Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145673.roa
File:                     AS145673.roa (raw, json)
Hash identifier:          dhC+JeKvULTWtKkvPOUtJ19SPH8S0YxYRyhYYpVdZmo=
Subject key identifier:   18:A7:0C:23:69:53:20:49:35:BF:D9:A4:BE:02:88:48:11:CC:BB:8A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2EE6B03F6C64354A2CB04324163154F93A018F10
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145673.roa
Signing time:             Tue 26 May 2026 06:12:35 +0000
ROA not before:           Tue 26 May 2026 06:07:35 +0000
ROA not after:            Tue 25 May 2027 06:12:35 +0000
asID:                     145673
IP address blocks:        240a:abcf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e6:b0:3f:6c:64:35:4a:2c:b0:43:24:16:31:54:f9:3a:01:8f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:35 2026 GMT
            Not After : May 25 06:12:35 2027 GMT
        Subject: CN=18A70C236953204935BFD9A4BE02884811CCBB8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f3:c9:e7:66:0b:80:86:62:f6:9b:92:f9:75:
                    15:82:87:2e:c9:9f:df:dc:b1:a7:f4:ed:8f:fd:33:
                    27:81:b4:a9:ac:d4:9b:8b:11:48:38:dd:e6:10:5d:
                    cd:2f:45:ca:68:b5:7a:f3:c8:a0:17:5a:fb:b0:65:
                    70:b4:e8:3b:31:38:d9:79:ce:5d:b7:63:45:c8:06:
                    26:e5:d3:cc:51:f5:86:5e:3c:2c:f3:10:67:f3:cd:
                    74:11:56:4d:fb:35:c1:24:2b:74:fd:e9:32:3e:6c:
                    0e:ef:d7:c1:9a:43:59:86:ca:50:f0:17:64:db:aa:
                    19:52:64:d3:96:9f:cd:c2:eb:84:fb:d4:67:4e:ce:
                    a3:6b:6f:ea:83:7e:89:ba:5e:da:78:1a:b1:6f:82:
                    fa:f5:de:03:55:09:10:1e:3f:2c:3c:9e:4d:c1:12:
                    21:0b:38:d7:2a:a4:02:32:50:75:50:6b:94:4b:36:
                    ec:84:23:82:1f:ae:7d:de:ac:7c:20:07:1a:32:94:
                    f8:89:b9:a3:4f:77:03:b1:05:d2:c4:6b:40:79:41:
                    92:e9:43:b5:af:56:82:45:39:65:ac:ad:d5:32:22:
                    25:e5:fc:81:1b:2a:0a:ad:80:2f:33:6a:ad:57:30:
                    e2:2b:de:8d:45:cc:6e:79:e6:c4:2f:71:37:8d:d3:
                    22:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A7:0C:23:69:53:20:49:35:BF:D9:A4:BE:02:88:48:11:CC:BB:8A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145673.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abcf::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:bf:c9:2a:24:bf:f0:a3:f2:24:da:3b:41:2c:b9:74:73:84:
         e6:3b:a8:05:7f:c3:a3:cd:37:73:6d:89:0c:65:16:f9:56:b9:
         a5:81:63:af:60:34:69:3c:3c:22:80:56:80:18:06:d2:3d:9a:
         ac:9d:07:db:fc:e7:63:6b:3b:9b:3f:98:68:e8:ff:d2:6e:8a:
         c0:56:5d:83:50:c2:24:1c:42:31:a9:0a:70:b3:fa:1c:cb:a6:
         d8:5f:da:4e:7c:9c:d8:8d:7c:2a:dc:a9:31:a4:93:70:07:c1:
         a8:18:3d:db:c1:d4:a1:7c:d6:ce:a5:7c:a4:97:96:a5:b4:ac:
         24:6f:32:f0:3c:0c:6f:fd:21:45:b8:f5:86:39:f6:c9:eb:2c:
         5d:f2:31:66:f7:aa:73:e0:1c:df:53:76:2f:d9:d0:6d:f1:ea:
         d5:46:29:bb:b2:97:73:9e:e8:aa:35:99:29:5a:c7:e5:b5:ca:
         73:4d:05:ba:20:c0:a8:b6:fc:ac:00:b1:6e:04:27:22:a5:02:
         47:14:9b:ec:11:15:80:c2:06:72:f6:a4:05:84:30:61:5a:30:
         13:30:20:f8:d9:27:b5:72:5f:18:f9:bb:e0:94:bb:44:3c:f8:
         e9:01:37:7c:2a:19:40:59:3b:ae:ef:da:e0:31:64:99:11:89:
         74:72:69:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----