Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145474.roa
File:                     AS145474.roa (raw, json)
Hash identifier:          Y2TcGNY/EuRSFipGnGRIdlrTjAZX2/OSPf1rYEN0GQs=
Subject key identifier:   D0:52:13:D3:5C:E8:71:2D:9D:FA:5E:28:4F:0C:06:BA:30:35:8C:CE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1E39946EC0C28F33D4AB968BCB1B22C8806EE7BD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145474.roa
Signing time:             Tue 26 May 2026 01:13:19 +0000
ROA not before:           Tue 26 May 2026 01:08:19 +0000
ROA not after:            Tue 25 May 2027 01:13:19 +0000
asID:                     145474
IP address blocks:        240a:ab08::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:39:94:6e:c0:c2:8f:33:d4:ab:96:8b:cb:1b:22:c8:80:6e:e7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:19 2026 GMT
            Not After : May 25 01:13:19 2027 GMT
        Subject: CN=D05213D35CE8712D9DFA5E284F0C06BA30358CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:18:43:f3:08:81:36:69:0d:f1:9f:8c:63:42:
                    a2:a0:a3:34:06:45:99:32:3b:1b:a6:ef:54:61:d2:
                    85:69:d1:35:9a:3c:37:f2:68:38:78:df:c5:cd:b6:
                    a3:00:d6:fc:8a:5e:90:78:29:60:09:e1:ed:11:01:
                    50:50:0a:8b:71:7c:b3:4b:8d:8d:2c:ee:1b:27:ad:
                    12:f7:f7:ca:23:a3:19:ec:26:56:b9:9c:00:10:86:
                    eb:34:f4:df:aa:12:a7:0c:80:21:a3:62:70:32:34:
                    16:84:88:42:86:df:dd:de:88:6f:06:9e:61:e0:eb:
                    dc:68:d2:ba:9e:6e:a1:51:b8:33:49:d0:7a:bc:c9:
                    b3:17:c6:9d:59:6d:79:b7:83:84:f2:be:63:23:f4:
                    c0:f7:83:2c:24:14:7d:f9:2f:0c:2c:c3:57:39:19:
                    02:92:04:1e:53:44:27:61:8c:ca:e1:ae:b4:dc:03:
                    16:e5:4e:cc:f6:c0:2a:02:cd:c9:e1:5c:93:b3:f2:
                    13:e5:13:04:17:5e:90:47:97:81:e9:89:89:a2:00:
                    55:e9:24:19:cf:a1:5e:16:7c:1b:f9:7b:7d:0d:5f:
                    a7:06:c0:29:b6:79:cf:6b:3b:8f:d4:50:da:2a:66:
                    86:c4:7b:be:26:a0:3d:d6:97:f3:b2:14:c2:ec:8d:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:52:13:D3:5C:E8:71:2D:9D:FA:5E:28:4F:0C:06:BA:30:35:8C:CE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145474.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab08::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:fb:eb:4b:18:12:13:55:71:56:b0:b3:93:b4:71:ff:73:a4:
         06:7b:bf:b8:13:5c:d7:d6:d6:7d:c5:3a:ae:16:2b:11:f8:fa:
         53:61:8d:fa:cf:a4:a3:e7:bf:7d:e6:5b:80:7a:bf:a2:e4:ea:
         bf:8a:6f:ce:53:36:35:5b:80:9e:75:fc:16:b8:a4:d9:10:a7:
         b6:dd:12:4c:3b:e8:09:28:de:c3:79:7a:79:e9:d2:c7:f2:44:
         19:df:58:87:31:2f:26:50:f9:12:fc:ef:7b:3f:6a:3c:9f:4c:
         52:c7:50:40:f9:8f:44:53:18:b7:4b:18:59:ba:50:55:9f:7c:
         02:7e:c8:45:64:01:dd:75:8a:58:fe:8e:52:13:74:c6:f3:75:
         9f:a3:13:7c:85:46:9d:9d:ba:3c:3d:50:25:94:93:2f:b0:77:
         59:3f:94:ce:08:b3:f4:87:d9:b1:21:a0:90:b0:df:e5:01:b5:
         f4:d1:a7:16:86:63:67:a2:0e:5f:90:dc:e1:af:4d:99:41:37:
         60:18:1e:86:ed:37:8d:3c:db:d4:15:0b:b8:bf:9e:33:96:4d:
         57:bb:4d:70:95:54:32:85:ee:97:d0:c7:9a:48:24:f9:40:4f:
         a4:9f:72:b9:2c:9e:5c:5c:13:99:65:a6:0f:cc:f9:ad:b0:92:
         c0:68:51:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----