Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145466.roa
File:                     AS145466.roa (raw, json)
Hash identifier:          QvCQY9vnxzpGEgP2eZmy8RXSn/70/IxFv0LJA8+kuhQ=
Subject key identifier:   06:DE:BC:1E:40:AC:A7:F4:9B:5A:1D:BC:54:B3:03:8D:30:C5:A4:F8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       63FAAA526E6BFB8D0C64F2BFC7A7A73519A29E7F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145466.roa
Signing time:             Mon 25 May 2026 06:49:12 +0000
ROA not before:           Mon 25 May 2026 06:44:12 +0000
ROA not after:            Mon 24 May 2027 06:49:12 +0000
asID:                     145466
IP address blocks:        240a:ab00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fa:aa:52:6e:6b:fb:8d:0c:64:f2:bf:c7:a7:a7:35:19:a2:9e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:12 2026 GMT
            Not After : May 24 06:49:12 2027 GMT
        Subject: CN=06DEBC1E40ACA7F49B5A1DBC54B3038D30C5A4F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:d2:69:9b:13:da:44:0d:0a:09:8b:d9:94:
                    60:53:68:79:cd:f7:97:04:32:c5:28:ce:17:fc:51:
                    bf:a9:07:f9:85:4f:35:8a:1a:45:2d:60:01:7d:22:
                    90:35:32:05:3d:e1:65:8b:11:87:c1:fa:94:a7:2d:
                    4a:33:04:ad:e2:e3:24:4c:3c:bc:7d:17:ee:6e:1d:
                    07:a9:1b:63:7f:09:00:d4:48:c4:29:07:74:86:e7:
                    9e:00:67:00:b6:58:30:69:1a:25:75:79:26:f1:fb:
                    76:0b:0f:f6:11:16:87:a1:a9:51:f6:f3:2f:61:a2:
                    ba:03:26:9a:1f:68:c3:db:88:24:b4:f8:90:84:53:
                    54:04:a8:86:83:94:02:ab:09:aa:9a:2c:7f:3a:89:
                    d8:54:7d:35:3a:26:27:03:d8:e4:6f:98:a7:bf:1f:
                    1c:3b:e9:d9:33:d0:ad:ce:00:7d:6d:89:13:97:ce:
                    3c:56:47:8d:66:eb:b7:33:7b:04:47:e6:32:a5:7e:
                    e4:3f:de:8b:11:ab:e4:64:20:e3:e5:cd:85:0a:e0:
                    78:a4:cd:f1:0e:57:2c:8c:3b:c6:a3:84:98:81:6c:
                    b7:a8:18:cb:7b:9f:67:cd:2b:36:ef:9d:34:b8:73:
                    77:0c:f5:2a:7c:b6:ed:c0:ac:16:24:3d:55:06:a1:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DE:BC:1E:40:AC:A7:F4:9B:5A:1D:BC:54:B3:03:8D:30:C5:A4:F8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab00::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:a4:da:a9:4c:3b:07:e1:3b:7d:1b:65:28:59:35:72:c5:ba:
         69:b6:41:41:ad:d8:1f:28:d9:f2:3d:56:0a:90:30:18:70:79:
         a3:aa:81:b4:79:7a:bf:c8:0a:92:5f:68:52:24:21:8e:27:d1:
         31:11:9d:15:53:59:cf:6a:7f:43:fd:ae:05:99:e6:32:9c:7b:
         a1:27:e8:02:91:63:45:50:f6:13:e5:5d:6f:b0:70:c2:32:a6:
         4a:8c:ce:da:71:18:3f:01:c1:31:9d:20:56:c1:0e:26:b0:7f:
         84:88:ef:7e:3b:c2:34:87:8d:5a:19:e6:30:dc:bc:0c:47:94:
         82:a4:ba:d5:9a:6f:22:1c:c6:9b:6e:33:0f:89:68:dd:52:5c:
         c7:4c:be:e1:b5:d7:78:2a:42:9c:7f:e1:c2:1d:77:2b:ec:fa:
         5a:9d:64:cc:93:a0:4f:93:1b:4d:ca:96:b4:e4:88:38:59:56:
         f6:d1:24:c4:d7:19:46:45:27:fe:e9:4d:25:6c:85:0e:71:43:
         7d:57:c6:57:f3:bd:01:72:fd:9b:2c:44:79:66:42:8d:7c:aa:
         cf:24:76:68:c6:58:83:76:54:d0:be:7e:7e:ea:84:61:57:a6:
         a2:45:d6:ba:75:4b:7b:08:20:4d:ce:84:a5:56:90:29:c7:81:
         85:b8:98:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----