Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145628.roa
File:                     AS145628.roa (raw, json)
Hash identifier:          /PH29Vhr+oZEo4XNYS6NvRA9ql/G7C46KOEg3xnsKxw=
Subject key identifier:   56:F0:10:BE:7A:B2:73:C0:4C:51:D9:53:B0:65:A1:68:48:2B:A0:D0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2CD24111377DECD8C104675E0BAAAAB29FC179CA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145628.roa
Signing time:             Tue 26 May 2026 06:30:32 +0000
ROA not before:           Tue 26 May 2026 06:25:32 +0000
ROA not after:            Tue 25 May 2027 06:30:32 +0000
asID:                     145628
IP address blocks:        240a:aba2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d2:41:11:37:7d:ec:d8:c1:04:67:5e:0b:aa:aa:b2:9f:c1:79:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:32 2026 GMT
            Not After : May 25 06:30:32 2027 GMT
        Subject: CN=56F010BE7AB273C04C51D953B065A168482BA0D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:33:18:d7:93:88:96:94:50:0d:d3:bc:15:
                    1a:8d:d4:e5:4a:1a:83:6b:90:e6:e1:85:26:75:79:
                    7e:53:d6:4d:05:b9:19:ff:b7:e7:ea:d2:3a:a0:22:
                    04:7d:c6:af:8f:d1:ec:6e:c1:b0:1f:4a:16:21:3e:
                    c3:43:4d:fe:19:85:ee:81:27:a3:b4:75:a6:61:ed:
                    0e:c0:c2:b7:44:29:c6:b2:ae:bd:c1:81:6f:5b:b8:
                    c5:27:28:33:d6:cd:61:92:87:0c:56:4b:79:db:2a:
                    42:78:74:50:2f:47:77:0c:62:40:bd:2b:83:91:95:
                    41:0a:77:1e:d6:0c:16:c4:b0:c6:0b:ae:9d:f1:32:
                    df:2d:fd:22:50:93:5a:89:b6:83:1b:32:b8:44:d4:
                    36:e7:18:82:7a:d1:5b:7f:26:97:1b:bd:b1:3b:4f:
                    25:29:34:aa:04:1e:4d:a7:49:f7:b0:35:b9:56:95:
                    2f:db:3e:f9:24:66:c1:01:d4:4a:36:3d:82:bd:5f:
                    97:9f:37:35:09:97:1a:d8:77:f3:73:e4:3d:0f:29:
                    38:ab:5b:9f:65:39:57:dc:1c:44:d9:0b:59:ff:c1:
                    6b:0e:0d:e3:86:d0:3c:d3:e2:04:66:73:f8:e3:0e:
                    a3:a0:40:99:d9:4f:83:f2:7a:bf:83:6b:44:f3:64:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F0:10:BE:7A:B2:73:C0:4C:51:D9:53:B0:65:A1:68:48:2B:A0:D0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145628.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aba2::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:d8:d8:39:45:73:49:75:92:c2:f3:c5:fb:f4:8e:3b:e4:da:
         64:8e:27:ec:3b:d2:23:34:73:f3:88:96:5f:f2:b3:0c:5e:7b:
         30:4e:3b:ac:d9:a7:9a:fe:92:bb:e8:6a:46:91:2a:d9:94:e4:
         b7:c3:30:b9:b3:f3:cf:bf:e9:e2:8c:dc:9c:f7:2d:8e:79:8f:
         20:d7:9c:c4:2d:35:ea:75:6c:7e:1f:1e:7a:d7:87:8e:28:c0:
         d4:ee:91:bb:6f:85:93:da:d9:41:1b:28:3d:c0:f9:fc:19:20:
         31:01:2c:de:88:ee:77:74:ba:56:2b:b4:5a:7a:af:17:5a:54:
         38:ec:78:2b:11:b4:c2:ae:31:8d:1d:5d:c0:22:e5:e4:9e:99:
         f7:7f:46:9f:4b:2f:ea:14:c5:79:70:d5:bb:ea:8a:08:a4:54:
         ef:49:1f:e5:01:75:f8:f8:ad:96:1c:d3:c0:8b:3a:6f:56:2c:
         c6:8f:82:10:6b:9e:ab:16:d6:a3:1e:12:08:72:b5:63:d1:96:
         8a:90:35:34:29:e0:69:b7:9d:d5:39:8b:62:39:c3:25:c3:95:
         78:01:b3:55:72:62:2a:3d:dd:f9:69:e6:be:dc:db:d6:6b:79:
         be:c0:b5:be:ce:35:53:f2:9c:85:84:37:eb:02:be:13:70:1b:
         c0:c2:60:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----