Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145487.roa
File:                     AS145487.roa (raw, json)
Hash identifier:          RcJB/uTXe0NKw8eMoiaVC4iQGLiVOAnpDGoIU52errw=
Subject key identifier:   04:04:14:A6:F4:75:16:92:AD:5D:B5:A8:93:DA:0C:DA:BB:3C:32:25
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2AC9930722C6E584509E667894A74E48A89568D4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145487.roa
Signing time:             Fri 22 May 2026 07:40:51 +0000
ROA not before:           Fri 22 May 2026 07:35:51 +0000
ROA not after:            Fri 21 May 2027 07:40:51 +0000
asID:                     145487
IP address blocks:        240a:ab15::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c9:93:07:22:c6:e5:84:50:9e:66:78:94:a7:4e:48:a8:95:68:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:51 2026 GMT
            Not After : May 21 07:40:51 2027 GMT
        Subject: CN=040414A6F4751692AD5DB5A893DA0CDABB3C3225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:09:91:c7:e3:83:ff:f3:ea:85:9b:ba:79:
                    19:5a:c9:fd:86:b3:12:fd:a5:74:9e:97:30:46:57:
                    92:1c:e9:7b:64:ce:a6:ac:53:41:f2:48:06:39:8e:
                    85:03:8a:b1:e3:f4:8f:65:33:02:eb:ae:12:65:ca:
                    9a:8a:e5:8e:c2:95:18:55:32:3b:6d:76:44:a6:62:
                    63:e9:98:ad:b4:9a:26:90:3d:ba:f0:b9:62:75:b0:
                    fa:9a:87:27:ec:0b:42:2d:f0:17:d1:5e:0e:6d:7d:
                    51:10:02:cc:fb:32:77:3b:c2:b8:0a:d5:52:ca:3c:
                    4c:47:d6:8d:a1:a6:c9:27:2a:72:8c:9e:1f:4e:be:
                    90:c6:aa:52:bb:7e:d9:19:e8:d3:e2:cd:03:57:ef:
                    5c:3b:34:61:32:8b:cb:d7:b1:05:2f:51:1f:7c:ab:
                    29:6c:da:bb:a1:01:b8:b4:f2:a0:cb:c0:ec:90:85:
                    e0:1f:83:db:22:c4:39:8c:20:e0:1c:9c:2c:f0:38:
                    3f:2a:38:cc:ef:4f:dd:50:14:54:68:a9:3d:e2:82:
                    2b:2a:ab:cb:60:5f:bc:7e:79:67:4a:1d:cb:ac:96:
                    05:43:9f:c6:9a:3d:dc:42:0b:d3:29:b7:8c:97:e2:
                    05:30:9a:bb:38:92:1f:7f:85:77:79:d6:18:28:b6:
                    b5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:04:14:A6:F4:75:16:92:AD:5D:B5:A8:93:DA:0C:DA:BB:3C:32:25
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145487.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab15::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:86:9e:07:4d:de:f5:23:07:64:b4:bc:81:fe:c1:f9:b4:3d:
         a4:dd:3e:65:62:95:8a:06:b2:42:5a:6a:1f:39:2d:23:5a:65:
         80:e2:dc:62:7f:a5:8e:ea:48:33:51:6c:c3:4f:18:c8:85:2b:
         a7:e3:f8:5e:a0:9b:19:7f:74:33:d4:81:68:33:c0:fc:69:a7:
         45:b8:83:af:5c:a1:db:e0:09:ca:86:cc:75:24:fb:cd:86:55:
         ea:ed:ad:1e:f9:92:52:97:99:40:85:2a:e6:8d:8a:69:76:f1:
         cf:85:3c:9c:c6:40:0f:5f:92:04:11:62:bf:2c:5b:a9:99:6a:
         12:95:03:1b:fe:c1:6a:fd:6b:d1:34:32:76:df:6c:fa:d8:a7:
         36:0d:69:91:69:bb:52:20:63:70:13:49:7d:6d:bf:27:39:8d:
         c5:aa:49:98:9c:a9:e5:72:a3:f2:32:2e:a1:23:34:3e:3b:50:
         69:d7:3c:46:f7:cf:b0:99:14:30:46:bf:48:ca:e7:45:cc:18:
         40:d3:4a:a3:b2:f8:19:9a:f7:9e:4e:1b:53:6d:2a:f8:d4:0f:
         64:a8:7a:a1:3b:57:0f:ca:fb:64:cf:e2:a7:d5:06:69:c9:39:
         ab:79:5b:6d:2b:70:20:33:64:93:ec:fc:dd:86:28:39:13:80:
         12:79:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----