Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145793.roa
File:                     AS145793.roa (raw, json)
Hash identifier:          j4Q6M4xsc27uRzJPEPd+CuuIwUxIdtf8DBVv6vSEOQs=
Subject key identifier:   05:07:21:C6:BE:88:EE:3C:8D:88:DA:97:5B:E6:16:FD:88:FE:8A:2E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6B8133FA09AA43EAD2F4750956536846D4294FEA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145793.roa
Signing time:             Mon 25 May 2026 01:38:20 +0000
ROA not before:           Mon 25 May 2026 01:33:20 +0000
ROA not after:            Mon 24 May 2027 01:38:20 +0000
asID:                     145793
IP address blocks:        240a:ac47::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:81:33:fa:09:aa:43:ea:d2:f4:75:09:56:53:68:46:d4:29:4f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:20 2026 GMT
            Not After : May 24 01:38:20 2027 GMT
        Subject: CN=050721C6BE88EE3C8D88DA975BE616FD88FE8A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:cf:33:60:25:40:c9:ba:6a:d0:7d:c8:ed:
                    b2:91:c9:7b:a8:b6:82:02:20:88:b1:e0:5a:e7:39:
                    95:cb:c7:b2:52:a2:99:98:6d:bb:bb:ab:77:c4:e4:
                    25:fa:64:35:a8:29:86:c2:89:77:1a:bb:09:13:6a:
                    8d:92:86:6a:98:ac:c2:9d:fb:25:32:12:52:bc:1a:
                    33:47:83:3a:0b:8c:5b:85:bd:be:da:0d:78:50:12:
                    81:34:f5:be:7e:12:95:1a:5b:41:cd:11:60:1c:b7:
                    d2:71:f9:79:2d:b6:07:a2:0e:b1:e2:7b:7a:9e:5a:
                    1d:74:fd:96:d9:3a:dd:49:ca:2c:4f:b2:8e:c2:98:
                    8c:8a:72:f7:5d:49:b7:81:cb:e4:61:31:82:1b:62:
                    0a:c7:62:67:90:df:f5:97:2d:5d:f7:1a:3a:e8:16:
                    f4:11:01:71:c9:9a:7b:8d:bd:3c:11:e7:ae:e0:4d:
                    a5:bf:6d:e7:d2:6f:0e:32:1b:72:13:b1:6b:2e:25:
                    38:8c:58:f0:8e:8f:38:59:c2:2a:59:6d:77:94:54:
                    37:bd:e1:f2:9c:c7:4f:28:5e:c7:02:c3:96:4e:67:
                    59:7e:83:d8:5b:cb:01:3f:ad:eb:90:45:82:1e:fa:
                    46:4d:e7:70:60:d3:bf:92:26:8d:d7:b9:bb:5f:d5:
                    50:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:07:21:C6:BE:88:EE:3C:8D:88:DA:97:5B:E6:16:FD:88:FE:8A:2E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145793.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac47::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:85:87:75:cf:f7:a6:ca:39:13:0b:4d:c9:7b:0f:88:21:af:
         53:bf:02:5e:9d:1a:6a:4d:da:89:39:5d:aa:d2:de:3d:0c:83:
         81:f6:59:d1:e3:44:7c:a3:9d:7f:e4:52:7b:08:1a:1c:b1:cb:
         e5:1f:4c:d8:f9:db:0e:36:2f:f0:7f:74:f7:db:ee:a2:15:59:
         2a:41:2c:b6:04:34:42:54:9e:f5:c8:cd:d1:72:08:9d:43:f0:
         f7:c8:f8:25:04:fa:f0:e2:33:2b:e3:b0:4e:e0:7f:42:61:27:
         47:1a:24:12:98:b4:d3:7e:64:cf:d2:f9:98:15:65:c1:b6:17:
         c1:16:01:c4:c6:3a:f2:b6:39:8c:70:6d:d1:60:16:fc:58:5e:
         77:cf:17:6a:14:5f:6e:91:46:c7:94:37:03:e1:2d:98:aa:0c:
         cf:53:21:f8:a4:ab:d1:6c:7e:ee:b8:26:72:7d:7c:9d:f0:48:
         ca:10:a1:a1:5b:61:66:6f:2e:b6:4c:d2:96:d1:54:a1:07:fe:
         41:79:8e:51:e0:55:5a:4f:cc:69:9f:2d:e1:b1:3f:98:0f:1b:
         ee:1a:7a:4a:62:6c:69:ce:a7:9a:20:71:33:cc:c5:09:02:b6:
         d2:ce:bc:7a:c3:97:3a:cf:4b:5d:64:2d:a5:61:0c:e3:7c:97:
         48:2b:96:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----