Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145919.roa
File:                     AS145919.roa (raw, json)
Hash identifier:          6V73LSQRvtUkH+ydWkbFyGZD+zIM5wKCbITADylP32E=
Subject key identifier:   F6:AB:9B:B3:41:35:77:2F:3C:64:0F:2B:94:93:2E:A0:90:E5:97:B0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       62A4EE2DE77F7005F14879F416975DE9EC2300B1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145919.roa
Signing time:             Fri 22 May 2026 07:24:25 +0000
ROA not before:           Fri 22 May 2026 07:19:25 +0000
ROA not after:            Fri 21 May 2027 07:24:25 +0000
asID:                     145919
IP address blocks:        240a:acc5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a4:ee:2d:e7:7f:70:05:f1:48:79:f4:16:97:5d:e9:ec:23:00:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:25 2026 GMT
            Not After : May 21 07:24:25 2027 GMT
        Subject: CN=F6AB9BB34135772F3C640F2B94932EA090E597B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:62:ed:69:ed:26:3c:04:be:9d:2c:19:8d:2b:
                    d4:07:d5:80:70:2f:d2:f8:3a:87:b5:7c:3d:1c:cd:
                    b0:25:4c:4b:30:78:82:80:3b:63:78:b4:3b:ae:96:
                    ed:f1:71:2c:b9:a2:f9:4a:fa:64:f0:dd:9c:a8:c8:
                    11:35:c3:79:e6:6f:a3:ef:cc:79:b5:b2:d8:e6:df:
                    1f:c9:17:b0:e5:f8:59:27:54:f1:73:86:95:4a:75:
                    b4:86:c5:62:a5:d0:93:fd:d1:86:3b:c7:c5:17:42:
                    dd:10:29:fe:57:ed:58:39:16:df:de:87:6d:e4:ce:
                    99:5c:dd:72:f7:b6:cc:69:02:c8:d8:fe:a3:69:59:
                    7a:a7:79:ad:d4:93:47:6b:f5:6e:28:db:8c:d0:05:
                    32:48:36:c7:bd:52:82:02:9c:af:4d:3c:9b:00:02:
                    22:af:d2:e4:80:04:c4:a8:a8:18:32:95:72:b7:a6:
                    fa:7c:1d:56:d3:00:b1:d5:18:83:99:58:4c:88:7b:
                    48:0d:55:0c:51:7d:f3:a7:f4:07:cb:8c:17:87:d0:
                    59:ad:b1:ea:8e:a9:dd:f3:c2:6b:20:3d:4c:44:f7:
                    3c:68:19:d6:32:b0:77:01:58:e6:b2:2f:6f:15:2b:
                    ac:d7:cf:fb:4e:43:11:47:a5:9f:d2:eb:a4:a8:30:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AB:9B:B3:41:35:77:2F:3C:64:0F:2B:94:93:2E:A0:90:E5:97:B0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145919.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acc5::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:f2:69:a1:2e:75:ee:e1:11:d6:3d:2f:5a:20:4a:5c:66:b9:
         b4:be:ca:13:7f:46:e7:9c:eb:07:b5:09:ef:0a:19:65:ef:84:
         ac:77:65:b6:54:a9:cf:7b:aa:d0:ef:22:6a:29:39:04:a3:f5:
         c6:d3:90:e5:e4:5c:b6:07:78:c4:93:ed:9b:42:42:e0:15:46:
         86:d8:67:e5:0d:de:f8:4d:51:16:d9:b2:b6:bb:dc:4f:53:d1:
         79:75:b6:48:0b:17:ed:f2:06:5b:26:4f:cb:b4:3b:1e:7e:a6:
         0c:e8:5a:3a:1c:97:94:34:9a:ea:9a:3a:9f:eb:48:a8:51:40:
         e0:44:5f:ad:70:43:6d:5f:5a:4e:a6:b0:b9:f8:30:38:e3:5d:
         1d:21:63:a1:61:40:c9:ff:64:5d:84:25:b3:38:2f:e3:43:c4:
         c2:dd:54:a2:72:97:89:04:1f:e3:a1:e1:64:ee:69:62:43:21:
         c4:db:43:29:e0:12:45:cc:6d:fe:fa:d8:d9:05:92:0a:0b:45:
         c4:42:15:1f:58:98:c8:15:b8:da:d9:08:73:e7:bc:5d:de:03:
         e0:33:72:f2:f0:09:75:90:06:bc:cb:20:7c:9f:7a:45:07:12:
         e4:40:e2:a8:05:ad:82:eb:77:56:64:c8:3a:67:20:0c:d8:89:
         e4:66:6e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----