Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145465.roa
File:                     AS145465.roa (raw, json)
Hash identifier:          +veThqb48OwVd5lxpx1sBDM0NlPBep9lRZExVW9EKhs=
Subject key identifier:   12:67:07:19:B1:9C:0D:1A:05:17:7E:FE:33:6B:70:54:9D:E7:14:AC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       022BD6D615C459DEAC19CDD364CAEABDCB9EF638
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145465.roa
Signing time:             Tue 26 May 2026 06:12:54 +0000
ROA not before:           Tue 26 May 2026 06:07:54 +0000
ROA not after:            Tue 25 May 2027 06:12:54 +0000
asID:                     145465
IP address blocks:        240a:aaff::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2b:d6:d6:15:c4:59:de:ac:19:cd:d3:64:ca:ea:bd:cb:9e:f6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:54 2026 GMT
            Not After : May 25 06:12:54 2027 GMT
        Subject: CN=12670719B19C0D1A05177EFE336B70549DE714AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:90:6e:13:13:a1:33:8e:91:68:69:01:1d:cb:
                    f2:e0:93:44:8e:67:ee:4e:5a:f8:7f:54:f7:c9:42:
                    dd:33:b3:73:a6:65:4c:9f:b7:2f:e4:f8:30:b9:52:
                    00:16:fa:fd:92:23:b2:2b:00:aa:22:67:3c:dc:20:
                    46:0a:35:f7:ce:98:6d:89:bb:5c:54:b8:a4:50:19:
                    e8:5f:4d:ba:7a:29:ab:73:04:1c:47:fd:99:e5:d3:
                    f0:d0:40:1d:c2:ff:06:08:17:36:af:d6:3f:04:e4:
                    88:d8:a5:61:b8:26:84:2a:d5:dd:5e:ce:f0:1d:48:
                    00:ac:d8:46:07:b5:91:5d:d0:43:6b:ca:d1:63:d6:
                    7d:b8:19:19:bb:e7:4e:84:02:c9:36:1a:83:12:86:
                    f6:fc:db:aa:d3:73:a8:4d:a4:05:be:75:08:3e:50:
                    fc:c8:3a:6d:0f:47:93:8e:3a:c3:80:9d:68:fb:13:
                    df:c3:a7:48:e2:91:e7:f1:89:bd:90:da:a6:f8:f0:
                    de:39:b0:4a:1a:c8:30:ef:a8:de:ee:28:4f:6c:d8:
                    27:ca:75:a4:4c:d1:a1:6a:5d:24:60:6a:17:c1:bf:
                    4b:f2:62:71:47:d5:f1:89:62:29:e9:1a:1f:70:c2:
                    b9:14:2e:5a:13:72:5b:d9:89:a9:78:e1:cf:e8:57:
                    a2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:67:07:19:B1:9C:0D:1A:05:17:7E:FE:33:6B:70:54:9D:E7:14:AC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145465.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aaff::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:e7:2b:61:6c:30:a6:53:75:4a:b8:3b:a6:fb:8e:6d:b0:4b:
         d1:e1:f9:6a:b4:13:c0:01:5d:3d:d5:60:08:1d:57:9f:00:a4:
         80:17:bb:b1:91:9c:35:42:a9:7b:2c:70:12:1b:60:a4:c5:54:
         d6:d8:91:bd:9e:f9:97:10:c4:49:19:a2:71:5f:b4:ed:8f:cb:
         75:dd:1d:79:db:cc:d5:06:b0:10:04:f4:84:dc:61:94:23:9b:
         f5:da:4c:7c:54:0e:94:2e:7c:6e:52:db:72:87:6e:d0:be:85:
         eb:69:7b:ff:e5:99:3b:94:fe:a6:3a:cc:d7:39:44:41:42:b6:
         d9:f7:cd:89:ff:e5:0a:ef:a1:3b:12:d8:73:6b:98:54:14:d4:
         2d:d3:5f:41:74:20:98:04:cb:6a:12:e0:40:49:82:05:59:62:
         f0:7f:f8:10:c5:40:b0:51:af:aa:89:58:90:8f:92:a9:9d:9e:
         72:f2:dc:52:9a:2a:34:ad:7b:29:01:c2:6a:96:05:31:c5:3b:
         cb:9d:41:36:7c:39:2b:5a:ca:b9:6d:c6:39:ac:cb:df:0b:ae:
         52:88:03:39:5b:e3:4c:6a:a2:ec:83:2d:e9:3e:94:de:c4:02:
         5b:7f:f5:1d:4f:c2:47:56:7c:68:34:27:5b:e0:e8:44:39:27:
         c1:33:1d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----