Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145772.roa
File:                     AS145772.roa (raw, json)
Hash identifier:          s4/XiJtZUetXoyXZhUp9O8Rl8gzEbNp5ebhZchi1tgk=
Subject key identifier:   18:C1:4B:A9:63:8D:A2:57:07:F0:9A:31:9C:53:26:7A:65:75:90:B6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3132E50DA428B8CF292CCD6367FF69235C454C6D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145772.roa
Signing time:             Mon 25 May 2026 01:20:10 +0000
ROA not before:           Mon 25 May 2026 01:15:10 +0000
ROA not after:            Mon 24 May 2027 01:20:10 +0000
asID:                     145772
IP address blocks:        240a:ac32::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:32:e5:0d:a4:28:b8:cf:29:2c:cd:63:67:ff:69:23:5c:45:4c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:10 2026 GMT
            Not After : May 24 01:20:10 2027 GMT
        Subject: CN=18C14BA9638DA25707F09A319C53267A657590B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0d:da:58:7f:aa:b2:b8:79:db:23:dc:cd:2c:
                    25:77:9f:85:a2:fd:3c:0d:49:cf:06:90:d7:35:44:
                    08:a8:f4:32:8e:b7:42:02:68:1e:65:0c:c9:d1:19:
                    3b:26:e0:35:43:33:6e:75:7e:5f:c8:9b:58:39:f9:
                    dc:9a:bb:a4:f4:fa:68:74:e0:04:52:ba:c1:6a:18:
                    78:cc:72:c3:96:55:21:d3:7d:fc:d4:f9:bf:c6:f5:
                    74:99:14:49:0e:37:74:93:78:f7:29:2a:30:25:54:
                    1b:4e:5b:d1:4a:db:19:a7:37:4d:49:64:0f:f2:3f:
                    8c:4d:88:6d:8e:ba:0c:bc:ee:49:3b:7d:5c:4a:e8:
                    e6:aa:04:0d:66:46:cd:08:59:0b:7d:86:52:f2:b6:
                    44:ac:8b:66:1f:b0:5a:ea:85:20:83:c0:3d:94:cd:
                    3f:60:b3:90:1d:c1:05:32:b2:45:7b:1a:92:0d:ff:
                    77:7d:04:67:30:ed:35:79:12:55:31:58:bc:f6:9f:
                    b5:e0:35:8a:b0:c4:ae:ee:26:d2:9c:07:dc:17:31:
                    10:be:42:a7:9a:39:b3:ba:6a:bd:fb:e9:13:05:1a:
                    75:fb:aa:04:d3:8d:ae:e7:ed:12:29:7e:fa:57:7f:
                    2d:09:88:a8:aa:dd:67:ce:d0:27:d2:2d:5d:e1:8f:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C1:4B:A9:63:8D:A2:57:07:F0:9A:31:9C:53:26:7A:65:75:90:B6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145772.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac32::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:6d:7e:ef:b2:0c:b1:6a:5f:60:88:6b:a9:4c:91:f5:ea:49:
         bc:de:62:aa:91:95:af:2a:c3:33:07:e1:12:2f:5f:05:f7:f9:
         92:ee:e5:d0:1b:d1:b4:d2:ef:7b:4d:01:3a:67:5c:4d:72:26:
         9c:7c:75:05:db:50:5f:5d:13:08:ca:6e:4c:4d:21:48:eb:da:
         dd:94:7d:64:69:35:3f:79:58:a0:c0:17:81:59:35:e3:11:91:
         b8:9d:b7:90:fa:2d:da:49:34:25:6b:8e:cb:1d:e1:c3:88:4f:
         cc:cd:5e:e7:c8:a4:2d:b4:ed:ba:16:3b:98:26:94:3d:9d:53:
         08:27:23:1e:97:d5:45:82:af:f0:26:6f:cc:14:51:a4:78:0e:
         e1:a9:0e:6e:86:89:dc:26:ff:ad:cc:26:61:25:cf:c6:d8:a2:
         c2:dd:82:a6:88:7e:51:c4:ec:b9:ef:d2:ce:e7:23:17:86:2c:
         fd:23:c3:3d:ec:6c:0a:b8:31:15:a1:1c:d0:fc:53:41:b0:fb:
         a7:0f:68:51:c8:00:1b:06:6f:ad:9f:6d:e5:c4:dd:35:25:30:
         a5:ce:c7:be:86:47:d2:00:be:e2:10:01:92:21:c9:48:ae:e6:
         58:8c:75:e9:12:74:7d:4d:6e:b7:41:e3:47:02:18:d7:6b:a7:
         f7:f6:ef:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----