Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145688.roa
File:                     AS145688.roa (raw, json)
Hash identifier:          xhODRXId3ENTY1+wEPjLMhJkpL0G9RP7/GlOupFiHd8=
Subject key identifier:   CB:FF:25:8C:BC:1B:6E:AB:1E:0D:4F:7C:72:C2:96:A8:12:78:78:6E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       057A7527C8343259E3AEA6E1CC12E301C0247BC6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145688.roa
Signing time:             Fri 22 May 2026 07:41:24 +0000
ROA not before:           Fri 22 May 2026 07:36:24 +0000
ROA not after:            Fri 21 May 2027 07:41:24 +0000
asID:                     145688
IP address blocks:        240a:abde::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7a:75:27:c8:34:32:59:e3:ae:a6:e1:cc:12:e3:01:c0:24:7b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:24 2026 GMT
            Not After : May 21 07:41:24 2027 GMT
        Subject: CN=CBFF258CBC1B6EAB1E0D4F7C72C296A81278786E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:23:0f:25:4e:ba:54:9b:70:74:dd:0f:b5:
                    8c:1f:f2:17:f4:f1:be:10:3f:bc:e2:71:81:b2:2a:
                    b4:bd:01:ec:fd:07:c0:4c:98:51:a8:8a:db:f0:e9:
                    42:10:03:50:68:a4:ff:07:4f:8e:50:3c:84:80:3b:
                    98:1b:81:4c:fb:25:79:0c:7a:3e:0d:8b:44:ea:34:
                    a7:3d:e7:cb:60:49:0c:cc:dc:53:55:f8:3b:04:55:
                    6b:33:2b:ea:a7:f6:3a:4e:f9:1b:f8:79:81:0c:97:
                    37:49:ef:3b:0e:c4:56:8e:e1:9d:22:aa:21:e6:da:
                    53:76:5e:a8:b6:8c:dc:bf:72:44:37:3b:8e:aa:e5:
                    76:5a:84:82:ff:4d:11:35:a9:99:13:9a:ac:af:06:
                    b3:79:82:81:91:b0:13:0c:1c:af:24:c7:44:e4:51:
                    e1:e1:8a:08:7a:f6:aa:e5:95:39:d6:c3:2f:c0:ff:
                    8c:5b:e9:a9:c1:f5:32:8c:f6:3f:67:54:ed:f3:37:
                    6d:2a:6f:75:19:e3:a9:6b:41:f3:dc:a0:15:df:83:
                    11:ed:45:f2:f5:e8:08:8e:bd:96:91:04:99:75:65:
                    4b:8a:70:f8:1d:5b:0a:89:9e:c8:ca:d6:a9:17:54:
                    f3:27:08:48:a5:3a:dd:70:15:bc:a6:58:e8:e4:98:
                    8a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FF:25:8C:BC:1B:6E:AB:1E:0D:4F:7C:72:C2:96:A8:12:78:78:6E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145688.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abde::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:e0:03:8b:75:39:38:4c:da:a8:0d:36:a1:86:18:a6:5d:72:
         48:8c:f1:0d:81:c6:a8:bb:4a:a6:8c:66:b4:2a:49:5b:38:3e:
         ec:78:84:40:9d:41:ec:21:c9:91:ef:4b:24:bf:3f:ba:91:96:
         1d:33:52:13:15:f9:13:e5:07:93:04:c1:d6:82:bc:ff:b3:ad:
         9c:ed:91:fa:d3:e2:e0:ce:10:98:3f:9d:88:e7:e9:03:2a:d1:
         95:3a:9f:63:4b:75:19:57:32:f9:19:86:df:8c:06:b9:7a:cf:
         d3:6f:34:92:c1:f8:03:49:c9:3f:94:2a:6a:c4:52:82:ae:e8:
         b1:01:66:52:53:d9:59:fd:bd:6d:50:b6:5b:a3:b6:60:3e:e2:
         9c:d2:39:76:39:d4:cf:96:d8:d9:df:22:f1:a5:a7:f5:a8:d0:
         d6:9e:e6:d9:54:1a:6b:ca:cb:95:3c:a2:2a:99:0e:cd:c4:f5:
         2a:05:c8:32:d3:8f:38:b6:f9:f1:0e:49:88:48:ae:d2:5a:ce:
         bb:c6:b2:aa:1c:2b:1f:59:10:af:22:03:1e:33:8b:b6:8f:84:
         64:9e:2d:33:5b:7e:aa:89:5a:20:70:8a:3f:91:1b:7f:57:c0:
         ce:8c:ef:01:74:19:e6:4b:9d:c5:91:6e:25:76:93:1d:1d:e2:
         02:26:64:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----