Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145928.roa
File:                     AS145928.roa (raw, json)
Hash identifier:          qtVxQ/a9ofKlkRC4m0rmjHo3O5QDu/EUFZAV/Hm8xzs=
Subject key identifier:   01:A3:88:C7:1A:3E:70:98:63:C8:CC:E5:19:8C:CD:71:75:8F:20:0A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5850A2047C2E352CFF08781E7F7ABF5C5E1B285C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145928.roa
Signing time:             Mon 25 May 2026 01:20:15 +0000
ROA not before:           Mon 25 May 2026 01:15:15 +0000
ROA not after:            Mon 24 May 2027 01:20:15 +0000
asID:                     145928
IP address blocks:        240a:acce::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:50:a2:04:7c:2e:35:2c:ff:08:78:1e:7f:7a:bf:5c:5e:1b:28:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:15 2026 GMT
            Not After : May 24 01:20:15 2027 GMT
        Subject: CN=01A388C71A3E709863C8CCE5198CCD71758F200A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:5e:09:7a:52:81:06:6e:c7:5b:02:20:73:
                    84:d9:4f:47:c5:61:8e:06:e1:2a:df:a8:85:38:5e:
                    ae:be:c6:0d:c1:d7:75:7a:67:e7:0e:20:32:05:33:
                    28:f1:73:64:42:1a:06:6c:98:5b:c1:02:0e:36:d1:
                    1f:36:73:be:66:12:6e:ae:3d:c9:8f:d9:45:b5:0e:
                    26:e4:64:2d:fd:61:3c:e0:34:5e:c4:0c:71:44:28:
                    de:c8:12:5d:d3:4a:2f:df:e5:e3:62:3e:77:b1:50:
                    82:e0:c0:b2:e9:40:fb:99:21:e9:8e:27:16:09:3c:
                    0e:0c:ee:5f:45:c2:fd:4e:a3:2c:14:4a:6f:00:68:
                    e2:6d:eb:6e:ef:16:8c:2a:d3:e3:b2:17:58:39:c6:
                    cb:17:fc:be:5f:2b:47:8d:fc:a9:40:3c:2b:8b:c0:
                    7a:8e:53:31:8c:08:f4:b1:11:c6:30:e5:ea:bc:b3:
                    53:0a:07:ba:fe:07:19:e7:5d:4f:a9:04:24:71:64:
                    7e:0d:c4:53:23:b3:80:f6:4e:0d:ac:01:5a:ca:31:
                    a1:11:21:42:16:d6:2e:86:d7:22:69:c2:07:86:3b:
                    d6:0c:e6:f4:4d:1e:02:42:2c:1b:7b:b7:bd:25:b0:
                    f6:7a:c5:16:ae:e2:fe:d4:9d:4a:b7:61:46:4b:6c:
                    d0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A3:88:C7:1A:3E:70:98:63:C8:CC:E5:19:8C:CD:71:75:8F:20:0A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145928.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acce::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:b6:1c:f2:12:ac:0f:50:29:45:58:a9:52:cf:d9:5e:57:79:
         f6:4f:be:39:64:15:91:ea:66:3d:bf:08:7a:a6:09:38:2d:a5:
         b2:51:05:b8:61:43:b5:42:17:30:55:52:80:30:61:c7:39:6e:
         c0:66:42:d5:3d:2e:ed:4b:cc:ba:52:e3:bc:26:12:25:bb:8f:
         7d:2e:cc:e8:df:69:4c:bf:00:e5:a9:b1:bd:e5:e8:46:54:f4:
         49:e5:80:77:7b:28:2d:5c:1d:6a:ea:b7:e3:45:82:03:5c:69:
         70:d3:4d:9e:1d:d2:07:94:7a:7f:e9:5b:67:da:04:28:3d:32:
         e4:6c:f1:64:68:ab:8d:eb:d4:ae:d9:50:8c:b1:38:6c:34:ff:
         27:3c:34:a4:16:37:67:ab:4f:83:c0:f1:4b:48:b1:f8:02:da:
         4f:df:5f:8b:8f:67:1e:18:d5:ca:41:df:86:22:9c:e0:a4:b6:
         8d:cc:2f:31:07:03:d5:cd:87:cf:5c:b5:4f:d2:b9:0c:a5:c4:
         13:44:ab:94:40:0a:16:34:a2:e6:a1:2e:de:2f:2a:9d:38:8e:
         4a:41:1c:75:1e:97:96:9a:4a:04:ba:32:b7:77:b9:1b:20:b1:
         f3:06:5e:16:1c:65:f3:1c:74:8b:93:c6:6d:eb:f6:86:5a:32:
         4e:a1:41:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----