Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145554.roa
File:                     AS145554.roa (raw, json)
Hash identifier:          l3vE/4Egxx/I2g1yIgmxQhXaAgbJZDpaLXAXd1VhTn4=
Subject key identifier:   BD:61:FB:75:AE:D9:E1:E8:D9:40:94:04:9B:20:54:8E:35:47:FC:A4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3EDB243F7830C229063D6A25268DBE815581A5C2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145554.roa
Signing time:             Fri 22 May 2026 07:32:11 +0000
ROA not before:           Fri 22 May 2026 07:27:11 +0000
ROA not after:            Fri 21 May 2027 07:32:11 +0000
asID:                     145554
IP address blocks:        240a:ab58::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:db:24:3f:78:30:c2:29:06:3d:6a:25:26:8d:be:81:55:81:a5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:11 2026 GMT
            Not After : May 21 07:32:11 2027 GMT
        Subject: CN=BD61FB75AED9E1E8D94094049B20548E3547FCA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:fc:4a:0a:21:22:0e:28:72:e8:3a:46:b1:
                    c5:7b:fb:82:58:83:77:88:02:54:b5:67:ab:bc:47:
                    67:03:fa:9f:98:de:92:90:ff:82:ae:d4:ba:ff:7b:
                    a7:93:78:51:56:17:a0:df:99:29:f8:41:a6:fe:ca:
                    c7:d2:8b:e1:c1:bb:9a:79:cd:d8:a0:59:ae:70:2b:
                    b2:08:ca:4c:c0:2e:9f:44:1e:9c:eb:a0:df:09:f8:
                    70:0a:85:c2:60:5f:bb:8c:e8:6b:d4:9e:c3:5d:af:
                    49:69:a8:1e:48:b8:f7:c4:80:f6:f1:33:68:2b:73:
                    35:88:21:22:ab:d0:33:7e:0a:08:c0:13:41:66:34:
                    93:09:33:db:f1:f7:cc:11:30:88:eb:5c:02:90:f4:
                    56:37:1b:85:82:d4:00:8f:d0:63:ff:b5:15:fd:05:
                    ed:45:e9:b9:11:f8:bb:7c:e1:d4:4a:d8:18:23:5c:
                    27:c9:b8:70:31:76:41:2e:c3:1d:8f:e4:19:a6:38:
                    a4:15:5e:76:21:2e:18:58:ba:5c:bb:f1:ff:d7:1f:
                    f7:90:ce:01:9f:bd:d1:82:0c:54:99:84:95:18:1b:
                    2b:5b:e8:f7:c4:e7:e1:53:11:47:cc:81:82:d5:e2:
                    61:9a:11:2e:fa:86:ca:1d:1e:04:5d:a6:29:8f:ce:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:61:FB:75:AE:D9:E1:E8:D9:40:94:04:9B:20:54:8E:35:47:FC:A4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145554.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab58::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:65:b3:90:b4:4e:f5:8c:81:03:7f:74:0d:77:e4:62:0d:25:
         fb:74:2f:eb:55:e6:88:e2:56:b2:73:e7:90:28:1d:d5:b6:c7:
         12:53:1a:d2:ae:7b:26:a3:96:e5:10:e5:a6:1f:b4:c0:93:f9:
         d1:45:ac:5c:d8:f4:24:4b:73:30:f8:6a:96:8c:3e:5c:01:4d:
         77:1f:8f:99:8a:c9:f1:b8:b5:18:86:9b:c9:f1:b8:26:2f:e6:
         0d:d2:b8:e2:c4:b2:4c:9f:a7:11:50:c3:57:3f:4b:8e:3c:bd:
         00:af:ba:98:be:b7:ee:38:4a:75:76:1b:ae:35:70:38:78:c5:
         fa:6a:09:1a:42:5c:64:d5:28:47:cf:6f:79:fe:47:ab:1c:87:
         93:6b:c0:e4:40:93:25:30:e8:a2:a2:61:a6:37:15:80:b0:c1:
         ab:c3:ef:47:53:18:f4:ca:8d:86:25:4c:ca:4d:52:06:fd:5c:
         5f:d2:16:0d:52:79:31:fb:5f:c2:3d:3a:6c:2e:92:69:ec:c1:
         e1:55:af:91:7c:cd:93:5a:39:96:50:1b:0e:01:08:e6:4f:da:
         15:b1:1b:39:0d:f6:a3:6c:49:39:bb:e7:40:ad:cc:d0:ea:b4:
         5e:fc:77:5e:b3:7e:ce:10:bd:1b:c9:d6:c3:5c:28:c8:a1:f8:
         16:6f:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----