Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145714.roa
File:                     AS145714.roa (raw, json)
Hash identifier:          nq/nJyo/udH2ATTben8c2Q8USr7D9pnsSpPG3KUdwsY=
Subject key identifier:   7B:EE:22:86:3E:31:2F:38:96:C9:9B:DF:F7:4E:67:29:D1:EA:F5:D2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       430BB5A1C266BDF83305B6C61FEA67B334C8EB77
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145714.roa
Signing time:             Fri 22 May 2026 07:41:18 +0000
ROA not before:           Fri 22 May 2026 07:36:18 +0000
ROA not after:            Fri 21 May 2027 07:41:18 +0000
asID:                     145714
IP address blocks:        240a:abf8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0b:b5:a1:c2:66:bd:f8:33:05:b6:c6:1f:ea:67:b3:34:c8:eb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:18 2026 GMT
            Not After : May 21 07:41:18 2027 GMT
        Subject: CN=7BEE22863E312F3896C99BDFF74E6729D1EAF5D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:d3:54:2c:13:ab:ed:cd:43:a2:50:40:a4:
                    7f:23:4f:d4:9c:56:5b:f1:35:91:d4:26:c0:4d:34:
                    92:92:ed:0e:d5:65:3f:b8:08:e9:74:0f:21:e0:a0:
                    00:e4:03:e9:5e:b8:03:60:2d:cb:72:d1:38:a2:54:
                    4c:6d:74:77:25:5f:67:05:99:73:3e:ea:85:d7:f8:
                    da:5f:fa:c4:b7:8a:ec:e2:05:37:d0:ce:86:d9:58:
                    08:a6:6b:ae:7c:87:a6:a9:4d:fb:1e:7f:00:8f:98:
                    31:36:8f:8b:6e:37:a4:c7:46:23:1c:05:fa:3b:7e:
                    ed:ef:e3:ef:51:e1:7f:c3:9e:3a:7a:83:f0:74:83:
                    c4:a3:ab:08:0e:d8:66:8f:d8:00:12:14:b5:c9:e8:
                    32:d4:70:a8:7f:92:e2:5c:9f:56:dd:1a:95:8d:5a:
                    82:23:75:69:91:bd:f9:4b:3e:f9:87:60:12:a2:59:
                    9a:69:46:32:00:72:d0:9c:7d:57:1d:24:1d:06:7a:
                    c5:a5:6b:03:91:76:18:f0:2e:e1:81:e0:29:c9:f2:
                    8c:33:30:33:20:81:8f:bd:4d:ff:46:59:da:52:c7:
                    86:cb:0e:30:e9:f5:28:de:1d:f8:8d:95:82:6f:62:
                    2b:4c:e9:01:50:49:bc:65:4c:4d:06:c6:f4:c9:af:
                    c3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EE:22:86:3E:31:2F:38:96:C9:9B:DF:F7:4E:67:29:D1:EA:F5:D2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145714.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:dc:c7:eb:82:97:0f:c9:7b:f9:31:ca:ff:97:5b:07:ba:09:
         80:2e:b2:ff:f7:58:c0:d2:3b:12:ca:f2:f7:9d:a3:c4:18:c4:
         8b:d9:6f:94:81:2d:48:ef:49:e8:00:7b:df:73:9e:32:95:64:
         15:af:ab:a6:a5:c5:6d:3f:3d:71:6e:5d:d4:42:23:1e:3b:fa:
         a7:b6:c7:2a:ed:29:c9:dc:87:97:b5:b5:13:4b:2d:0c:ec:b3:
         64:93:8d:8c:21:14:eb:b1:20:03:af:d8:a9:81:1e:c6:a9:da:
         ac:b4:2c:97:80:08:40:57:56:5a:90:ea:7f:24:65:57:32:00:
         fc:13:c1:72:d2:98:02:72:a4:91:98:aa:e5:d2:40:cb:d5:ba:
         80:7c:91:8e:37:97:0e:f4:ca:d0:2a:5e:af:1f:02:7f:f2:eb:
         68:00:db:83:f3:4e:bb:6f:66:86:34:27:ec:db:9c:e7:f8:dd:
         fc:12:77:5f:ae:0b:54:63:b5:73:5e:d1:5b:18:d0:db:ad:8c:
         bf:d6:4d:0b:98:89:3b:d8:ff:1c:9d:84:38:ef:4a:ea:58:c1:
         c6:f0:a7:df:8f:d2:25:20:95:ef:e3:93:e9:91:8b:f7:fd:52:
         82:57:69:86:19:d3:da:78:11:6f:74:62:ea:84:f2:af:74:77:
         a1:c8:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----