Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145608.roa
File:                     AS145608.roa (raw, json)
Hash identifier:          yiIT3dkftre+bW9JnLWZpDCFKMqxnCZRlPcQ/zUROwQ=
Subject key identifier:   5E:38:F3:02:60:E8:C3:2B:E4:2D:70:15:BD:E8:40:13:FB:AD:CE:09
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       547D5E89CB9D7AC78873BAE7BFEB7578846C3354
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145608.roa
Signing time:             Fri 22 May 2026 02:47:54 +0000
ROA not before:           Fri 22 May 2026 02:42:54 +0000
ROA not after:            Fri 21 May 2027 02:47:54 +0000
asID:                     145608
IP address blocks:        240a:ab8e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7d:5e:89:cb:9d:7a:c7:88:73:ba:e7:bf:eb:75:78:84:6c:33:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:54 2026 GMT
            Not After : May 21 02:47:54 2027 GMT
        Subject: CN=5E38F30260E8C32BE42D7015BDE84013FBADCE09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:c0:f5:c8:19:78:f8:3e:69:60:f9:35:ad:
                    17:17:7a:f8:6a:e9:4e:6e:95:35:b6:87:8f:a3:7a:
                    bd:93:5d:83:dd:55:d7:e9:80:5f:bf:db:75:9c:50:
                    d1:56:05:a8:2f:5b:03:83:12:f9:bd:9b:2b:27:35:
                    f9:64:4f:b8:ea:57:08:64:eb:c5:07:87:e7:ab:b3:
                    67:d8:2c:16:c6:f2:eb:d2:cd:0c:f6:5f:a2:b6:d7:
                    99:75:63:fd:c0:f3:f4:20:cd:68:14:10:e7:a1:46:
                    29:5e:c8:19:4f:e3:f9:a1:71:8a:25:3a:8d:fb:68:
                    a6:56:30:93:1f:62:31:b7:aa:e8:ca:f2:da:ca:31:
                    4a:bf:cb:57:33:18:0c:d8:e7:18:80:e3:b7:64:1c:
                    d7:a5:28:9d:90:38:a8:4c:52:da:14:a8:36:41:d9:
                    13:b1:b0:5f:9b:7d:ce:46:e7:79:f2:82:db:a5:ad:
                    d3:a5:ac:d3:8b:55:32:83:35:ab:28:fd:a8:6a:7f:
                    f8:42:68:d7:a2:e1:f4:fd:c8:59:2c:61:37:41:fb:
                    2b:44:c8:49:8a:b9:1c:f1:50:fc:03:1e:83:a8:da:
                    8b:d7:d8:6b:56:a3:b8:a0:2e:52:46:75:7b:63:6b:
                    6e:d2:21:20:16:a3:52:18:f7:5a:4e:d9:d2:03:6b:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:38:F3:02:60:E8:C3:2B:E4:2D:70:15:BD:E8:40:13:FB:AD:CE:09
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145608.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab8e::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:3f:da:6f:c1:34:98:45:b1:1b:fb:fa:02:63:e9:c0:bb:2b:
         0c:35:c1:d8:2b:d4:3a:5b:be:81:17:16:02:f3:55:e9:05:35:
         41:11:b1:dd:cb:65:34:b6:ee:a3:7b:38:68:33:a2:48:a5:00:
         28:54:93:0c:5d:70:4f:ac:6f:22:fa:7d:20:d8:a1:56:8b:75:
         c8:e7:2a:ef:88:6f:80:ab:87:78:e8:37:3d:6c:b8:e0:62:30:
         6b:2b:cf:b5:1b:7f:ad:de:96:e0:d4:eb:ce:9f:9d:d2:5c:35:
         41:7b:c8:d8:20:cb:a7:69:2b:1c:60:f4:fd:44:be:5b:4a:2a:
         b7:dd:dd:2b:73:04:de:1d:ab:4d:89:0f:62:6b:a5:fe:77:f4:
         25:e3:b8:08:c2:77:76:ba:19:1a:0a:16:46:25:5f:26:51:96:
         37:49:53:8e:3c:ff:e7:16:59:52:21:51:7d:ac:90:51:ce:3f:
         73:40:2c:5e:b4:05:1e:55:82:ae:d3:c0:33:5f:79:9f:2b:9f:
         f0:cd:c5:bd:2c:76:ce:2f:71:84:c3:85:a4:68:0a:dd:2c:17:
         71:43:a5:90:7f:03:00:c4:0a:9b:8d:9d:24:3c:e8:b4:de:2d:
         ac:97:d0:67:23:7a:ce:d0:09:88:85:6d:f7:ef:5a:9d:ae:37:
         c4:30:77:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----