Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145932.roa
File:                     AS145932.roa (raw, json)
Hash identifier:          9OfgSOIT2cm+mb1WebOCZB8q4/+bwS8GlT3ApdOkI1Q=
Subject key identifier:   50:06:8E:97:17:C7:8F:94:22:CD:B8:AB:EE:5D:49:6F:DE:F0:07:A0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2F65A1D9CD8462AFEA5AA5CEA24F718569DD20FC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145932.roa
Signing time:             Fri 22 May 2026 02:47:27 +0000
ROA not before:           Fri 22 May 2026 02:42:27 +0000
ROA not after:            Fri 21 May 2027 02:47:27 +0000
asID:                     145932
IP address blocks:        240a:acd2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:65:a1:d9:cd:84:62:af:ea:5a:a5:ce:a2:4f:71:85:69:dd:20:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:27 2026 GMT
            Not After : May 21 02:47:27 2027 GMT
        Subject: CN=50068E9717C78F9422CDB8ABEE5D496FDEF007A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:3a:5c:9b:94:42:40:78:a9:0d:89:4b:8c:
                    c8:ce:2f:86:ad:9b:fc:7b:78:19:ea:9c:8b:5d:c3:
                    1d:83:59:e2:47:2e:4a:06:7f:5b:db:2e:3e:cc:80:
                    d6:62:b6:f4:eb:d7:c0:c2:4a:f2:89:bf:99:a1:88:
                    f8:36:e3:c5:27:96:24:ab:14:e8:fa:c7:05:61:5b:
                    a9:2a:cb:1b:b5:7d:03:79:79:aa:90:b3:c0:61:c1:
                    c8:3f:6d:d5:c3:26:61:90:40:19:34:e8:a8:5b:a5:
                    f9:58:a1:05:e1:a8:b9:ec:b5:6b:bf:19:39:dd:65:
                    a0:70:73:46:21:bd:43:54:8d:60:b9:d7:d9:d9:83:
                    b3:4d:b6:85:7c:f8:0a:88:80:62:a1:b7:d1:e9:88:
                    9b:80:95:be:dd:4c:d7:93:69:fc:d0:99:26:f5:dd:
                    84:06:15:99:64:24:69:f4:2d:fb:10:75:d9:ee:ea:
                    e1:b6:62:d8:ab:e8:a4:ca:50:86:51:d4:ec:77:45:
                    fd:0b:e8:05:b6:19:6c:05:b5:a6:8e:a7:f6:cc:ad:
                    ea:ff:d6:dd:b0:d7:a0:98:0f:bd:e5:e8:88:1d:a4:
                    4d:7a:e7:c2:76:33:a9:50:7d:9e:f6:9c:d2:9d:3f:
                    e1:c5:20:15:f3:3e:42:07:ad:cf:a3:b8:37:b0:74:
                    35:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:06:8E:97:17:C7:8F:94:22:CD:B8:AB:EE:5D:49:6F:DE:F0:07:A0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acd2::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:71:9e:91:04:6a:5f:66:2e:ed:53:b7:a8:53:51:23:8a:2a:
         f7:b8:08:f0:81:49:50:ef:e5:1a:52:45:8b:d1:e8:aa:a4:92:
         c3:c1:28:6c:e6:5e:60:63:c4:c9:c8:23:67:eb:29:ac:f7:8e:
         17:33:1c:dc:e3:30:f1:9b:65:d6:d6:18:e9:33:96:6d:6d:ff:
         b5:41:4c:80:aa:78:b0:d2:df:87:f8:74:79:97:ae:17:0c:11:
         d3:f0:9d:b5:f5:db:8c:3e:c4:8c:3b:db:12:67:b4:f7:62:3b:
         58:82:8c:d6:13:67:dd:4d:6f:f5:72:c9:1c:16:89:0a:e6:a5:
         96:bf:40:68:41:b8:e6:5e:12:b7:8f:ab:9b:00:f2:1c:bf:85:
         91:e2:b2:c7:c6:84:8e:d6:eb:72:81:07:fb:98:3b:db:83:47:
         37:f9:b4:42:f7:1f:ed:86:5b:dd:f1:51:84:ea:38:d1:ce:f9:
         27:42:0a:bb:7c:8d:0e:e4:b8:d4:af:74:8d:45:ac:a6:bf:1d:
         87:92:18:3b:21:00:80:9f:be:79:50:f7:c8:77:26:f5:eb:48:
         30:bb:18:45:06:37:bc:e7:82:c7:42:fb:14:10:e2:c6:33:13:
         24:97:be:4d:bb:b2:98:98:e2:db:31:49:ab:a5:15:b5:2b:13:
         00:c9:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----