Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145577.roa
File:                     AS145577.roa (raw, json)
Hash identifier:          vDVU0g59VNYuVdunqc3f9Ok78mo9wfntUHCgHZ35pcg=
Subject key identifier:   29:0F:89:B8:73:88:96:DA:68:7E:6B:FF:F1:10:C2:8D:95:AA:C5:1C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       103D0F3E42216F309E9EFA0213BD995028018834
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145577.roa
Signing time:             Fri 22 May 2026 07:09:05 +0000
ROA not before:           Fri 22 May 2026 07:04:05 +0000
ROA not after:            Fri 21 May 2027 07:09:05 +0000
asID:                     145577
IP address blocks:        240a:ab6f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3d:0f:3e:42:21:6f:30:9e:9e:fa:02:13:bd:99:50:28:01:88:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:05 2026 GMT
            Not After : May 21 07:09:05 2027 GMT
        Subject: CN=290F89B8738896DA687E6BFFF110C28D95AAC51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a1:8d:4f:c0:9c:2e:06:41:41:10:a0:86:fa:
                    92:79:c0:af:c9:89:57:c9:de:74:5c:2c:26:a2:ce:
                    bf:90:9e:74:0b:6e:62:89:96:51:a0:cd:73:23:96:
                    cc:b6:8d:7e:6a:ba:cb:dc:61:a4:f5:67:7e:b0:ff:
                    66:0e:0f:2d:6e:56:b3:42:28:c4:6e:9f:74:18:04:
                    89:2a:6f:93:d0:36:7b:14:b8:18:2e:5f:ad:ec:7a:
                    88:4c:07:a4:04:a4:9d:ec:e0:cb:19:48:df:95:70:
                    6e:0e:8a:3d:a5:c1:e2:9a:9c:04:fc:89:66:cf:43:
                    ce:1e:eb:c2:6c:82:3f:f6:97:94:46:35:70:ab:ed:
                    ed:0b:f1:3c:5d:e2:40:76:48:b4:08:b0:63:b3:b9:
                    ae:65:78:3d:3a:07:d8:c8:df:89:b3:91:b4:32:88:
                    41:78:01:a5:90:f8:05:de:e1:61:68:f9:86:78:f8:
                    46:8d:0a:44:e7:31:be:2b:e4:df:e6:f3:8b:a8:d0:
                    da:94:4a:5a:2b:bc:f1:d4:a0:e8:cb:f9:fa:b6:45:
                    67:2b:84:dc:78:4e:98:38:a9:ac:37:b0:6a:46:a2:
                    69:6a:e2:e1:48:c1:92:2e:a0:51:79:1d:73:9d:10:
                    ae:65:08:e0:6f:b0:4c:05:dc:c4:77:6d:45:6a:ac:
                    fd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0F:89:B8:73:88:96:DA:68:7E:6B:FF:F1:10:C2:8D:95:AA:C5:1C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145577.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab6f::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:c1:ca:f3:45:1c:6b:0d:a8:a6:ac:c4:98:c4:2c:be:0c:fc:
         6d:ae:3e:2a:c9:e6:a5:23:c5:45:54:f6:b1:06:53:9d:a3:95:
         9c:c6:99:84:6d:90:6c:b6:f9:c4:f0:24:be:8a:b8:ba:a8:5f:
         d6:df:c2:df:9d:12:a4:11:13:50:86:e4:bd:eb:49:91:e1:e3:
         99:0d:4b:01:ce:a5:c2:f2:e9:a2:e9:7e:e7:20:19:74:c4:78:
         19:f7:70:ba:f0:67:95:20:29:9f:ac:b4:f6:6f:73:5c:40:de:
         f1:d3:2b:29:dd:d5:8b:90:6f:8f:8c:60:b8:0a:2b:cf:81:6e:
         aa:56:68:99:6d:05:7b:5a:9f:57:6e:24:8e:27:68:e4:b8:9a:
         58:ea:f7:90:78:07:54:7e:0f:35:51:0e:b1:fd:19:44:34:cc:
         00:95:5b:ea:cc:03:33:b4:4f:41:1d:52:db:23:cf:1f:b9:19:
         85:55:1b:b4:0b:92:d1:b1:6d:33:00:b8:84:ae:a6:4a:74:91:
         92:94:79:d4:d4:42:5a:8c:af:3c:a4:35:52:11:00:f0:93:a6:
         7b:dd:7a:5d:af:17:e4:d7:01:f8:a4:cf:d6:a3:17:a7:67:54:
         d8:c9:fb:a2:db:e4:7e:9d:06:64:d0:cc:93:2a:64:2d:69:b8:
         cc:5f:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----