Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145812.roa
File:                     AS145812.roa (raw, json)
Hash identifier:          FCG6dHbnMnooYm21EETTA/aEBmBDYAe+JxSVdLE20Vg=
Subject key identifier:   E6:66:60:8E:E6:4F:EE:C5:67:C9:A4:8A:11:0E:0F:BD:9F:9C:D6:D0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       02578437C4727D6E6FD2F9B7335600C0C55A76A3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145812.roa
Signing time:             Fri 22 May 2026 04:27:12 +0000
ROA not before:           Fri 22 May 2026 04:22:12 +0000
ROA not after:            Fri 21 May 2027 04:27:12 +0000
asID:                     145812
IP address blocks:        240a:ac5a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:57:84:37:c4:72:7d:6e:6f:d2:f9:b7:33:56:00:c0:c5:5a:76:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:12 2026 GMT
            Not After : May 21 04:27:12 2027 GMT
        Subject: CN=E666608EE64FEEC567C9A48A110E0FBD9F9CD6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:09:35:d1:6f:2a:82:5e:55:84:96:3e:ee:
                    27:36:ac:87:cb:27:26:f8:c2:19:4f:bd:86:3f:dd:
                    3a:f4:0e:e4:40:d3:2b:61:1c:1a:e6:e2:50:54:07:
                    2a:f9:75:3e:fa:cf:a6:37:13:e2:87:48:05:b4:b5:
                    7c:f0:e8:00:0a:1f:3f:68:ec:2d:d0:39:4a:64:0c:
                    60:d0:38:cb:3d:4e:e1:91:4a:fc:31:99:ec:19:02:
                    f3:13:f8:41:30:6a:1d:e5:a3:e2:af:71:7a:96:69:
                    c0:22:80:69:b2:89:c4:4e:f6:20:9b:52:74:8c:0c:
                    49:20:48:a0:b7:a3:9e:7b:5a:a2:47:ce:21:7f:58:
                    89:78:f7:9d:f7:71:6d:da:d9:29:e1:e9:a5:f4:bf:
                    04:f8:c8:57:3e:0e:03:ff:b8:46:f5:e8:57:85:8a:
                    8c:c7:69:b5:e9:f2:b4:be:79:17:d5:0e:46:48:0a:
                    2c:dd:6f:84:19:34:40:6c:3a:fe:c0:f7:6d:27:d4:
                    bf:4e:c1:03:2c:22:2a:46:b3:72:91:58:f1:3d:cb:
                    5a:a7:94:66:68:89:cf:28:bc:00:37:eb:02:76:76:
                    07:ab:d4:81:11:99:53:13:ee:22:d9:a8:c1:da:4b:
                    e5:7c:56:72:84:f5:11:0d:ac:46:bb:58:df:75:80:
                    fd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:66:60:8E:E6:4F:EE:C5:67:C9:A4:8A:11:0E:0F:BD:9F:9C:D6:D0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145812.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac5a::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:8e:f5:6a:28:68:3d:bc:78:f1:62:d6:29:b7:31:1c:6a:e4:
         a8:5c:38:19:16:f4:6b:58:c5:c9:b4:53:3d:6a:6b:f3:12:9a:
         25:19:94:17:d8:56:2d:9f:fb:ae:d2:4d:e0:c0:38:11:b4:ca:
         81:c6:cc:12:5e:af:6b:02:86:f6:7d:98:0b:df:ee:47:e4:cf:
         dd:a1:49:92:ca:79:9d:4b:0f:61:f5:c9:84:ab:5b:2e:60:45:
         70:eb:d1:9c:21:4f:9a:35:af:a6:71:c4:c4:06:39:47:22:a7:
         da:ac:33:8a:a2:d8:3f:34:04:8b:95:c0:cc:8a:a5:37:eb:d3:
         35:ea:94:ed:fe:3a:84:33:c1:6d:05:a0:f2:3f:31:64:df:13:
         85:51:9e:3b:df:a1:20:d3:21:ab:44:82:e9:fb:60:db:59:b4:
         31:9b:c8:a5:75:68:7f:8e:4e:72:5b:88:45:7e:68:65:21:8d:
         12:e6:49:59:26:7e:a9:10:39:75:c8:86:0f:e5:d7:95:80:0d:
         f6:b4:95:25:2e:8e:d7:08:b5:d1:e9:83:c2:0e:56:da:44:e1:
         4c:1d:ab:5a:4c:c8:9a:ac:bb:f5:ec:71:62:2f:31:be:a1:16:
         62:a5:e0:20:11:96:57:c8:00:54:90:01:3d:71:3d:ab:16:79:
         1d:df:48:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----