Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145450.roa
File:                     AS145450.roa (raw, json)
Hash identifier:          xXxm4MfOX/ZigqQrfUz4UD7YvuQ+DOE5eawy8bZ0kIk=
Subject key identifier:   92:2B:21:55:E7:5D:76:98:78:24:ED:DC:99:66:A8:4B:9C:48:80:27
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2E4C0CF6068E4BA126E65721933C60C50B191800
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145450.roa
Signing time:             Mon 25 May 2026 01:20:37 +0000
ROA not before:           Mon 25 May 2026 01:15:37 +0000
ROA not after:            Mon 24 May 2027 01:20:37 +0000
asID:                     145450
IP address blocks:        240a:aaf0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4c:0c:f6:06:8e:4b:a1:26:e6:57:21:93:3c:60:c5:0b:19:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:37 2026 GMT
            Not After : May 24 01:20:37 2027 GMT
        Subject: CN=922B2155E75D76987824EDDC9966A84B9C488027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:53:17:be:bd:71:7e:65:d6:d6:01:c2:51:
                    28:81:2c:09:20:e1:17:28:f5:bf:b2:c4:a7:01:b5:
                    3b:79:31:66:d9:98:1a:7f:26:a2:52:67:99:b0:43:
                    af:07:f9:51:f2:23:33:c8:46:bc:d6:b8:99:58:60:
                    88:be:ff:dd:64:9a:2b:62:1e:b9:e4:f5:f8:e7:83:
                    80:85:ad:71:d9:d2:59:46:fe:12:d4:48:e3:02:7a:
                    46:3e:e3:2f:09:90:75:13:85:4a:f9:25:c0:4f:e3:
                    58:b8:7b:f1:36:d9:0f:24:c8:6e:91:f6:87:9f:62:
                    d7:b9:86:28:66:c5:52:4e:87:27:42:91:e2:42:1a:
                    bf:b7:c0:8a:bc:10:88:8f:18:f4:93:f1:86:a6:3b:
                    03:81:d1:c2:38:c9:ce:00:95:6a:99:f7:63:da:94:
                    58:ad:b4:cc:79:27:3b:81:82:c1:a4:5b:dd:37:59:
                    99:2d:fe:5b:ff:56:12:2a:ee:8c:f0:99:91:4c:e2:
                    4f:ea:ba:d0:d3:89:c2:f3:c0:3f:c0:3a:6e:09:85:
                    96:b1:b7:68:12:e2:f8:1e:32:63:46:83:69:7f:e4:
                    d3:d3:30:c0:33:2d:2d:71:8f:95:fb:d1:56:df:a5:
                    ef:54:0e:97:f9:bf:60:1c:9e:89:52:93:a3:66:52:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2B:21:55:E7:5D:76:98:78:24:ED:DC:99:66:A8:4B:9C:48:80:27
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aaf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:d1:b3:1c:19:e3:de:92:ae:15:1f:a4:b9:a2:19:90:c3:7f:
         6d:e4:5b:77:6f:1a:39:5f:3c:f3:71:27:92:24:94:94:4b:d4:
         1f:78:5d:21:12:b9:21:af:39:24:a3:f7:6a:bd:1c:fc:3f:e8:
         a4:1e:ae:c1:87:c9:87:73:a6:4d:12:53:c6:01:89:5a:44:d0:
         95:13:be:e5:59:af:fe:6c:ed:92:2e:43:20:92:2e:78:ac:30:
         a6:c2:cc:6c:13:b5:0d:7d:3f:eb:dd:64:f5:c4:1b:9c:77:d7:
         50:d5:ec:75:8f:b0:2d:c1:31:20:9b:a7:b3:d1:a4:5f:cb:32:
         1e:e3:b2:aa:ba:b7:a2:08:84:59:50:33:d8:d9:40:50:15:96:
         7e:18:b4:5e:0d:d0:7a:94:11:0d:8d:d7:9d:e6:97:e5:93:e3:
         73:cb:5b:19:f7:ac:3b:7c:8a:f9:ee:74:6c:ba:ee:46:da:a9:
         75:2c:67:2a:71:e2:4b:5b:7a:bf:59:4b:d3:3f:24:9e:3c:9c:
         95:24:5f:57:c1:c6:50:62:c6:8b:97:89:ec:98:0f:2b:5f:1a:
         1b:b2:df:11:f4:17:bb:53:06:e8:0f:f0:cd:72:cd:c1:fe:31:
         b5:21:61:03:fb:35:ff:32:06:33:ac:ca:64:11:d5:f2:30:e6:
         6b:3f:51:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----