Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145584.roa
File:                     AS145584.roa (raw, json)
Hash identifier:          Jgw9+9R5itnYFP33hLbdBUtP1tbtls85aZZz4tlnths=
Subject key identifier:   99:51:F2:A2:25:23:AF:A8:54:77:D0:9B:AC:FB:72:6A:E3:3A:96:F1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6427B6C8E8DACA500CA94711FDADF14EEF16AA65
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145584.roa
Signing time:             Tue 26 May 2026 01:13:13 +0000
ROA not before:           Tue 26 May 2026 01:08:13 +0000
ROA not after:            Tue 25 May 2027 01:13:13 +0000
asID:                     145584
IP address blocks:        240a:ab76::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:27:b6:c8:e8:da:ca:50:0c:a9:47:11:fd:ad:f1:4e:ef:16:aa:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:13 2026 GMT
            Not After : May 25 01:13:13 2027 GMT
        Subject: CN=9951F2A22523AFA85477D09BACFB726AE33A96F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:38:19:2d:f4:8c:98:1b:9f:a6:f0:f2:15:
                    4d:75:5a:d1:dc:81:a6:84:f7:7e:9e:d3:fb:28:a9:
                    70:fc:87:1c:e3:70:ae:c1:30:22:4f:0e:e6:54:7a:
                    17:d3:6b:0a:9e:f3:0b:06:b9:02:32:df:43:d5:15:
                    59:c8:08:fc:c8:6d:b0:6e:ce:b2:37:97:f9:a7:f2:
                    b1:90:95:0d:fe:9c:42:20:18:46:ad:e9:71:6c:71:
                    8a:37:6d:85:42:cd:6e:0b:b2:46:a8:f9:47:c1:1a:
                    c9:18:21:18:35:42:49:00:61:60:70:09:db:82:a5:
                    78:fc:e9:a0:e6:1d:1e:ff:6c:90:cf:a4:4c:f7:e9:
                    e9:6e:9e:a7:f3:6c:24:11:58:1e:e7:9d:87:9e:b0:
                    51:e2:bb:e3:e6:49:87:2d:ed:c9:0f:44:33:38:53:
                    06:9c:78:1c:8c:b2:00:11:87:91:c1:48:b0:5d:2d:
                    8d:b3:54:d9:20:ad:db:c1:69:23:94:5e:23:d7:a2:
                    84:94:0a:c5:3d:92:c1:8e:99:6b:f2:92:cb:3f:34:
                    78:d7:8a:6b:14:56:41:c5:47:31:88:e0:3a:76:1c:
                    c2:65:46:e3:14:d9:45:b5:96:6d:af:f3:4b:53:e2:
                    c9:90:9d:ae:fe:64:11:8b:e7:64:b0:eb:a3:f8:f7:
                    4f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:51:F2:A2:25:23:AF:A8:54:77:D0:9B:AC:FB:72:6A:E3:3A:96:F1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145584.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab76::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:c3:54:14:52:07:64:57:ec:0f:7e:ad:ef:08:e4:69:0e:9f:
         c6:99:30:aa:7c:a7:a7:52:a6:39:48:99:ff:92:30:a3:38:71:
         8e:f5:62:9d:76:99:51:6f:2f:2d:04:b4:26:59:27:fe:04:9f:
         fb:c7:df:d9:eb:56:59:bf:3f:1b:b3:93:54:ed:a7:d6:f3:f8:
         4a:82:90:60:48:08:f4:60:5c:1f:37:bb:91:2a:31:dc:19:7d:
         e1:b3:64:48:a2:bf:a0:7b:65:0a:fd:6d:11:ea:47:fb:6d:72:
         cb:a6:85:3a:98:37:07:be:36:04:e0:3b:9a:cb:33:7a:a9:22:
         48:ff:ac:f1:d6:e9:b0:d6:83:eb:43:02:a9:56:d2:bc:82:01:
         68:86:e7:8c:45:9c:61:07:52:c3:d5:17:df:33:24:e8:1f:18:
         cc:b9:97:2f:0d:cc:a3:59:1f:30:7c:4d:14:ee:be:67:37:d8:
         18:83:b3:19:07:0d:cc:94:d5:b2:52:30:28:3e:e8:11:5b:13:
         eb:37:a6:11:e2:fd:71:3d:80:af:d3:ff:4f:55:62:ce:30:19:
         93:88:a5:12:02:6f:b2:27:68:b8:9f:80:8a:45:65:fc:eb:a0:
         0a:34:39:51:0e:bc:29:f6:61:02:1a:7a:a6:01:1a:6e:75:33:
         8c:7d:15:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----