f5:9a:d4:cc:6e:13:3b:e7:4a:1f:
         34:f3:9e:5e:63:21:da:55:11:fe:ad:32:39:d1:fd:ea:7f:d7:
         f3:4e:20:d6:7e:0d:b5:54:ce:e5:d1:93:31:a9:a6:09:52:11:
         96:4c:33:96:d2:12:bf:f0:71:4b:2b:18:d6:0d:62:32:67:b1:
         15:ff:b3:d2:89:a8:4d:a2:57:f3:9c:01:0a:34:30:41:03:1c:
         75:a1:8c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----