Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145757.roa
File:                     AS145757.roa (raw, json)
Hash identifier:          R3m4JO4PRPvr0r2av23KL+riK+GIUjJcK8dFiegRkbE=
Subject key identifier:   0D:1B:0B:95:33:3D:A5:A1:3E:E0:CF:81:83:A1:DA:FC:F8:CE:70:38
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       48CD9A232EE2B93D1C5E2A75C7DB7B835E8A38CE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145757.roa
Signing time:             Tue 26 May 2026 08:52:56 +0000
ROA not before:           Tue 26 May 2026 08:47:56 +0000
ROA not after:            Tue 25 May 2027 08:52:56 +0000
asID:                     145757
IP address blocks:        240a:ac23::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cd:9a:23:2e:e2:b9:3d:1c:5e:2a:75:c7:db:7b:83:5e:8a:38:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:56 2026 GMT
            Not After : May 25 08:52:56 2027 GMT
        Subject: CN=0D1B0B95333DA5A13EE0CF8183A1DAFCF8CE7038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:d3:7d:6c:d1:e0:bb:b1:1a:0d:ed:9f:b0:
                    5d:4b:81:ed:72:6f:fa:7c:f2:1f:ac:a2:33:6d:0e:
                    27:1e:2e:da:ad:78:01:fe:dd:14:f2:75:3c:04:de:
                    93:70:9f:86:7d:88:c0:e8:cc:ea:a2:d7:72:ea:a5:
                    8d:00:45:17:52:56:de:9f:e5:b9:aa:ee:33:3c:79:
                    c1:c3:15:5f:0d:da:c1:c7:6e:68:f4:06:d1:8a:fe:
                    db:0e:ae:b9:2c:a5:4a:eb:0c:f8:ca:1a:93:02:63:
                    06:ff:aa:c5:58:4a:45:4b:ed:d4:04:2a:6b:b3:68:
                    e5:86:79:0b:df:88:b7:27:ae:79:c4:06:43:37:df:
                    a8:0a:c7:4f:b2:25:4b:61:aa:25:1d:1d:8d:2c:0d:
                    7a:83:39:01:63:fc:f1:c3:01:f2:e1:69:71:f2:1e:
                    52:d0:a1:9c:62:c6:f3:0d:d3:52:6c:8c:28:7c:7e:
                    b9:92:67:eb:71:3a:a2:5c:14:75:8c:b3:cd:77:af:
                    b0:07:21:ed:73:6f:3f:26:f5:3f:4c:43:ad:1c:04:
                    53:9d:be:57:72:cb:9a:b0:1b:d2:e4:4e:4f:ab:c2:
                    54:1f:d7:6b:46:fe:ae:b7:eb:78:d5:fd:26:bd:77:
                    48:28:ee:cb:35:aa:23:2f:5a:51:31:7d:09:d4:d6:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1B:0B:95:33:3D:A5:A1:3E:E0:CF:81:83:A1:DA:FC:F8:CE:70:38
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145757.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac23::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:89:93:b1:f9:e1:fd:0f:a2:eb:2b:f4:99:3a:39:de:28:4a:
         94:05:27:a3:d4:19:e7:96:da:38:ac:2f:b7:9a:4f:73:9f:e2:
         f3:76:1c:8c:3d:fc:9e:2f:76:ad:07:2e:e1:67:85:03:51:34:
         2b:26:cc:12:d7:32:5b:f5:48:89:6a:7a:68:64:21:d2:5d:c2:
         b2:c3:d2:08:3b:1e:f7:0c:cd:32:84:15:45:15:3b:22:6c:8e:
         db:81:f5:ea:1c:d3:7c:ed:be:9f:6a:70:74:0a:fa:da:ae:b9:
         7c:44:27:15:a7:40:8e:46:62:fb:35:6d:72:d8:a3:7d:0e:0e:
         d3:f7:dc:09:2a:b9:a8:aa:bc:a1:4d:a0:39:e8:44:a8:55:e0:
         dd:3f:73:84:45:f8:fc:17:7a:ad:9f:bc:1f:40:50:37:18:9c:
         68:26:ee:84:7c:32:99:15:a2:10:7d:d7:f9:07:14:58:02:3f:
         1c:da:28:95:4f:5d:d1:97:9a:4a:d2:56:50:13:cb:2a:d6:ea:
         08:99:ea:1d:06:c0:04:b2:75:6a:b5:8b:3f:b1:17:8b:a6:2c:
         11:37:aa:b7:4d:74:eb:39:69:ef:9f:a2:96:16:55:dd:4a:98:
         d1:23:a2:cb:29:be:3a:6f:33:95:e9:62:3c:92:3e:48:c9:7a:
         d4:08:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----