Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145597.roa
File:                     AS145597.roa (raw, json)
Hash identifier:          yyWmvUmeu3E8HmzFE/lkv15ikypXchtOl33yFTOW238=
Subject key identifier:   F4:37:A4:7C:10:FE:38:60:17:06:7C:80:49:E9:5C:89:92:22:47:32
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3A6929CF1F117D6976A9F7A6B3E3106086B4DB8B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145597.roa
Signing time:             Fri 22 May 2026 04:27:07 +0000
ROA not before:           Fri 22 May 2026 04:22:07 +0000
ROA not after:            Fri 21 May 2027 04:27:07 +0000
asID:                     145597
IP address blocks:        240a:ab83::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:69:29:cf:1f:11:7d:69:76:a9:f7:a6:b3:e3:10:60:86:b4:db:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:07 2026 GMT
            Not After : May 21 04:27:07 2027 GMT
        Subject: CN=F437A47C10FE386017067C8049E95C8992224732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c6:3e:17:b1:51:b2:89:9a:83:40:80:6b:ff:
                    68:66:5b:31:b6:aa:2b:8f:48:40:c5:9f:bd:dd:15:
                    53:70:f2:16:de:fe:a3:4c:42:01:63:ad:71:9e:21:
                    0c:ae:b9:98:b7:8e:61:9a:c7:43:05:61:28:5d:3c:
                    17:1d:b3:bd:60:81:b1:0e:1f:08:4f:3d:35:b3:f5:
                    49:e7:49:11:ee:00:1a:8b:5a:29:c6:ec:13:75:f4:
                    59:83:92:40:7a:72:5d:27:e2:24:e5:e0:89:9e:11:
                    ab:d1:a6:f7:b6:91:e8:cd:61:23:f5:31:f0:47:9f:
                    45:76:46:74:5d:d8:20:c5:f8:10:ac:54:7d:55:37:
                    9d:b9:08:5f:0a:af:fa:d4:ee:de:fe:8f:94:22:1a:
                    68:66:49:2b:2d:30:8a:3d:89:8d:d1:4d:06:a3:46:
                    5f:fa:79:fd:36:43:8d:14:e1:71:67:bc:5f:4c:81:
                    94:e4:d6:0b:ae:7e:e3:87:ae:36:e7:6c:c4:77:4f:
                    77:5d:8b:ed:42:2a:a8:98:d2:a2:57:d0:fe:9d:14:
                    33:eb:cf:b0:ef:07:b7:26:d1:13:33:3a:88:b2:cc:
                    15:a0:69:67:6a:e7:08:7b:1f:4c:e4:1c:a1:87:16:
                    4f:ce:01:76:b5:a2:fe:19:1c:e5:ad:4a:77:6f:d1:
                    e8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:37:A4:7C:10:FE:38:60:17:06:7C:80:49:E9:5C:89:92:22:47:32
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145597.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab83::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:a9:62:b6:7d:76:42:e3:25:2e:16:14:f7:eb:f3:c3:b7:35:
         b6:93:a7:51:42:ae:c3:9b:0f:dd:c8:9b:d0:49:d1:84:02:5e:
         ea:b8:02:80:48:dc:12:4e:fe:b5:c8:ce:04:75:c5:fd:2e:cb:
         40:5f:80:6c:4e:0b:b8:60:fe:1b:29:ba:fe:fc:77:fe:08:5b:
         3b:17:0a:57:ed:60:49:a6:86:b8:6b:8f:20:91:17:b3:78:7b:
         5d:9a:aa:6c:da:27:78:dc:f7:f8:46:f1:97:1f:9a:9c:db:58:
         f1:76:9a:62:7c:f4:d7:2f:2a:b6:c0:f2:9c:13:27:ee:24:a3:
         d4:9d:84:c4:77:e4:85:d6:25:79:4d:9c:8d:ca:ff:ca:63:3c:
         81:f3:44:2b:8e:66:0c:44:db:c2:86:81:81:f4:c9:a0:82:74:
         30:8d:89:00:01:d1:ee:93:2a:bb:d9:70:06:c7:57:ba:bf:dc:
         33:83:87:90:0f:ac:f3:37:75:9f:50:62:08:94:66:a1:91:5b:
         c0:b2:54:21:b3:d7:1d:8c:41:3b:2e:be:14:62:a8:66:34:c2:
         3b:47:4a:33:71:ae:96:b3:04:0b:c8:68:27:7c:fa:ce:c5:14:
         87:2f:41:c1:2e:a0:37:eb:7a:3d:ba:47:19:3b:a8:ed:77:6e:
         55:e5:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----