Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145926.roa
File:                     AS145926.roa (raw, json)
Hash identifier:          xdbXZZ7xM2kpgcK+sfsLvPjTGvXH6vFYv+XtC43Z+Yo=
Subject key identifier:   EC:77:3D:AA:EA:CA:FB:64:BF:CF:07:DA:06:01:D2:B1:71:0E:C6:C7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2BAF57DCB25125B9C5DA390412E38192A4544209
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145926.roa
Signing time:             Fri 22 May 2026 07:25:01 +0000
ROA not before:           Fri 22 May 2026 07:20:01 +0000
ROA not after:            Fri 21 May 2027 07:25:01 +0000
asID:                     145926
IP address blocks:        240a:accc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:af:57:dc:b2:51:25:b9:c5:da:39:04:12:e3:81:92:a4:54:42:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:20:01 2026 GMT
            Not After : May 21 07:25:01 2027 GMT
        Subject: CN=EC773DAAEACAFB64BFCF07DA0601D2B1710EC6C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:76:cb:d2:6b:02:c3:ba:04:85:c7:c3:2e:
                    1f:e2:6c:3c:89:fc:a4:7e:50:62:2c:99:39:6b:07:
                    75:51:ec:91:be:dd:fa:fa:20:31:24:7b:21:2b:ae:
                    40:ea:9e:f4:d5:3f:4f:65:d8:e5:0c:2e:fb:18:7c:
                    9a:56:a1:a8:f0:b9:dd:e5:52:f8:80:cb:f1:e2:f0:
                    0d:1e:1b:ef:75:f0:be:30:6c:69:24:32:92:71:a5:
                    03:f3:d7:bb:16:eb:5c:6d:10:86:d7:59:42:30:13:
                    f2:ed:d7:ea:5d:9d:0f:df:3f:33:8e:d9:71:80:e6:
                    75:46:77:45:ea:49:b1:21:f4:48:04:fb:43:ce:0e:
                    bc:7a:2d:cf:f2:78:25:8e:41:2b:28:fd:15:dd:53:
                    4a:43:6c:88:d3:1f:4c:57:c7:1b:2a:59:f8:ac:5d:
                    fb:a9:e2:d9:ad:f9:66:31:81:f2:b3:82:d4:59:c3:
                    15:5e:17:8c:8e:e2:ef:9e:50:3f:a0:a2:b5:3e:3e:
                    1b:6d:52:db:1d:64:76:7e:c0:8e:7e:fc:d5:19:e4:
                    ce:81:15:8b:cc:88:08:c1:ea:b1:99:09:ff:0d:4d:
                    81:7c:84:31:05:95:cd:fc:2a:8f:2a:fe:98:79:13:
                    95:db:b4:55:1e:ea:72:6e:4e:89:a1:90:ad:9d:97:
                    f9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:77:3D:AA:EA:CA:FB:64:BF:CF:07:DA:06:01:D2:B1:71:0E:C6:C7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145926.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:accc::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:d5:61:63:7f:50:e5:ed:ae:8e:1d:9b:84:80:c8:ed:fb:9b:
         6e:79:0e:df:94:f4:21:f3:12:36:87:ed:af:f3:3f:4d:70:dd:
         d0:9d:6a:76:18:46:5f:1e:ac:cb:43:e7:8d:a0:14:e9:84:ff:
         73:88:95:72:2b:87:32:a0:11:18:a1:ee:2d:44:0c:22:33:2c:
         8f:15:15:2b:63:0e:41:12:db:f8:ae:b2:e1:39:5b:0b:ae:c4:
         5d:52:ab:80:60:91:75:53:bf:25:c0:5d:51:b9:b2:4b:06:ca:
         a8:de:15:89:62:52:a3:12:4c:b5:74:1d:da:a5:30:75:6d:81:
         4a:a2:02:bd:ce:03:c8:79:89:6e:62:34:36:28:fc:82:6e:67:
         d7:9a:e2:35:e3:1c:0d:e8:7e:d2:73:0e:32:cd:1c:42:c1:81:
         55:d4:ac:1a:79:c9:67:c4:f8:b4:9a:61:3d:25:b6:8b:3c:97:
         39:f5:6f:e1:88:7c:6d:7a:f9:69:90:25:3a:44:73:dc:d4:fd:
         eb:42:bb:d2:69:92:1c:a7:cc:e5:c6:70:eb:4a:09:ff:81:f5:
         d6:6a:e7:cf:f2:a2:7f:18:ab:20:4f:57:30:82:1f:d5:28:78:
         eb:92:67:9b:25:7b:2b:b4:f2:be:db:4c:68:1b:55:e5:88:8f:
         bf:07:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----