Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145717.roa
File:                     AS145717.roa (raw, json)
Hash identifier:          fMEq7ScI77NlSesdPAVXJed9/fQ9UvhI0VytG1oEx74=
Subject key identifier:   20:9D:8A:55:FE:4D:43:05:8C:98:EB:E6:05:1D:B3:02:8B:B6:B7:E3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1AEBF498ECBA2A3C0C9454A6C191D8668EFB7AF7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145717.roa
Signing time:             Tue 26 May 2026 06:12:48 +0000
ROA not before:           Tue 26 May 2026 06:07:48 +0000
ROA not after:            Tue 25 May 2027 06:12:48 +0000
asID:                     145717
IP address blocks:        240a:abfb::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:eb:f4:98:ec:ba:2a:3c:0c:94:54:a6:c1:91:d8:66:8e:fb:7a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:48 2026 GMT
            Not After : May 25 06:12:48 2027 GMT
        Subject: CN=209D8A55FE4D43058C98EBE6051DB3028BB6B7E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:c4:9d:63:00:75:aa:08:9b:6b:95:11:d9:
                    72:21:d3:4a:86:1e:19:d0:2e:36:b2:7b:cc:02:3e:
                    6d:d4:57:8e:57:fa:ed:4d:72:23:b2:be:c5:a2:9d:
                    26:55:6b:97:cd:e6:3c:f6:88:ce:9b:14:85:b2:3c:
                    58:3f:b8:22:bb:e8:64:0c:84:2d:3a:45:75:4c:d0:
                    e7:fb:28:d3:5b:7a:56:0b:93:c9:ee:74:57:a8:32:
                    5e:d8:04:02:04:b5:23:9c:95:76:6e:ce:38:8d:ba:
                    0c:12:38:0c:84:a5:09:f5:3d:ea:50:56:7f:67:b6:
                    98:c8:92:1b:36:46:b8:fe:50:52:2c:47:a1:ce:7b:
                    19:d3:7c:10:ff:b9:21:5b:29:fb:c4:a5:71:dc:6f:
                    56:45:78:78:fa:4c:a3:60:5e:1d:23:14:03:4e:13:
                    69:f5:08:7f:3a:25:88:a1:a0:a6:c5:38:e2:dc:b0:
                    d8:8c:52:93:14:19:1a:bb:06:ef:5b:37:5e:22:a2:
                    d2:aa:de:15:ee:a7:ac:d6:22:d9:c5:87:44:6d:8d:
                    75:9a:d3:09:9e:a5:e2:cb:13:2f:d2:af:c3:53:15:
                    f0:77:5b:06:6f:ae:cd:30:d9:13:50:a9:65:5f:12:
                    00:51:7b:2e:33:64:d6:61:5b:1d:2d:00:35:08:2a:
                    e8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9D:8A:55:FE:4D:43:05:8C:98:EB:E6:05:1D:B3:02:8B:B6:B7:E3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145717.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abfb::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:6d:71:68:be:0b:7f:b0:10:59:2d:42:84:77:f7:1c:62:de:
         6a:43:d2:1b:d2:81:6c:ee:e1:a4:06:cc:ca:c6:b5:64:47:a3:
         a8:3f:45:87:d8:d1:3b:80:da:5a:ca:c3:9b:c6:6a:18:54:da:
         fc:70:32:c5:ee:8f:1d:5c:36:bf:89:d8:3c:1a:2e:5e:38:f0:
         cf:a4:0a:97:a8:bf:54:43:10:b3:e5:0f:5a:a1:ca:54:d6:04:
         f3:89:b7:bf:e5:31:93:8f:7e:08:f1:96:b6:fa:92:5d:6e:2e:
         68:4f:67:75:b2:2f:3e:40:6f:68:61:06:97:40:20:9e:10:d2:
         d0:0d:89:8c:7c:3f:2f:24:a5:fa:d0:9a:b5:bc:c4:0b:66:46:
         03:11:c6:68:13:df:46:f4:f0:99:d8:78:e4:c9:1f:c7:27:fc:
         da:fe:36:e0:d1:25:03:cf:2b:31:04:31:07:0c:2d:23:25:68:
         00:53:8e:2d:99:89:9a:e4:11:88:c3:97:30:91:1f:92:ef:31:
         f4:9c:0e:65:28:62:fb:ee:2f:e1:d6:b0:60:b8:af:da:f5:12:
         90:ec:bd:ba:fe:53:a8:33:ee:00:ec:bc:17:83:c4:4f:df:de:
         28:36:1f:36:ba:80:c8:42:41:e3:76:04:8a:7f:88:01:a2:9d:
         a7:ab:21:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----