Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145550.roa
File:                     AS145550.roa (raw, json)
Hash identifier:          lR/WSixJCZqDu0e/9BMgZXxksNK/rRDSOrGvg03d6Oo=
Subject key identifier:   83:78:42:DE:20:14:2F:F2:2C:C5:89:90:09:FA:94:D4:01:22:B0:32
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       68D76EA0965CD4D460FFB55890F6B66A72C68362
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145550.roa
Signing time:             Fri 22 May 2026 06:05:37 +0000
ROA not before:           Fri 22 May 2026 06:00:37 +0000
ROA not after:            Fri 21 May 2027 06:05:37 +0000
asID:                     145550
IP address blocks:        240a:ab54::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d7:6e:a0:96:5c:d4:d4:60:ff:b5:58:90:f6:b6:6a:72:c6:83:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:37 2026 GMT
            Not After : May 21 06:05:37 2027 GMT
        Subject: CN=837842DE20142FF22CC5899009FA94D40122B032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:15:cb:92:5b:ea:8b:29:0f:b3:19:7c:33:
                    2a:60:41:25:33:9f:ea:ac:cc:24:a1:5d:db:a2:d8:
                    a4:f9:63:42:63:5b:7c:8d:29:93:cc:90:a4:51:f6:
                    26:f2:41:ae:f8:94:cb:1a:af:89:48:f0:6c:5a:39:
                    2d:17:5e:e6:e1:5d:df:95:20:a9:4b:51:97:c6:42:
                    40:5d:0b:92:62:e2:f2:ae:70:15:1d:7a:c0:8f:36:
                    8e:64:56:82:01:de:98:db:e5:c4:9e:1d:9b:56:2f:
                    d0:56:e1:65:a2:d2:15:c4:d3:78:7a:b0:68:8b:bf:
                    c0:21:13:33:fc:65:b5:bd:27:98:bf:92:43:24:69:
                    bd:e9:5c:15:3a:8d:dd:f1:e4:b5:69:32:4c:0e:c8:
                    26:9d:50:20:e7:89:15:d6:b5:b9:02:10:c2:d3:cd:
                    cb:85:03:b9:1f:92:f3:07:e4:da:90:ec:8d:21:3c:
                    41:0b:e9:3a:80:d0:53:7e:37:27:76:86:b7:b6:7f:
                    a5:94:11:14:38:65:36:4e:22:08:22:20:5b:93:f7:
                    54:e4:1f:44:7f:59:2e:8c:d5:1f:d7:34:12:de:e7:
                    f4:9e:ff:2d:17:61:ca:22:74:0a:48:cf:c8:e6:13:
                    79:2d:66:1a:75:99:00:b0:e2:9b:8b:ef:54:9a:4e:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:78:42:DE:20:14:2F:F2:2C:C5:89:90:09:FA:94:D4:01:22:B0:32
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145550.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab54::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:a8:40:e9:6b:b2:d1:56:5d:3c:de:ab:33:0a:b9:b5:5b:cb:
         ab:8d:c7:52:82:3c:4a:fa:e8:52:a6:85:bd:ef:09:ef:72:4b:
         f6:06:73:00:d9:62:c7:4b:05:12:b3:26:a8:80:cd:98:18:6a:
         82:04:6f:7e:87:a2:b7:32:7e:96:77:c8:38:64:43:f8:92:4c:
         c8:19:d7:a8:e4:c7:23:9c:b7:17:ce:e0:6a:27:45:8e:96:92:
         0f:83:4d:c9:31:b4:41:5d:1d:92:cc:e9:05:64:17:ad:70:d7:
         bd:34:05:24:67:b9:91:c9:8a:a9:af:00:88:1a:87:35:78:77:
         c8:f8:45:9e:da:f5:92:cc:9e:ce:5d:63:e8:28:2c:d0:32:44:
         fb:af:6e:51:90:d5:cb:b1:29:89:8f:19:29:97:d7:7e:45:8f:
         28:bc:ce:94:7a:bc:a8:78:bb:7f:65:32:85:eb:15:50:00:dd:
         a8:e3:fd:ad:78:e2:33:23:5d:10:08:88:6f:f5:e3:d4:ca:94:
         7d:1e:84:eb:de:e7:5b:ec:29:7c:2e:03:96:05:7b:b5:33:39:
         be:22:87:96:df:42:94:b8:98:a4:77:e2:e4:9b:e9:58:2f:9f:
         b1:1d:5a:fe:10:6c:3b:e6:21:d3:ce:7c:8f:e5:23:9a:79:5f:
         f2:74:c0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----