Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145661.roa
File:                     AS145661.roa (raw, json)
Hash identifier:          a3+O/PhrzBmaWJDI9b/r5wrl3vWw088WbDurcd9qO8o=
Subject key identifier:   D3:7A:3F:C5:F7:E7:89:B9:1D:DF:6B:90:D3:50:D3:8D:8C:1B:6C:22
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       46FBF6E25B7F70C15A8435E8120545E25E23E668
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145661.roa
Signing time:             Mon 25 May 2026 01:38:23 +0000
ROA not before:           Mon 25 May 2026 01:33:23 +0000
ROA not after:            Mon 24 May 2027 01:38:23 +0000
asID:                     145661
IP address blocks:        240a:abc3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fb:f6:e2:5b:7f:70:c1:5a:84:35:e8:12:05:45:e2:5e:23:e6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:23 2026 GMT
            Not After : May 24 01:38:23 2027 GMT
        Subject: CN=D37A3FC5F7E789B91DDF6B90D350D38D8C1B6C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:25:ac:f1:45:d1:8d:2d:bc:81:56:9e:1e:
                    22:db:77:61:9e:59:0b:fe:e4:86:3e:38:44:36:07:
                    08:39:7e:8e:75:21:6b:9b:61:ea:7c:53:0a:57:80:
                    6b:19:bf:04:20:0a:9d:a3:ee:fa:37:cd:c7:e9:cd:
                    12:f1:bf:02:03:69:7c:7e:09:fe:e4:6b:c3:a3:ac:
                    f3:94:c1:63:a0:b9:d2:ba:54:c0:24:45:d3:2f:1a:
                    9d:5d:57:8b:fb:fe:5c:d0:31:43:56:3d:00:81:6d:
                    d0:70:6c:d4:ef:13:fa:5f:bd:ac:66:3e:3e:6c:82:
                    be:59:94:5d:f4:21:13:bd:70:05:68:7f:70:80:80:
                    35:4a:a4:5d:52:60:81:f5:a2:26:ec:45:0d:0a:64:
                    54:26:77:76:e3:aa:8d:c8:ee:67:4f:1d:2d:39:c2:
                    39:ef:33:de:84:04:5d:1c:23:83:94:b2:3e:56:8d:
                    5f:3b:a6:3c:d1:2e:40:38:68:f2:f5:4c:a0:a4:60:
                    a2:e2:b1:b2:7b:b2:8f:a0:b4:99:0e:70:87:12:9a:
                    a4:f0:2f:b6:e5:c2:cb:0a:d2:1f:12:d9:60:75:e7:
                    2c:bc:af:b4:b0:6e:99:b7:34:7c:51:fd:b8:96:e6:
                    60:da:6a:0c:aa:bf:17:55:8b:97:7b:aa:f5:9d:d3:
                    e2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7A:3F:C5:F7:E7:89:B9:1D:DF:6B:90:D3:50:D3:8D:8C:1B:6C:22
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145661.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abc3::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:f2:83:88:2f:0b:ce:7f:81:e2:8b:86:11:96:c4:50:e4:26:
         46:aa:0c:89:42:7a:57:30:5b:d9:f7:67:68:1a:6d:32:8c:82:
         3a:b7:e9:8b:e5:7a:e3:f7:7d:9b:09:7e:22:24:da:bf:15:50:
         63:5e:03:6e:d7:ba:12:08:17:4a:07:e7:c8:b4:ec:1b:68:e0:
         da:12:6b:6f:b7:98:b1:f3:9a:0d:fc:0d:3f:62:9d:0b:b0:a8:
         d4:df:af:3f:12:8f:92:a7:98:c9:73:90:68:18:79:1c:92:0a:
         9f:71:a0:06:82:75:a1:78:39:6c:7b:56:ed:3c:ce:04:6c:2c:
         ff:a9:88:74:71:0b:9e:db:60:a6:e9:05:12:af:54:cb:4f:0e:
         7a:5e:77:3b:75:51:73:14:28:5d:10:01:5b:ab:8b:67:79:9b:
         23:24:aa:ea:c3:bf:56:22:9f:a3:e5:7f:a8:12:7a:96:e3:fe:
         d7:cc:ab:0f:f0:b5:f0:db:2e:93:02:10:28:a3:f8:1e:84:a9:
         eb:66:6b:e9:86:9d:f1:b4:f0:c4:05:00:b8:74:2c:b9:d0:15:
         ca:d0:50:f6:c4:96:07:63:e7:95:92:22:ff:2c:9f:08:c0:c4:
         72:52:7e:7c:86:0e:f9:3d:78:39:ad:39:29:18:97:35:97:7f:
         06:14:a9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----