Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145680.roa
File:                     AS145680.roa (raw, json)
Hash identifier:          ZrZhH+qGduExb0uf15Cr/sMcVNhsVVqnutF35yiTu54=
Subject key identifier:   17:48:C7:D5:72:B2:26:36:3A:40:7D:4D:13:89:67:F1:10:0E:DB:0B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       444F65724920C0CF72BB6C80ABF2D4623932E11A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145680.roa
Signing time:             Mon 25 May 2026 02:22:37 +0000
ROA not before:           Mon 25 May 2026 02:17:37 +0000
ROA not after:            Mon 24 May 2027 02:22:37 +0000
asID:                     145680
IP address blocks:        240a:abd6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4f:65:72:49:20:c0:cf:72:bb:6c:80:ab:f2:d4:62:39:32:e1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:37 2026 GMT
            Not After : May 24 02:22:37 2027 GMT
        Subject: CN=1748C7D572B226363A407D4D138967F1100EDB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:0d:95:bd:5b:fd:85:44:17:e6:23:16:61:
                    da:67:37:8c:04:44:d5:07:ca:a6:35:11:4d:f9:73:
                    5b:1d:38:85:ed:23:67:c8:8e:3b:1c:00:79:25:dd:
                    42:23:c1:3c:81:77:ee:87:0c:b8:b4:1d:dd:e9:83:
                    fa:f0:74:9b:e1:ae:78:5a:16:ee:3e:0c:59:71:e2:
                    06:43:60:6c:73:29:89:e7:06:17:b8:94:f9:e8:b2:
                    69:5b:91:8b:0d:ae:f1:9b:1d:9a:d1:63:53:da:01:
                    56:53:8f:76:2e:59:c2:de:c0:62:ce:d1:56:44:86:
                    6c:e9:9c:80:de:db:9e:26:7a:66:9c:62:df:e9:94:
                    91:ce:25:c9:e3:c2:3e:fd:12:23:b7:3c:e6:b9:22:
                    de:f4:60:c1:55:27:69:65:57:6b:07:ed:d4:a9:b8:
                    b6:b6:53:48:d5:f5:7a:e8:0f:47:8d:bb:c0:48:6d:
                    a6:e1:e4:50:86:14:4d:1b:56:60:54:b7:18:8d:68:
                    16:b3:ef:31:a4:c9:ea:b7:92:1e:68:82:ab:56:0b:
                    45:01:a9:5b:ce:82:eb:3b:48:24:c3:16:b6:32:f1:
                    1b:30:7b:4c:5f:ec:e6:8a:6e:07:6f:a9:c0:88:95:
                    7e:02:5c:6f:fb:41:1d:61:e6:27:2a:19:61:ed:de:
                    9d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:48:C7:D5:72:B2:26:36:3A:40:7D:4D:13:89:67:F1:10:0E:DB:0B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145680.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abd6::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:8d:a3:b2:bf:92:ac:ee:a5:88:a0:2e:52:6a:b7:a5:49:64:
         cc:1f:da:5c:01:11:34:5c:6d:ed:fb:79:a2:b2:ef:d6:35:b3:
         18:bc:b2:59:48:80:7b:0e:0d:1e:1f:3b:58:e3:31:21:5d:7d:
         0d:a6:28:73:07:c4:fe:db:1f:0c:7e:92:5e:87:24:9f:61:ff:
         e6:4a:a4:22:cc:7e:6b:41:5f:e6:84:82:b7:f3:a3:59:c7:9d:
         77:44:c8:e3:7e:73:73:ce:50:b0:8b:68:1f:12:26:26:76:91:
         bc:f4:82:96:29:ea:d1:5f:18:df:00:88:15:3f:2e:b8:9a:80:
         e7:d4:28:f3:d1:35:be:f9:18:ea:41:33:b8:f5:9e:9b:55:1d:
         e6:13:85:63:b2:78:f5:ca:fc:a8:1d:64:02:f7:04:57:ee:e4:
         a8:b6:4e:5f:2f:06:c3:19:2c:c7:f1:33:f6:39:f9:14:c9:95:
         fc:80:4e:86:c0:ab:3c:bc:b6:85:44:b9:a4:60:9d:d4:f9:f5:
         88:95:48:29:27:84:30:27:2a:80:eb:d2:37:78:1a:87:be:19:
         90:d9:35:08:49:4b:ae:65:71:af:54:b2:0c:e9:bb:55:d5:1f:
         24:a6:f3:27:49:7b:9b:93:d2:e7:c1:9c:0e:4a:c1:23:98:e9:
         a5:b3:08:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----