Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145744.roa
File:                     AS145744.roa (raw, json)
Hash identifier:          zeF4ITsHFcZerQ+q7ODEBLzFH4W9dOrBvKvBM8VUvww=
Subject key identifier:   02:D2:F4:93:CC:73:3F:D1:B4:02:6E:18:72:FC:FE:CD:34:02:62:85
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       79838147E4CC132E366D7EDD1171914F566D605A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145744.roa
Signing time:             Fri 22 May 2026 07:09:11 +0000
ROA not before:           Fri 22 May 2026 07:04:11 +0000
ROA not after:            Fri 21 May 2027 07:09:11 +0000
asID:                     145744
IP address blocks:        240a:ac16::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:83:81:47:e4:cc:13:2e:36:6d:7e:dd:11:71:91:4f:56:6d:60:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:11 2026 GMT
            Not After : May 21 07:09:11 2027 GMT
        Subject: CN=02D2F493CC733FD1B4026E1872FCFECD34026285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:61:0d:c2:80:e9:63:1e:08:df:98:e8:c8:db:
                    d2:81:99:1f:f4:a7:bf:76:95:2f:fc:0b:25:c3:da:
                    8e:94:34:2a:82:f5:d4:0e:54:78:78:35:a9:f1:df:
                    61:30:93:ae:b7:d0:af:43:fb:db:2c:c3:4a:82:ed:
                    57:30:f4:aa:64:36:ab:a1:b4:47:23:da:c5:e4:cf:
                    56:17:48:35:ad:cd:0c:fe:c4:71:34:d0:4d:7b:0c:
                    40:2a:c7:b3:d9:bb:e0:97:01:dc:9b:33:6f:8f:49:
                    c2:11:a9:6f:88:2f:3b:3f:6f:83:09:7c:e7:85:ed:
                    74:89:af:2c:72:a5:93:fe:05:e4:15:d6:76:bf:93:
                    da:81:4f:bf:12:a2:07:0f:79:33:48:66:7c:97:4c:
                    69:bd:84:57:da:29:05:ad:7d:9e:c0:69:ef:49:71:
                    6e:eb:2e:49:54:80:b3:2d:b7:4d:21:75:67:da:79:
                    04:ea:7d:c8:79:bc:73:eb:76:96:26:9a:fa:11:79:
                    e2:aa:c5:1c:b6:9a:d5:1c:a0:87:32:ce:7d:5a:ca:
                    9d:03:7a:4b:b0:c7:18:36:5e:38:c3:31:d5:a1:86:
                    62:86:08:3d:8e:61:56:55:73:a4:f2:a8:dc:f9:f0:
                    1f:3e:99:98:4d:0f:3b:f7:30:02:2f:2f:12:98:9b:
                    91:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D2:F4:93:CC:73:3F:D1:B4:02:6E:18:72:FC:FE:CD:34:02:62:85
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145744.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac16::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:33:6a:4f:8f:54:b2:8b:36:05:7b:2e:6a:d9:03:1a:2b:a1:
         0f:60:9c:6c:53:02:cd:97:20:07:32:b0:99:71:10:96:18:4a:
         80:84:ed:e7:b2:5c:e8:9b:f1:77:cc:e7:69:92:7a:5a:29:4c:
         fb:58:56:c3:50:86:8a:58:49:91:d7:4e:86:23:74:53:e0:54:
         ad:35:2a:ad:9a:7a:0e:fb:8a:f1:d1:67:d9:21:b3:f3:fa:8e:
         14:31:16:12:f5:f0:06:2c:bd:cd:19:1e:0d:87:db:32:77:15:
         dc:7d:4d:dc:84:f4:74:c0:39:70:a2:08:bf:ae:9d:9e:4b:a2:
         32:94:9b:61:fb:2b:83:45:d8:b6:7f:df:ba:97:00:2e:e1:3f:
         9b:68:f5:24:6a:dd:97:38:b6:64:88:43:c9:2b:e8:60:8d:d9:
         41:f4:1a:9f:bc:0c:06:e5:5f:82:d3:f5:41:f7:b4:77:d8:9e:
         3b:75:c3:a4:74:54:8d:ff:bd:49:0d:92:84:54:0c:02:f4:65:
         fd:07:4f:45:bb:e6:66:8c:49:4e:52:3e:87:a3:a4:e3:67:c4:
         8b:15:83:64:91:2a:58:03:21:2c:cc:2e:0b:74:40:fe:e5:ff:
         67:2f:d9:09:9d:51:40:a8:15:15:3d:1d:f5:04:37:f2:28:77:
         b0:fc:a8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----