Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145784.roa
File:                     AS145784.roa (raw, json)
Hash identifier:          tqtAzza8TUBjspbjTsVqIhldhOQgYrjCgOPZYJ+gqks=
Subject key identifier:   6E:E3:5E:34:C3:9C:5F:64:DE:DB:48:B4:7B:59:B5:26:60:28:0A:E8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       19959AB79546C0AF37DB479AC8D91A52FBF646F7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145784.roa
Signing time:             Fri 22 May 2026 07:32:06 +0000
ROA not before:           Fri 22 May 2026 07:27:06 +0000
ROA not after:            Fri 21 May 2027 07:32:06 +0000
asID:                     145784
IP address blocks:        240a:ac3e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:95:9a:b7:95:46:c0:af:37:db:47:9a:c8:d9:1a:52:fb:f6:46:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:06 2026 GMT
            Not After : May 21 07:32:06 2027 GMT
        Subject: CN=6EE35E34C39C5F64DEDB48B47B59B52660280AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:04:4b:8f:a1:54:d3:bf:62:cb:6b:36:e0:
                    da:15:66:4f:69:1f:ec:43:5c:d4:82:8d:d7:6f:3c:
                    b0:ad:f2:3b:2c:58:52:dd:a8:39:ea:1d:ad:08:9a:
                    8a:95:f9:6d:38:5b:40:2d:fc:cd:60:bc:e8:8b:eb:
                    7d:ab:8d:cb:72:9e:c9:60:79:28:53:ad:a0:8e:70:
                    18:2d:75:69:b5:2a:b7:2f:e6:0b:1d:f1:3e:91:d8:
                    a6:04:8d:fd:43:b3:87:b3:50:32:20:ba:ed:ac:da:
                    6d:20:23:27:dc:06:51:da:53:a9:6d:6d:3f:f1:e7:
                    ec:f3:08:c0:9d:8e:61:5a:fa:f3:3c:59:ff:7a:d2:
                    0c:7a:a6:e5:8e:02:1d:c0:6e:ef:b3:ab:63:10:e5:
                    91:66:06:f8:7f:82:7d:6e:8a:fb:53:08:6d:df:0d:
                    c9:f0:21:40:77:19:92:61:2b:ab:51:7f:0c:fa:4f:
                    2a:f3:3d:f8:08:f9:a5:28:e1:0d:19:37:d3:3a:35:
                    ba:5f:5b:c7:8a:a0:6d:21:18:de:08:09:db:82:e1:
                    19:d5:9d:d0:d5:a3:f4:36:5b:30:3f:36:b6:a1:a5:
                    24:ab:3b:2c:9c:76:a5:7a:c3:72:ed:c5:85:ea:0e:
                    6e:f8:6f:9c:1b:6e:49:b8:28:c1:b1:b9:ba:7c:23:
                    67:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E3:5E:34:C3:9C:5F:64:DE:DB:48:B4:7B:59:B5:26:60:28:0A:E8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145784.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac3e::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:a4:0c:b7:5a:48:74:d0:bf:87:87:50:48:e9:40:2e:f0:38:
         ae:bc:98:2a:6e:60:e7:ae:37:b8:65:26:b3:f2:c7:f9:47:dd:
         b3:6b:a6:90:65:4b:e3:dd:73:e8:47:0e:09:14:d3:87:b2:ba:
         72:ec:f5:df:0d:16:f7:20:10:b9:6b:fa:12:62:7c:46:75:16:
         ff:a8:13:35:7d:20:97:56:ae:4f:ca:e4:d2:be:d0:b6:36:ce:
         66:7e:36:a9:f8:5a:1f:e8:dc:e0:36:e3:cd:77:d5:e2:15:46:
         ed:94:a1:7c:0e:dd:81:e5:70:af:a5:1c:ef:f9:27:53:c8:f8:
         93:fb:e9:1f:a3:73:ba:8b:92:55:87:be:ef:8a:f8:2a:f8:26:
         70:3a:0c:a6:4d:d1:24:a4:4b:0f:76:c0:af:47:19:00:b6:db:
         08:ea:ee:72:ea:9e:d8:18:db:fa:f4:99:59:62:dc:95:10:15:
         0b:ff:73:1c:e3:aa:b1:4e:ac:43:ef:70:1e:c1:8a:c2:ed:09:
         3f:1a:bd:f6:f9:c2:15:5a:25:1f:9f:43:f5:51:06:c7:80:d3:
         bc:b9:d5:78:e5:12:de:e8:1e:b8:35:08:7a:d4:cd:10:b6:d2:
         da:1f:c1:fa:fa:3e:bb:97:87:57:fa:b4:c5:d0:f2:3f:6c:89:
         a1:84:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----