Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145476.roa
File:                     AS145476.roa (raw, json)
Hash identifier:          w5FhnMWmQVouoYWEAsg+hd4iNU2aiPi1xu9M2pRj/kM=
Subject key identifier:   91:2C:5D:94:E6:02:9C:A2:03:54:D6:A1:F1:FB:DF:3B:D2:3C:26:7C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       28215802AEBCA7820EC4BF45D03C09900E73E87F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145476.roa
Signing time:             Fri 22 May 2026 04:26:44 +0000
ROA not before:           Fri 22 May 2026 04:21:44 +0000
ROA not after:            Fri 21 May 2027 04:26:44 +0000
asID:                     145476
IP address blocks:        240a:ab0a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:21:58:02:ae:bc:a7:82:0e:c4:bf:45:d0:3c:09:90:0e:73:e8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:44 2026 GMT
            Not After : May 21 04:26:44 2027 GMT
        Subject: CN=912C5D94E6029CA20354D6A1F1FBDF3BD23C267C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8a:4c:b9:6e:ec:58:23:b9:d1:26:5a:1b:98:
                    35:73:4c:a7:ba:c7:c1:79:ef:98:7f:f4:87:39:c3:
                    bd:b7:ac:ab:50:eb:d2:9c:72:c9:d4:6f:62:19:96:
                    1c:c0:b9:ce:ec:6a:04:f1:4f:5b:4e:24:49:59:ee:
                    e2:b7:a4:9b:a3:b0:7c:6f:03:9a:5f:17:b1:e0:de:
                    f1:67:36:3e:1f:fa:41:2d:c6:c9:ab:20:9d:a4:a7:
                    1d:65:7c:8c:97:6b:6c:3d:10:f4:b7:02:16:af:39:
                    40:f6:47:8e:f0:20:b7:bb:25:21:e1:c9:69:b7:d6:
                    55:46:3a:af:e9:fd:4a:e5:6e:d9:2d:3c:25:d5:d6:
                    53:cb:9f:ec:df:8f:c0:f2:0d:65:1d:67:a9:99:da:
                    da:d6:9c:ba:99:83:59:94:91:c7:0c:fb:fc:c7:79:
                    2a:d3:f8:0e:49:6c:ed:53:21:1f:b8:81:4d:87:08:
                    36:b9:46:04:c9:87:93:82:50:5b:fc:c3:10:52:c5:
                    9e:34:33:ed:26:09:ba:30:48:79:77:ec:f2:fa:38:
                    ab:cc:8b:73:7c:52:e0:01:49:f3:34:24:53:7e:28:
                    d3:ae:37:06:0c:30:c4:36:a8:34:41:72:a8:e0:44:
                    c8:2a:a2:c7:34:9e:59:35:a2:03:ed:96:e7:ca:51:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2C:5D:94:E6:02:9C:A2:03:54:D6:A1:F1:FB:DF:3B:D2:3C:26:7C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145476.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab0a::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:88:fc:f6:70:33:57:6f:78:60:3b:9a:70:89:5b:0e:25:57:
         4e:59:77:15:df:68:9a:38:0a:82:c5:70:f7:3e:d7:f4:0b:53:
         0e:46:6c:82:bb:fa:dc:60:45:1c:b5:ba:ca:64:d3:ba:40:a8:
         69:3e:51:e4:75:40:40:2b:7e:0d:a1:6c:9a:17:93:66:f2:7a:
         18:51:f5:a9:b2:e4:39:87:4d:69:3d:97:66:4e:4b:fe:93:89:
         22:93:49:25:c5:ca:cd:88:f9:05:08:9d:ec:73:66:49:a7:42:
         d4:4b:d6:ee:f1:4e:b8:11:ed:12:b6:37:9d:73:49:ed:fb:f7:
         c8:f1:1e:35:ec:f2:fb:00:5c:ed:03:df:33:5c:d2:33:8a:63:
         ef:ca:e6:2a:a1:0b:bf:bc:d0:77:99:c6:6c:b7:77:87:1e:e2:
         1c:f6:e5:0e:9c:d0:03:05:0c:b1:4b:cb:c8:cc:be:74:80:bc:
         b2:66:b2:00:04:db:6e:46:48:9b:5d:75:c2:68:49:93:17:36:
         36:96:c4:ae:12:9e:5f:16:1e:6d:6d:6e:39:c1:55:7f:ef:80:
         84:90:93:d8:be:c6:55:8a:d2:6d:e0:68:66:ee:ef:56:0a:33:
         2f:60:ca:19:09:08:e6:04:26:f2:26:49:30:0e:cb:3b:8b:c2:
         63:02:d9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----