Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145956.roa
File:                     AS145956.roa (raw, json)
Hash identifier:          2DvaDPp9IPp/aStyK37Q6r2r6iAhBHCIGuZ0MkdfFhA=
Subject key identifier:   74:09:C4:88:C2:F9:0C:1D:CD:CD:EF:B8:38:C8:43:A4:35:40:25:D8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4204AFE661D04FEEC87B8911F8174F0EDCADDE4F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145956.roa
Signing time:             Tue 26 May 2026 08:53:06 +0000
ROA not before:           Tue 26 May 2026 08:48:06 +0000
ROA not after:            Tue 25 May 2027 08:53:06 +0000
asID:                     145956
IP address blocks:        240a:acea::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:04:af:e6:61:d0:4f:ee:c8:7b:89:11:f8:17:4f:0e:dc:ad:de:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:48:06 2026 GMT
            Not After : May 25 08:53:06 2027 GMT
        Subject: CN=7409C488C2F90C1DCDCDEFB838C843A4354025D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:d0:29:28:66:31:90:dc:20:16:bc:22:53:
                    c9:f8:e6:69:b4:f7:ed:35:03:ff:20:69:24:17:a6:
                    bf:59:1b:dd:18:b4:6b:7c:02:d0:ce:51:90:4b:ad:
                    dc:ee:cb:53:a1:14:b6:fe:17:60:64:c8:07:21:0e:
                    24:6d:f3:79:42:b3:ba:78:b8:6d:bb:1f:66:a8:e9:
                    ce:79:be:be:9f:86:81:7c:62:a5:c4:87:56:de:cb:
                    cc:07:fb:8c:e6:52:48:99:c0:bb:da:8d:b9:df:2f:
                    a7:9e:97:7b:aa:de:90:02:dc:52:c9:cc:19:51:bd:
                    27:12:47:bd:07:e3:46:a6:ff:39:d4:a6:61:da:f7:
                    f6:b5:51:52:e4:58:49:a3:2c:0a:72:d5:5f:5e:1a:
                    ec:2f:82:8e:79:3c:13:08:cf:01:c1:fb:4c:dd:3a:
                    58:d1:d5:e7:34:16:06:e3:38:9d:40:a7:e9:52:85:
                    58:67:68:05:7d:83:5e:b0:26:a3:49:7f:44:8a:cb:
                    b5:38:d6:55:75:cd:23:53:3f:f6:1c:c9:85:7c:be:
                    70:02:d1:ec:ed:10:64:30:b2:e9:4a:d0:36:6b:b4:
                    ee:22:a1:fc:6f:a7:91:f1:b4:99:9e:71:1a:28:d0:
                    1d:d9:b9:23:6d:89:51:85:31:ee:16:35:31:3b:af:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:09:C4:88:C2:F9:0C:1D:CD:CD:EF:B8:38:C8:43:A4:35:40:25:D8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145956.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acea::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:f1:a3:e9:42:6e:7b:ae:d7:de:d5:bb:15:66:52:b0:78:fb:
         c4:56:60:fe:a8:78:22:58:78:71:7a:6b:41:36:af:69:fe:5e:
         1f:66:ed:b0:3a:3e:16:ee:b0:21:0c:4d:c7:93:75:a3:89:4c:
         38:0c:ee:b9:af:0f:f9:1c:fe:69:40:37:ec:ba:6f:fa:d4:99:
         c2:bc:34:f1:f5:51:97:a0:9d:80:15:d5:39:12:a0:6d:21:cf:
         a6:ad:fe:40:3c:a4:61:09:ba:17:d7:31:e5:83:1c:23:b2:0b:
         37:01:a2:03:cb:e6:81:79:ca:c9:95:5d:f7:df:0a:52:21:47:
         c2:60:74:c3:0a:eb:cc:59:2b:de:96:04:12:40:ab:d6:3d:25:
         0b:b7:9c:2c:00:4e:98:1e:56:55:a4:92:12:e0:62:c4:70:55:
         83:39:e6:31:6b:90:05:67:2e:70:fe:cf:f7:26:36:4b:1b:6a:
         80:9c:48:36:e7:0c:7e:c8:ae:42:86:fb:8a:a8:b0:96:22:92:
         e5:3c:0a:a6:f1:e7:c3:a2:44:d6:fb:4f:8b:38:62:25:b0:2a:
         0e:e6:83:b4:91:db:a5:35:3c:61:e0:37:62:b4:49:a9:7a:69:
         20:bd:84:31:04:c7:db:ea:05:4c:bc:07:52:1a:01:dd:c4:ac:
         b8:a0:5a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----