Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145659.roa
File:                     AS145659.roa (raw, json)
Hash identifier:          eUG7dAov2ypHsLKEw60sYV+nRdpq7HCec6KYlY8gFiQ=
Subject key identifier:   70:DD:7F:57:3D:09:25:64:B1:86:06:52:29:00:D6:77:8C:53:80:84
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       052A5A1B31B2C7DAB76FB5B5FDCAF128D38B5ECB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145659.roa
Signing time:             Fri 22 May 2026 04:07:56 +0000
ROA not before:           Fri 22 May 2026 04:02:56 +0000
ROA not after:            Fri 21 May 2027 04:07:56 +0000
asID:                     145659
IP address blocks:        240a:abc1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2a:5a:1b:31:b2:c7:da:b7:6f:b5:b5:fd:ca:f1:28:d3:8b:5e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:02:56 2026 GMT
            Not After : May 21 04:07:56 2027 GMT
        Subject: CN=70DD7F573D092564B18606522900D6778C538084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:35:97:1a:30:f7:89:a4:9a:15:84:01:11:
                    c9:8c:e1:5d:4f:e6:de:f8:fd:bb:e1:ef:05:ad:cd:
                    00:d0:9d:b0:3f:6d:4e:2f:0a:d7:e4:3f:f4:a7:bf:
                    82:56:e0:45:ae:a4:49:78:98:62:03:28:8b:3c:6a:
                    35:89:04:e8:99:3a:b9:39:82:0f:0a:8b:e5:36:5e:
                    eb:e2:7a:61:03:1b:18:8f:93:ee:e9:1b:f2:f7:ac:
                    52:53:8d:a0:a6:51:6e:3f:5d:88:9c:88:33:59:88:
                    bb:5f:ad:aa:95:c2:8b:9c:62:02:9e:1d:4d:b6:52:
                    f0:99:43:2d:31:f3:95:1b:ec:8b:95:15:e4:39:e7:
                    b6:09:7d:70:e8:32:a6:6b:c1:01:0f:5d:f3:de:35:
                    a1:33:d3:94:29:28:ff:ba:07:0d:ff:42:8a:3e:1f:
                    0d:fe:0c:3a:14:fc:69:b2:4c:66:09:98:f7:5d:4f:
                    ea:a7:8f:75:c4:56:a8:a4:bf:95:30:f8:a8:03:44:
                    0e:22:f2:23:a4:2a:ed:3a:e1:47:bd:de:22:c6:4a:
                    6e:c6:e9:34:f5:2c:c4:3a:77:56:c2:fd:f8:91:0d:
                    07:55:0e:a7:ab:59:32:a1:50:ab:f4:04:78:5e:da:
                    c9:e3:1b:50:fa:f9:3e:d9:64:ed:b3:c4:d9:82:71:
                    da:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DD:7F:57:3D:09:25:64:B1:86:06:52:29:00:D6:77:8C:53:80:84
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145659.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abc1::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:1a:eb:8f:91:51:11:35:1b:a0:81:57:e6:7a:b1:e9:a5:97:
         c9:4d:09:9c:c5:73:68:6d:01:4f:f8:f0:82:32:f8:a6:22:85:
         72:b6:e0:f9:87:bb:55:ea:61:75:36:0f:d6:12:86:57:60:fb:
         9e:49:d8:18:d1:e8:1f:98:8f:33:e6:7d:5b:e9:49:5b:19:3c:
         66:48:11:89:5f:e8:a0:cb:cb:ff:5f:09:39:b3:d1:06:50:0b:
         b0:91:0d:2e:c1:18:b4:10:8d:c6:f9:a4:5a:f1:d7:aa:72:0b:
         75:1b:c7:1a:75:d8:b4:af:c4:06:f2:cc:60:6d:71:71:ec:03:
         8b:05:9c:cd:59:3b:15:81:a0:d9:4d:f6:c9:cb:43:42:39:7b:
         95:b3:e2:35:6f:09:7e:94:99:93:eb:05:1d:2e:b1:2c:8b:9a:
         35:21:61:be:4c:8c:59:47:0c:19:e0:bb:4a:98:39:41:cb:41:
         45:41:08:d2:0f:35:bb:6c:6f:32:0d:ab:fa:bc:9d:ae:af:26:
         12:d2:9e:18:f7:a1:0f:ae:d8:4b:25:17:19:af:78:6a:62:e7:
         c1:4c:21:4f:26:08:de:a4:54:0d:93:03:ff:68:dd:43:d6:5f:
         cb:b6:09:53:81:06:27:ad:25:7f:cd:18:c3:64:f8:8f:ab:5b:
         ed:3b:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----