Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145640.roa
File:                     AS145640.roa (raw, json)
Hash identifier:          xWTZf8mXsLsu7/b0d8CsGVJlkbGhUbVxcDRwj9BCuLE=
Subject key identifier:   25:07:3F:2D:ED:D8:44:B7:88:2B:28:D5:33:2C:A1:45:A7:C2:D7:F6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       32B8D6405E546E7C53B6250947C964742A2CBC9C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145640.roa
Signing time:             Tue 26 May 2026 08:52:43 +0000
ROA not before:           Tue 26 May 2026 08:47:43 +0000
ROA not after:            Tue 25 May 2027 08:52:43 +0000
asID:                     145640
IP address blocks:        240a:abae::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b8:d6:40:5e:54:6e:7c:53:b6:25:09:47:c9:64:74:2a:2c:bc:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:43 2026 GMT
            Not After : May 25 08:52:43 2027 GMT
        Subject: CN=25073F2DEDD844B7882B28D5332CA145A7C2D7F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:81:85:25:36:32:52:8d:69:16:de:91:ec:fe:
                    05:8c:27:6f:b6:b1:7f:da:88:70:06:04:84:9a:91:
                    3b:6b:d2:12:a2:cc:36:87:1f:12:37:71:84:47:d8:
                    4f:d6:de:1a:54:4d:f4:c5:36:e8:30:83:53:26:df:
                    e8:66:9a:2b:bf:45:be:a6:c5:d4:97:a6:73:e6:e1:
                    11:40:c7:d4:0d:fc:25:e1:05:6e:9b:e9:09:f3:3b:
                    cd:dd:36:8c:1b:3c:a9:94:be:8a:aa:bb:7d:38:4f:
                    b0:3d:39:61:81:b9:ad:a2:b3:b0:a7:d3:ec:a5:af:
                    98:e6:40:6f:cb:94:37:30:63:a5:be:31:a0:09:dd:
                    0d:82:f8:a0:c5:7f:01:3b:96:2b:35:ac:6b:d5:21:
                    10:87:5a:e1:b3:0b:62:ce:3b:ae:c0:31:64:d0:ae:
                    13:c0:7d:6a:95:f5:3b:60:86:56:71:24:36:cb:0f:
                    ad:cd:cf:59:61:a2:aa:34:d7:33:43:8c:15:54:fe:
                    72:17:14:44:3d:95:99:f3:99:62:8a:19:e3:4b:ae:
                    f8:71:a1:c6:fa:d8:94:d0:1f:63:58:63:e9:a7:99:
                    a6:30:5c:87:17:e1:0c:0e:4a:6b:45:a4:cf:8a:4d:
                    5f:b3:13:98:1e:ec:a9:d8:c7:9a:05:5b:09:04:bf:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:07:3F:2D:ED:D8:44:B7:88:2B:28:D5:33:2C:A1:45:A7:C2:D7:F6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145640.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abae::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:ab:90:4a:a5:8f:28:22:ee:c3:13:06:d4:98:f9:92:86:
         89:c5:dc:13:02:82:1d:9b:6b:f5:9e:42:cb:36:09:f8:06:ce:
         a4:89:0e:79:a5:78:ff:f7:00:2a:e8:8c:51:32:30:ca:d2:a7:
         e6:e5:b5:ef:82:4d:f4:20:d9:ca:c5:d4:9d:12:75:03:e1:0b:
         06:d2:ba:cd:a3:2b:c8:2d:5f:d5:87:ec:84:de:ef:94:1d:1d:
         62:76:82:d3:e1:e3:bb:3a:8a:74:05:a7:64:96:35:3a:92:78:
         f9:62:17:04:d6:69:be:a0:99:77:91:83:33:1f:09:2b:4e:90:
         a4:56:8b:38:33:27:90:0b:98:f5:73:00:17:a1:bf:00:64:63:
         ce:f8:54:f5:ce:28:09:dc:b6:ac:75:b7:8f:c2:68:6a:f2:42:
         e6:fc:76:83:be:3e:eb:6f:94:00:c8:58:1e:64:e2:09:eb:fb:
         56:f4:57:8c:1a:cb:fc:4d:40:f7:63:8e:25:e3:f4:b0:e6:9c:
         2b:0d:71:54:a1:e0:91:27:40:28:14:b6:55:90:cb:65:c2:e6:
         2c:e0:95:c4:cc:48:a1:3c:3a:5e:47:b1:83:0d:1b:86:cb:dc:
         dc:22:2d:31:4e:da:62:8f:5b:73:32:b8:f8:49:1e:74:74:e6:
         11:b2:10:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----