Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145618.roa
File:                     AS145618.roa (raw, json)
Hash identifier:          jWcq+tYbiPOiJFjqrpgo87/zmrjZ4Gllzmn2GB9Lj8I=
Subject key identifier:   F4:4F:8F:A9:19:16:FA:0F:71:D5:B7:5D:13:C0:81:DB:EF:1A:85:5F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7B2D68203984EA0503584A0D52BE14E31BEBAB2D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145618.roa
Signing time:             Tue 26 May 2026 08:52:50 +0000
ROA not before:           Tue 26 May 2026 08:47:50 +0000
ROA not after:            Tue 25 May 2027 08:52:50 +0000
asID:                     145618
IP address blocks:        240a:ab98::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2d:68:20:39:84:ea:05:03:58:4a:0d:52:be:14:e3:1b:eb:ab:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:50 2026 GMT
            Not After : May 25 08:52:50 2027 GMT
        Subject: CN=F44F8FA91916FA0F71D5B75D13C081DBEF1A855F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:fd:8a:c3:5b:2c:48:26:fc:eb:e6:ba:af:
                    d3:fa:df:fa:cd:ed:bb:42:98:52:af:a7:66:51:04:
                    31:e8:9b:90:6c:dc:9d:48:7e:58:3b:59:55:13:4b:
                    de:bd:18:c1:2c:b8:e9:fe:fe:4f:4f:bc:cc:13:8c:
                    23:6c:d0:7f:08:ba:c7:d0:57:05:90:62:a1:21:ca:
                    8c:3d:a4:1c:a0:83:d9:7f:50:0d:f1:15:e2:5f:5c:
                    ec:b4:e7:49:4c:a1:19:30:d6:29:2e:77:41:4a:02:
                    9e:8b:f7:db:eb:3f:62:1f:bd:6e:71:bd:de:f6:d6:
                    66:a3:de:f9:b8:1a:11:4d:a4:06:27:c9:a2:47:9e:
                    c8:f2:10:88:1a:58:c2:7e:f8:04:d5:cc:25:10:33:
                    b8:ef:f7:15:35:bc:88:ba:c8:4d:e1:2b:eb:1f:05:
                    c0:79:f8:c6:2e:40:c8:68:0b:61:25:85:67:8b:28:
                    28:52:e9:6d:63:3d:a4:69:2e:15:bc:2d:40:b1:26:
                    3a:11:e5:44:44:29:3d:f1:7e:9a:22:fa:6d:6f:2a:
                    fe:18:7c:e3:22:89:02:7b:44:31:e3:ae:dc:de:89:
                    5e:7c:40:fd:e3:e9:e4:95:7d:98:c3:8f:ad:a8:0b:
                    3e:45:77:0d:07:d8:3b:19:2d:7d:9c:04:c6:cd:7e:
                    c2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4F:8F:A9:19:16:FA:0F:71:D5:B7:5D:13:C0:81:DB:EF:1A:85:5F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab98::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:a1:21:4b:47:1d:5b:ef:44:14:b2:8c:8d:5a:4e:43:5d:a5:
         fa:92:c5:07:3e:ff:e3:55:9c:8c:63:e2:dc:9d:49:5b:5d:5f:
         a1:65:39:2d:75:e4:cf:cc:42:78:03:21:50:16:7b:34:9f:2d:
         8c:e0:25:c1:44:31:12:27:ca:b9:b0:41:89:52:d6:0b:a7:71:
         a5:3c:19:fe:58:7d:aa:d1:a2:59:6b:9d:77:60:38:f7:3c:38:
         72:eb:3d:9d:14:07:c3:ea:82:4c:c2:b6:45:c6:6e:d1:9c:d7:
         4c:22:dd:f9:b4:1b:13:35:33:44:e4:a3:f7:cb:cb:2e:1c:97:
         49:16:66:6e:00:a5:f2:0c:73:83:1f:53:af:4f:63:c0:da:fa:
         b3:e2:14:05:84:f7:2f:71:94:c4:b3:9d:5e:24:6a:f0:1a:35:
         32:71:e2:bd:16:fe:d2:46:c7:ef:a5:98:77:c0:ed:3e:7f:fe:
         fd:76:27:88:17:00:64:a7:ff:93:d3:f5:c6:d7:07:36:d2:00:
         65:18:7d:da:61:24:ba:11:aa:9d:f6:f1:78:09:f4:2e:fc:8f:
         b3:c2:dd:a5:6e:aa:41:e2:97:76:5e:f4:9e:fa:1a:8d:b6:27:
         15:c8:b9:42:69:6b:99:7a:04:9b:66:3c:0b:ea:d3:52:8f:a7:
         68:68:24:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----