Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145819.roa
File:                     AS145819.roa (raw, json)
Hash identifier:          IxD17zDnEuKH/FhJ0GWs2xKE3qCG6/OUy5w32pPWq60=
Subject key identifier:   A0:81:89:EB:99:2D:55:F9:0F:1C:8F:FE:41:CD:38:73:36:31:33:C7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       280CDFB7284FBCB3BFC028E16B4A84FA78D24B77
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145819.roa
Signing time:             Mon 25 May 2026 06:28:09 +0000
ROA not before:           Mon 25 May 2026 06:23:09 +0000
ROA not after:            Mon 24 May 2027 06:28:09 +0000
asID:                     145819
IP address blocks:        240a:ac61::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0c:df:b7:28:4f:bc:b3:bf:c0:28:e1:6b:4a:84:fa:78:d2:4b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:09 2026 GMT
            Not After : May 24 06:28:09 2027 GMT
        Subject: CN=A08189EB992D55F90F1C8FFE41CD3873363133C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:eb:cc:3a:ce:e9:ba:d7:e3:88:bf:09:90:a8:
                    fd:b1:78:6e:88:a5:19:ac:ea:d9:48:83:ea:4f:c0:
                    c6:08:4a:12:9f:c9:c7:1e:46:aa:95:e9:e2:8a:ea:
                    f6:c9:66:ff:4c:b0:09:da:8d:8a:06:a4:ba:23:10:
                    c6:18:8b:32:d3:90:80:44:91:dc:e0:d7:cb:92:fb:
                    64:09:29:87:76:8e:ef:bb:fb:1f:2d:ff:6c:1f:24:
                    13:b9:d8:9a:a5:58:c6:51:75:7d:de:45:5f:8a:be:
                    db:2a:90:af:37:af:dd:4c:87:fa:88:99:2d:93:10:
                    81:2f:26:f0:f3:61:b8:c0:85:8e:f7:a6:d9:e9:2a:
                    1b:71:4f:1c:6e:fb:83:12:1c:84:ba:d6:45:da:fe:
                    44:16:3c:d6:2a:64:4d:f6:64:a1:ca:6e:e5:e4:9d:
                    44:22:78:6e:1d:b6:48:1e:a0:4c:3c:89:c1:88:4e:
                    05:08:1b:04:bd:5d:d3:94:46:25:e8:e9:86:b7:a2:
                    b2:6c:94:68:11:fc:ae:af:43:6a:76:ac:f8:5a:32:
                    0b:e2:00:01:1e:0d:20:00:fd:07:75:b6:01:09:c3:
                    0f:c8:e3:9c:69:c2:27:14:84:8a:13:12:f0:40:d7:
                    76:87:55:2a:20:88:e9:b8:fc:18:62:a0:e4:0c:70:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:81:89:EB:99:2D:55:F9:0F:1C:8F:FE:41:CD:38:73:36:31:33:C7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145819.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac61::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:ef:f6:14:1c:09:2b:cf:03:07:7e:d0:e8:a2:42:89:4b:d7:
         06:60:d1:05:a8:c2:00:84:53:22:1f:68:9b:18:e1:e6:9d:17:
         70:7d:16:c6:d2:4a:93:02:8c:e2:da:77:64:c3:6d:30:71:65:
         5d:a7:29:45:c9:c1:dc:bb:f4:60:46:8f:18:74:03:9e:4b:13:
         7d:59:fd:8c:e5:06:58:d9:b0:88:91:d0:b5:10:1e:db:dd:e8:
         59:d5:6c:ee:33:3d:9e:34:96:a7:29:f7:2c:94:99:f4:7f:89:
         3b:74:a3:a9:ac:37:66:46:51:d5:f9:d1:e1:4f:64:b1:d0:2d:
         16:f3:5d:67:01:a1:03:83:04:43:f1:97:58:be:a0:25:4a:43:
         9a:ad:86:76:7a:f4:95:f6:5b:dd:9f:d1:cf:3d:a5:99:7a:c3:
         7e:39:fb:17:65:59:41:ab:e4:13:3c:47:68:03:fb:fb:e2:86:
         90:eb:cd:d7:dd:60:49:02:4e:00:ff:89:db:4e:22:40:04:d8:
         da:2d:71:3c:16:4b:89:a3:b0:75:3f:09:79:f7:fe:62:c1:3d:
         17:de:43:ff:24:1e:15:82:d8:df:2d:8c:10:d8:6f:89:74:cc:
         61:4c:e7:29:e4:5c:5a:8d:17:3c:2e:f5:4b:c0:c5:45:d5:f4:
         0f:7e:b3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----