Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145715.roa
File:                     AS145715.roa (raw, json)
Hash identifier:          e9TODj3c6Vhb3YMbwF9gWjarqARNAJ/q9Omqy8lHV0w=
Subject key identifier:   2A:B8:5A:09:A6:96:47:40:AD:96:24:75:3A:97:07:FE:67:A3:2B:72
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       328333AF3D2EB7196A5985EADBC36E1FB3170CB0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145715.roa
Signing time:             Tue 26 May 2026 03:17:09 +0000
ROA not before:           Tue 26 May 2026 03:12:09 +0000
ROA not after:            Tue 25 May 2027 03:17:09 +0000
asID:                     145715
IP address blocks:        240a:abf9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:83:33:af:3d:2e:b7:19:6a:59:85:ea:db:c3:6e:1f:b3:17:0c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:09 2026 GMT
            Not After : May 25 03:17:09 2027 GMT
        Subject: CN=2AB85A09A6964740AD9624753A9707FE67A32B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:92:49:3d:b0:e4:ca:d2:4a:e5:83:b7:ac:b0:
                    fa:a8:fe:bb:18:f6:46:3d:ea:67:9d:53:a6:4f:3d:
                    3a:09:77:29:04:a5:7c:9d:35:c9:91:f7:cf:a1:97:
                    43:a2:84:75:01:a5:3e:bd:12:e1:54:07:fa:c7:94:
                    d8:97:dc:42:6b:e0:c6:d8:ba:36:ae:62:84:42:80:
                    37:81:13:ae:7c:c5:41:6c:03:a3:f8:55:aa:dd:09:
                    bf:ae:13:2c:c7:45:92:bb:70:4b:21:c3:b6:d6:fd:
                    a3:4a:a0:2c:bc:ff:78:f7:27:78:f9:a4:3e:9a:ac:
                    28:7e:64:68:46:3b:c5:60:64:6a:33:d9:6e:e9:67:
                    68:51:bc:a1:96:de:b5:83:7b:ef:b6:e3:1e:04:6c:
                    2f:56:2b:8c:ff:28:f4:9e:7c:f4:5c:25:6f:83:32:
                    34:6f:d0:aa:a8:0f:e7:33:18:17:9e:d9:fb:12:8d:
                    de:6a:ac:04:cc:fc:14:5b:9f:b7:e0:4c:91:12:25:
                    0f:7e:c0:4b:af:44:07:7c:e5:76:3d:3d:80:bc:5e:
                    75:ba:22:99:10:82:e7:ff:bd:53:b1:20:06:c1:56:
                    af:60:f4:62:9b:be:da:86:dc:ed:0e:84:d1:70:d9:
                    5d:f7:7b:be:cb:52:61:1e:c0:43:f0:b2:9f:2c:10:
                    91:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B8:5A:09:A6:96:47:40:AD:96:24:75:3A:97:07:FE:67:A3:2B:72
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145715.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abf9::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:c8:16:de:06:c3:15:2f:18:68:12:9e:d4:a1:25:d2:83:91:
         d3:0c:2f:e4:cc:b9:34:d7:73:89:13:4d:a3:41:45:e3:82:c8:
         45:df:a0:d8:fe:ac:6a:f0:af:0f:04:b9:b4:3d:e4:d1:de:ba:
         06:e7:33:a3:e8:c1:d5:84:4f:74:f0:ef:3c:b0:b9:2c:44:e6:
         85:13:fa:b4:47:78:5f:be:94:a2:e0:eb:c8:86:78:fe:00:71:
         0a:a9:fa:a3:63:f9:4f:9b:2a:a0:da:34:0a:89:4d:f6:7c:e4:
         d6:dc:fd:4e:18:c8:40:18:69:71:a0:44:02:6f:7c:0b:f5:5c:
         5e:95:58:29:13:85:0e:3e:54:2b:ca:5e:e2:87:3e:2f:c0:78:
         c6:12:76:a1:34:21:c1:d0:cd:d4:54:56:70:e3:c6:71:c8:26:
         6b:b4:09:bf:b3:3a:7a:03:ff:37:64:31:4a:f9:ec:25:96:e1:
         cf:b1:8d:46:40:e1:43:5f:10:eb:bd:d3:0c:af:fe:e1:51:77:
         b2:83:dc:5e:3e:eb:36:51:4d:18:8f:82:c2:31:04:c6:d6:8f:
         54:3e:7a:28:27:7f:91:95:d3:2e:69:f6:14:d2:e5:85:0f:f0:
         9e:b6:ed:de:84:44:38:94:2a:65:72:6d:14:da:34:01:b9:21:
         7e:ae:2c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----