Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145578.roa
File:                     AS145578.roa (raw, json)
Hash identifier:          Ste7HcfLcXtNfuKERHUC1gAhCy7f3CQM60SvceQxcG4=
Subject key identifier:   29:C3:FA:06:ED:17:4E:ED:54:D4:4E:5F:EC:67:08:38:8C:4D:D3:4D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7353CFBEA49BEAB3406DE9C8C912D56B051A5D38
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145578.roa
Signing time:             Mon 25 May 2026 03:19:28 +0000
ROA not before:           Mon 25 May 2026 03:14:28 +0000
ROA not after:            Mon 24 May 2027 03:19:28 +0000
asID:                     145578
IP address blocks:        240a:ab70::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:53:cf:be:a4:9b:ea:b3:40:6d:e9:c8:c9:12:d5:6b:05:1a:5d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:28 2026 GMT
            Not After : May 24 03:19:28 2027 GMT
        Subject: CN=29C3FA06ED174EED54D44E5FEC6708388C4DD34D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:09:07:d8:24:cd:58:45:a2:57:50:7b:d5:
                    d4:ea:ab:7e:52:7f:ec:22:4a:6c:1e:5e:95:86:0d:
                    c6:2c:2a:c7:67:8b:82:b6:f7:50:74:5b:4c:45:6a:
                    e1:73:60:09:2a:51:b0:7c:16:d6:3b:40:01:27:5c:
                    a4:0e:ad:6c:03:79:6c:cc:18:dd:07:3c:e1:1f:96:
                    51:af:96:d7:45:d6:6e:10:12:3c:96:18:61:7e:38:
                    99:d3:b3:02:75:84:32:a2:7a:ba:c9:c5:8c:5a:23:
                    66:41:03:b4:f5:e5:b0:b9:88:8f:9d:a2:eb:7c:78:
                    75:2d:bf:09:2e:44:64:4a:58:6e:0f:6e:bb:6f:82:
                    32:aa:22:b2:bc:c1:99:9f:dd:9f:a3:8d:0e:80:ed:
                    ba:7a:69:9b:cb:7f:ba:6e:97:c8:79:1d:74:6c:ec:
                    5a:3c:fa:ef:74:cb:11:46:db:b2:f1:81:2f:7d:22:
                    2a:7b:55:1c:f7:17:25:bf:7d:54:be:0c:8f:db:47:
                    67:e4:44:bb:01:44:14:54:8b:78:76:1c:99:26:a7:
                    ae:2a:0a:e4:ff:03:a2:02:9c:bf:ea:9c:8e:e9:95:
                    a7:be:cb:e4:69:cf:40:cc:0f:44:1d:7e:53:48:5e:
                    e4:6c:b7:7e:06:2f:f3:c7:b9:d2:ce:a6:cc:ab:73:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C3:FA:06:ED:17:4E:ED:54:D4:4E:5F:EC:67:08:38:8C:4D:D3:4D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145578.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab70::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:a4:6a:2b:e0:1a:99:9c:41:5f:23:21:de:6c:54:80:5f:49:
         26:39:0c:26:d0:2e:10:ed:12:75:68:0f:c5:ec:9a:88:6f:66:
         5d:7a:e8:7e:a6:64:7f:79:a6:47:f6:0f:90:a8:4a:da:8c:9c:
         00:8c:84:aa:38:d2:c9:7d:a1:12:c2:ce:cb:5d:bc:59:b5:d0:
         77:87:f1:e5:44:bd:ca:ac:d8:3d:87:0c:ba:1e:36:58:1e:96:
         17:bc:a1:05:b5:b6:37:cd:e8:18:f5:ab:59:e7:e1:88:30:4d:
         2f:2f:d1:04:f6:de:1f:8b:bd:95:90:8a:d0:97:55:8d:c7:23:
         68:72:35:db:f9:c5:05:a8:9d:85:6c:6e:16:68:95:80:9c:6e:
         75:82:4a:ba:ae:f1:31:6c:bc:3e:ba:42:25:29:60:81:4a:32:
         f3:80:0b:af:4c:8b:22:90:71:be:4b:29:b9:09:e0:d4:a7:59:
         a3:97:5b:cc:7a:27:56:b8:3c:b6:a3:40:ce:e9:79:03:f9:50:
         eb:b9:64:99:87:9a:5f:76:34:59:de:95:db:f4:e9:14:4e:f7:
         17:37:6c:90:56:f6:6c:89:b3:a3:60:f7:d7:c3:7d:0d:65:8f:
         61:6e:33:f1:bb:26:bd:b6:16:12:9f:78:99:88:28:e6:f6:07:
         26:42:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----