Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145523.roa
File:                     AS145523.roa (raw, json)
Hash identifier:          /P1r99BIw3A8YBSA2SLKRV+zfVHpVoRUaP17etwXijQ=
Subject key identifier:   4B:EE:2D:5C:EC:1B:06:CE:66:2C:6F:F7:0F:AA:04:BD:5C:D4:F2:B1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       02EB0371E5330A73F3C3623AFDBD39C98DD4F710
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145523.roa
Signing time:             Fri 22 May 2026 01:50:30 +0000
ROA not before:           Fri 22 May 2026 01:45:30 +0000
ROA not after:            Fri 21 May 2027 01:50:30 +0000
asID:                     145523
IP address blocks:        240a:ab39::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:eb:03:71:e5:33:0a:73:f3:c3:62:3a:fd:bd:39:c9:8d:d4:f7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:30 2026 GMT
            Not After : May 21 01:50:30 2027 GMT
        Subject: CN=4BEE2D5CEC1B06CE662C6FF70FAA04BD5CD4F2B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:3d:e7:17:fa:ca:f8:50:e9:01:a6:c9:c8:
                    56:68:1e:46:f3:ab:d2:8c:67:c8:ee:60:3e:78:db:
                    f8:32:c1:61:9f:bb:4a:82:d3:3b:6b:58:4d:e9:2f:
                    30:12:b2:fe:35:5a:16:c8:45:4e:22:af:62:76:6e:
                    4c:f1:bb:38:66:1b:3a:86:03:10:80:88:41:40:f1:
                    62:d0:69:b1:b7:56:c1:df:1c:70:8b:d8:da:ff:2d:
                    b0:5e:0e:f7:d2:15:d3:7e:10:e7:8f:c0:15:69:d0:
                    f5:78:5c:51:73:bf:8d:74:54:04:25:60:ef:bb:5d:
                    72:da:26:ff:c9:bc:ad:6e:ea:3d:ff:5d:48:12:6c:
                    0f:89:3a:94:c3:b1:df:ec:4c:1d:4c:8d:93:0b:27:
                    3e:ac:a4:87:97:43:66:bd:ab:ef:b6:e6:8f:6a:52:
                    72:d2:41:c5:33:0d:83:0b:44:79:7a:40:31:6f:69:
                    f0:96:c0:4d:f4:8d:a4:4c:ba:7d:36:d9:0c:68:2a:
                    92:24:90:cb:a6:17:46:2e:cf:a4:6a:da:20:ed:42:
                    35:ef:25:a1:79:9e:9a:04:93:4b:30:d1:83:99:b8:
                    a1:03:26:31:dd:3f:2c:3f:38:b3:3a:78:11:26:f8:
                    75:09:7b:4d:f2:33:c8:3a:14:89:9a:88:b0:78:04:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EE:2D:5C:EC:1B:06:CE:66:2C:6F:F7:0F:AA:04:BD:5C:D4:F2:B1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145523.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab39::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:78:68:3a:af:db:5b:0e:42:11:7c:89:06:24:db:2b:cd:fd:
         fe:d4:12:d7:25:2d:e6:c1:5b:eb:8d:0f:b4:eb:21:f4:13:1a:
         fc:a2:0e:0b:0e:0a:4d:9c:83:ca:5e:eb:5a:ac:83:22:f9:d1:
         39:6c:76:b2:3b:34:2e:56:6a:6f:52:5a:a6:5a:42:af:d8:49:
         44:2d:89:54:f0:04:23:0b:ec:f9:ef:b7:4f:07:f8:85:71:44:
         d2:c5:04:35:11:b8:66:0b:87:27:d1:af:2d:98:a9:4c:bd:f0:
         56:b8:09:5e:3e:39:bf:9c:29:d0:95:3c:b3:4c:44:54:8e:78:
         34:72:ba:66:52:c3:a7:01:d6:e1:c8:03:10:a8:b2:1c:b0:76:
         ec:64:ae:49:6f:3d:f8:ed:0c:76:f8:80:0c:51:8b:02:40:4a:
         46:db:3b:82:5d:9f:80:b3:9c:3e:c6:e4:41:d0:a1:1d:e4:7a:
         7d:5d:46:5f:9b:4d:68:36:a5:17:31:f9:2f:33:bf:ae:10:bf:
         6e:d1:9d:71:5c:ee:93:77:45:4b:ed:4d:77:ed:54:22:bd:b6:
         96:13:bd:5e:38:5a:9a:26:2c:72:d6:21:75:7d:4f:92:4c:22:
         d0:34:e1:1b:33:f1:de:f1:e4:a3:c2:00:a2:50:e3:8d:33:5a:
         7e:20:83:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----