Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145492.roa
File:                     AS145492.roa (raw, json)
Hash identifier:          rUVFck/E2kww30FIinDaLKSOSAU3vUd4+Vu+2BD1RgY=
Subject key identifier:   E5:05:FB:90:F3:29:22:83:D5:DF:00:48:C7:76:5B:62:9A:FB:2D:53
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       103B373AE62C631A89938F207321846418FA71BE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145492.roa
Signing time:             Mon 25 May 2026 06:48:51 +0000
ROA not before:           Mon 25 May 2026 06:43:51 +0000
ROA not after:            Mon 24 May 2027 06:48:51 +0000
asID:                     145492
IP address blocks:        240a:ab1a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3b:37:3a:e6:2c:63:1a:89:93:8f:20:73:21:84:64:18:fa:71:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:51 2026 GMT
            Not After : May 24 06:48:51 2027 GMT
        Subject: CN=E505FB90F3292283D5DF0048C7765B629AFB2D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:97:f5:0e:ee:e2:67:2e:78:c3:60:f9:26:a9:
                    07:d1:4c:e6:90:1d:49:9f:c0:e4:21:9f:60:77:12:
                    05:31:37:64:5b:8f:e2:b1:96:c2:51:60:13:dd:36:
                    0c:90:d4:e0:45:40:94:f4:14:43:27:92:58:88:f8:
                    0b:e4:f1:50:bd:03:df:a7:d5:fe:85:0f:ac:c9:cf:
                    8f:7f:4c:c6:d7:f1:9d:2b:32:70:1c:71:e7:64:02:
                    b7:45:d7:72:e8:1e:78:d6:34:0a:16:01:0c:72:53:
                    f5:35:ee:63:a2:a3:d6:19:c2:53:e6:51:f4:81:74:
                    55:24:a5:47:76:df:a5:60:a0:9f:d8:a3:8f:f5:e4:
                    63:e6:56:6d:a2:36:55:bd:13:4a:f5:aa:23:58:50:
                    d5:32:73:5d:7d:97:96:9e:0d:56:7f:0e:27:a5:07:
                    89:1d:fd:99:45:0a:73:2b:3e:0c:58:0e:94:f9:8a:
                    ca:84:14:d9:00:3f:48:59:2a:e6:9a:22:ca:23:24:
                    d7:05:8a:6c:25:a4:b2:f9:5b:61:c9:08:05:16:d9:
                    63:dd:27:34:6e:30:0c:0a:87:fd:42:e9:ea:b8:32:
                    bc:23:70:4a:ff:ab:6a:09:33:48:16:f2:52:18:24:
                    f2:98:72:77:58:57:6d:18:fb:2f:56:ca:dd:ad:dd:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:05:FB:90:F3:29:22:83:D5:DF:00:48:C7:76:5B:62:9A:FB:2D:53
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145492.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab1a::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:8e:45:dc:ec:10:ee:95:98:e1:87:10:2c:9a:f2:c2:3a:8a:
         03:e4:60:75:01:b9:e5:aa:76:72:67:4a:4c:76:cf:d2:84:41:
         e5:0a:e0:8c:c6:dd:13:1d:61:3c:dd:ba:e7:3a:5c:ff:32:81:
         d2:8b:49:0c:21:f4:2f:9c:d4:05:6f:43:44:14:28:41:47:2c:
         11:7a:1d:5e:4d:48:db:00:43:ae:f1:46:00:a9:3e:41:fb:ee:
         b4:6f:5f:2f:66:b0:ac:ec:3d:5f:66:4a:74:b1:1d:6a:9c:aa:
         e2:31:15:c9:bc:29:74:c5:e2:07:10:e2:de:97:93:bc:e4:b0:
         24:39:30:b8:ed:8f:0e:e3:f4:06:15:51:fd:68:d0:67:60:bd:
         d5:6b:91:3b:86:97:06:b5:d5:3f:36:19:83:92:52:93:e3:8a:
         85:12:ac:7e:29:55:be:76:d1:a5:8f:c4:14:84:4f:4d:60:64:
         5b:b4:42:32:f0:05:2c:9a:ea:1a:33:5f:40:70:e0:5d:b4:37:
         9b:55:1f:43:22:b4:a0:05:e9:4d:d8:bd:f0:d1:a6:f7:b4:f0:
         da:6c:bb:a4:1b:05:4b:0b:c8:6f:58:a9:3e:bc:89:b7:e6:a9:
         b4:54:81:d8:de:aa:7f:ba:c5:fb:34:05:54:4a:ff:ca:76:f2:
         78:90:cf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----