Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145759.roa
File:                     AS145759.roa (raw, json)
Hash identifier:          ujlEmwN14u1uO5Jy4ZbS9cwlxy4lrerwhZWmJILjgOQ=
Subject key identifier:   F2:82:43:79:CA:30:C0:68:B7:2E:45:1B:49:7F:F8:EB:82:5C:12:42
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       43DE09904C81B46CBF8854E83F0F7F27921B7E65
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145759.roa
Signing time:             Tue 26 May 2026 06:12:51 +0000
ROA not before:           Tue 26 May 2026 06:07:51 +0000
ROA not after:            Tue 25 May 2027 06:12:51 +0000
asID:                     145759
IP address blocks:        240a:ac25::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:de:09:90:4c:81:b4:6c:bf:88:54:e8:3f:0f:7f:27:92:1b:7e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:51 2026 GMT
            Not After : May 25 06:12:51 2027 GMT
        Subject: CN=F2824379CA30C068B72E451B497FF8EB825C1242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:cb:ae:e0:ab:06:06:60:0b:25:10:be:01:
                    b1:3c:df:d2:d4:c0:37:59:b7:e4:b8:cd:66:b3:c8:
                    ab:5c:49:aa:ed:60:53:9a:ef:94:bb:43:65:10:0f:
                    2c:8a:9f:4b:0a:c4:01:97:1b:a0:0c:bd:5a:77:36:
                    38:86:1d:af:a5:28:73:91:48:70:ad:7a:c6:c8:12:
                    38:1d:57:07:6a:59:01:57:11:94:24:28:a8:06:42:
                    30:d1:3c:2d:8f:e2:67:0d:eb:17:c4:95:99:41:43:
                    1d:95:f2:ea:0a:89:f4:05:be:cf:66:39:11:e7:23:
                    c2:e9:9f:51:3b:6d:7c:8c:ec:04:65:63:94:7a:36:
                    8c:32:9e:0f:c0:cc:4c:76:f9:0a:14:22:89:4e:e8:
                    45:32:90:b5:a0:f4:da:93:51:f2:bc:7d:68:2b:5a:
                    6e:67:14:3c:e3:73:9c:c3:be:b3:97:2e:b8:21:c7:
                    24:ed:d9:cb:42:5d:bd:10:cd:13:ea:c1:11:f0:81:
                    81:62:89:9c:1f:64:38:68:09:56:44:82:8d:40:9c:
                    df:e1:07:fe:9a:cc:78:08:3a:84:2a:a5:11:7b:f9:
                    fe:8a:eb:59:09:02:da:07:7c:e0:67:76:1f:fa:36:
                    d3:e1:66:67:89:64:95:43:7b:2f:5d:ab:73:f7:fb:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:82:43:79:CA:30:C0:68:B7:2E:45:1B:49:7F:F8:EB:82:5C:12:42
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145759.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac25::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:95:e8:8c:9c:ba:1e:5f:ff:66:02:d9:9b:57:14:3f:2c:ed:
         e0:71:b7:ed:dc:97:23:60:41:75:42:72:05:a4:12:34:e6:b6:
         22:24:be:a9:0a:09:48:6e:2a:69:da:7a:48:b9:d0:e2:27:73:
         5e:e3:33:91:86:2e:4a:8d:3b:28:00:55:41:29:93:79:21:1e:
         64:78:f5:8f:a4:e2:90:f2:22:87:8f:26:12:42:a6:3d:c3:fb:
         a6:12:61:72:a3:ab:dc:16:13:a0:ba:21:4c:1c:ab:49:1d:ef:
         00:a0:d8:ec:59:42:c9:c4:5c:2b:2b:d8:9a:78:d4:96:be:35:
         37:00:8d:ec:55:1f:79:ce:fb:9a:5b:0e:51:37:08:61:a6:c1:
         a2:5f:ec:6f:6c:13:4f:9f:69:b6:26:bc:bc:12:af:52:b9:18:
         c5:78:40:3b:64:97:fa:aa:e1:c1:18:1a:59:7f:cb:ac:b0:64:
         fd:e4:29:50:f2:b2:d1:94:d0:09:97:fa:09:cd:5e:4c:d0:62:
         3c:87:ae:5e:94:75:6f:0d:6d:81:10:2d:39:3d:78:25:4b:64:
         8b:c0:93:7d:24:fd:fd:b5:4c:09:e1:70:f7:37:7a:83:88:56:
         93:e1:6e:64:7d:57:26:ab:2f:fa:62:e1:ca:70:57:7a:ce:f5:
         56:75:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----