Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145762.roa
File:                     AS145762.roa (raw, json)
Hash identifier:          Bs1ZUlNtlF/3YbVB5o8KCeAxGsnpjLx6fRCwpSQdJ4M=
Subject key identifier:   7E:63:50:8B:87:F4:DD:91:EF:82:F4:07:82:7E:EE:04:AC:D9:8D:B4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1E68A6BE1D286AAFD8EBE6593AB7463268B607F0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145762.roa
Signing time:             Mon 25 May 2026 01:51:25 +0000
ROA not before:           Mon 25 May 2026 01:46:25 +0000
ROA not after:            Mon 24 May 2027 01:51:25 +0000
asID:                     145762
IP address blocks:        240a:ac28::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:68:a6:be:1d:28:6a:af:d8:eb:e6:59:3a:b7:46:32:68:b6:07:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:25 2026 GMT
            Not After : May 24 01:51:25 2027 GMT
        Subject: CN=7E63508B87F4DD91EF82F407827EEE04ACD98DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:df:b2:37:28:2a:94:3f:92:24:17:9d:2a:
                    ad:b9:69:fb:c4:97:2e:46:5d:39:97:f6:bc:9c:cc:
                    f4:49:53:66:fb:dc:7d:f3:23:c7:63:8a:24:37:00:
                    6c:e8:0e:c4:77:9b:d5:62:fa:d6:4b:fb:05:29:35:
                    ba:57:dd:87:a9:73:8a:f4:2f:e1:40:0e:91:fd:f7:
                    1a:24:a0:05:61:60:82:41:05:fe:c0:eb:dd:f9:e7:
                    d8:60:d6:7c:14:6e:c2:ff:d6:4a:af:ca:8b:d6:2a:
                    87:2e:23:0d:db:e8:cf:60:8e:06:f7:62:25:6d:9c:
                    98:5e:0d:05:d5:77:8a:98:01:da:44:9b:f3:a0:7e:
                    22:ab:e4:62:8a:f5:9e:66:09:40:19:8d:f0:c4:fa:
                    8e:fb:0f:2c:82:cc:d7:94:d6:bc:5b:60:69:ea:11:
                    82:dc:58:43:b4:84:c2:70:c1:89:71:32:cc:87:75:
                    78:8d:7b:5e:db:20:51:cd:fb:ec:89:e1:b6:22:2e:
                    8e:50:cc:0f:39:53:9a:e7:8a:32:13:4b:2e:80:11:
                    63:87:7c:eb:2a:fd:49:b3:27:b6:81:4f:29:d4:1f:
                    17:05:82:fa:00:c1:09:10:b1:d9:db:5a:ac:b2:ef:
                    eb:6f:7c:5f:23:8e:2b:05:80:5f:99:e7:cf:69:be:
                    7d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:63:50:8B:87:F4:DD:91:EF:82:F4:07:82:7E:EE:04:AC:D9:8D:B4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac28::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:41:61:8b:16:28:65:94:b9:d8:aa:92:f6:21:e2:ee:52:45:
         0f:b1:d1:9a:b6:c4:14:bd:17:d7:89:01:1c:32:01:ec:58:1c:
         df:ab:ad:15:23:af:70:12:e4:e8:8b:c7:36:88:ce:8e:d7:3d:
         72:cb:47:4c:09:00:6c:31:8d:2c:61:46:f6:cd:36:13:a5:93:
         d5:a1:92:82:44:51:92:0e:37:82:4a:b0:c4:77:a9:da:00:55:
         07:49:63:8b:38:a6:70:ce:65:24:90:67:a0:0d:4b:15:0f:87:
         88:2f:e1:a3:91:ff:a7:ba:12:66:16:f7:27:79:17:86:e9:b6:
         fc:fe:f6:b1:f3:e7:25:e4:20:18:25:58:6d:bc:fb:a6:a2:d3:
         68:51:bf:ee:bc:4b:0b:53:5a:78:17:6d:89:f8:f1:4a:51:09:
         19:46:de:6a:81:b2:da:c8:40:f6:ad:48:82:a8:a6:b5:60:33:
         9b:7e:bd:aa:71:79:c3:12:eb:f9:43:0f:d9:5a:f9:fb:51:3e:
         79:5e:87:b4:0b:ce:cb:c9:e6:45:7e:ef:d8:1c:3c:af:2e:8d:
         3d:af:3f:7e:7a:36:0d:1b:b6:06:f5:85:57:2b:44:36:d5:6b:
         01:29:c4:ce:7e:3e:d2:f8:94:1d:d7:9f:69:36:5e:ad:fc:79:
         5c:4f:9e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----