Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145945.roa
File:                     AS145945.roa (raw, json)
Hash identifier:          wyCATtM7VJyTgBcwzK6Fa4HjsRLXZs08WUkJrH/O8Yg=
Subject key identifier:   9C:6B:12:5F:33:6F:50:D9:53:F9:F2:E6:ED:DE:8F:A0:CE:4D:0E:E4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5A0A7EA0ECD3839648E057CE7529D292D2CFD76D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145945.roa
Signing time:             Fri 22 May 2026 04:08:14 +0000
ROA not before:           Fri 22 May 2026 04:03:14 +0000
ROA not after:            Fri 21 May 2027 04:08:14 +0000
asID:                     145945
IP address blocks:        240a:acdf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0a:7e:a0:ec:d3:83:96:48:e0:57:ce:75:29:d2:92:d2:cf:d7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:14 2026 GMT
            Not After : May 21 04:08:14 2027 GMT
        Subject: CN=9C6B125F336F50D953F9F2E6EDDE8FA0CE4D0EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:2a:c7:7b:b8:d4:c8:e4:74:5e:26:ce:25:
                    8d:20:b6:05:e1:b2:1b:62:85:90:62:28:39:27:cc:
                    5e:8c:8c:d7:bb:88:4b:87:fd:29:c8:3f:ee:e8:78:
                    60:71:e6:c3:b1:84:d0:38:50:0b:2a:e7:de:d5:5d:
                    87:74:d2:85:26:2d:15:eb:05:74:f6:08:3d:fa:7e:
                    e3:45:f4:7a:a9:27:e8:8c:07:16:8f:c7:7e:9f:1f:
                    f7:ef:41:44:da:80:4f:cc:62:f3:bb:ee:e3:3e:b7:
                    bd:11:24:bf:5e:a5:45:d7:ff:bb:61:2e:ae:1f:65:
                    8a:98:31:a4:76:68:33:ca:bd:ad:79:08:86:b1:29:
                    77:8f:04:92:e7:f1:da:80:4a:9e:94:5e:7f:48:08:
                    47:b1:0f:69:2a:44:8b:41:28:dc:f0:06:f7:92:b4:
                    96:87:cf:78:7d:5a:9b:b0:4c:dc:1b:a9:7b:cb:1c:
                    3c:58:e4:88:31:3c:1f:53:0b:8e:37:a5:f2:9f:07:
                    59:65:19:44:90:97:f9:fc:6f:ed:a2:d7:1b:f0:72:
                    23:e1:1e:33:9b:d4:58:80:c8:08:fa:f4:66:52:84:
                    a6:13:3f:fb:4e:63:24:36:90:e8:4f:1a:00:e1:f2:
                    44:15:d5:14:43:3c:1a:d2:76:f7:85:f9:11:79:16:
                    20:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6B:12:5F:33:6F:50:D9:53:F9:F2:E6:ED:DE:8F:A0:CE:4D:0E:E4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145945.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acdf::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:9b:c0:de:15:10:ce:10:df:3e:a1:b5:b1:0f:97:1f:62:1d:
         33:2f:d5:06:2f:8c:6e:ce:2e:dd:b4:22:e0:87:8e:10:80:92:
         f1:1f:d0:5d:26:0b:4c:7a:ff:b6:01:b4:c2:e6:50:e4:59:bf:
         b8:5c:30:b6:82:74:21:e3:44:f7:7d:fc:74:d4:30:ad:97:a4:
         65:32:af:d4:99:2b:84:21:f0:ed:13:40:95:d2:2a:e6:29:c0:
         dc:28:2a:9c:c6:af:4c:1d:1e:18:69:11:bf:d2:53:de:09:62:
         36:10:7b:b3:cb:8e:9a:ae:94:7f:83:20:37:7b:1d:7e:fc:eb:
         db:6e:ce:71:45:4f:72:bd:77:6d:75:84:3e:19:fd:fa:54:9b:
         b0:7b:67:ed:3f:7b:a2:75:1d:5c:61:c2:ca:f3:dd:91:0e:28:
         e7:85:8c:d6:74:30:53:56:92:a4:88:46:9f:5b:02:a5:78:b1:
         c4:53:3b:5f:37:6b:26:9e:4c:c2:8b:a4:df:78:e1:3f:87:e8:
         ee:63:b5:99:8d:8e:18:cb:ed:3c:ef:db:c4:2b:bb:65:cc:66:
         7d:cc:9a:0e:8b:0c:f6:e2:02:f8:44:fb:dc:88:83:df:a5:1f:
         e1:12:0b:7b:e1:90:09:8c:2f:28:73:94:0d:09:19:7d:5e:e8:
         82:ee:47:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----