Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145969.roa
File:                     AS145969.roa (raw, json)
Hash identifier:          VN48J0oAwYV+QflNEg8cImaIiQ0U6hcS13URZsajI7g=
Subject key identifier:   CF:0C:14:61:C6:8D:5C:EF:3F:5D:9C:0A:D0:19:93:D5:0E:DB:23:09
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       538A3B559BE53A8BCD9A7160CA593C8FE94A3801
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145969.roa
Signing time:             Mon 25 May 2026 02:22:26 +0000
ROA not before:           Mon 25 May 2026 02:17:26 +0000
ROA not after:            Mon 24 May 2027 02:22:26 +0000
asID:                     145969
IP address blocks:        240a:acf7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8a:3b:55:9b:e5:3a:8b:cd:9a:71:60:ca:59:3c:8f:e9:4a:38:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:26 2026 GMT
            Not After : May 24 02:22:26 2027 GMT
        Subject: CN=CF0C1461C68D5CEF3F5D9C0AD01993D50EDB2309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:cd:16:ba:79:bb:b6:4b:ba:2d:be:f9:61:
                    0e:f4:31:58:b8:9b:2b:b3:ec:fb:50:cf:52:94:5c:
                    4e:95:c8:e6:f5:5b:f4:f8:99:7e:2e:af:e2:a5:11:
                    22:39:78:4c:f2:92:bc:16:d0:08:a7:e2:c8:39:39:
                    9e:a7:38:43:e0:5a:0f:cc:19:f0:14:30:6b:45:bc:
                    b4:02:29:1d:7b:97:77:b8:1e:ec:44:a3:f2:6c:d1:
                    e7:a3:0f:32:c7:26:97:53:d4:59:11:3a:48:ab:da:
                    38:ed:19:76:59:ae:08:1d:09:c1:d6:cb:5c:03:37:
                    ba:71:ad:05:fb:e6:0d:43:dd:54:e8:cb:3e:71:e3:
                    74:91:4d:90:3a:70:65:37:27:db:c0:18:f8:9e:e2:
                    ad:89:79:c6:79:c0:78:db:7b:74:44:a3:44:2a:74:
                    8d:bf:62:71:ea:e2:3d:3c:63:ad:d5:d6:f8:8d:93:
                    e7:06:be:7e:bb:3c:76:bf:02:4c:3e:0f:3f:96:81:
                    e2:b6:e1:a9:2d:53:c4:66:81:20:6e:be:fe:25:0a:
                    a5:ee:ce:e8:c2:ab:78:33:cc:7f:05:31:54:45:b5:
                    80:ce:7e:5f:3e:06:4b:53:cc:5d:ae:42:4d:22:2c:
                    b2:21:44:d5:32:7c:4a:1f:1b:dc:21:19:ff:cc:2f:
                    55:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0C:14:61:C6:8D:5C:EF:3F:5D:9C:0A:D0:19:93:D5:0E:DB:23:09
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145969.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acf7::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:73:56:ca:23:93:2f:17:81:37:f7:68:19:71:7c:1f:14:5f:
         5b:42:e3:98:32:a9:f2:9f:03:6b:27:32:27:9e:0f:29:2b:68:
         bf:08:f7:c9:35:9a:c7:b8:0e:c0:80:9d:96:db:bc:70:34:64:
         13:4d:07:9c:c3:ce:af:a8:75:a4:28:8e:61:dd:fe:be:a6:c3:
         eb:f0:82:ff:f2:a4:49:3e:61:ae:59:8f:d3:8f:de:25:4e:52:
         cb:46:08:6f:4a:cc:f1:d6:14:26:e0:57:fc:be:22:f0:77:5f:
         06:75:4d:19:a1:e2:fd:ef:e9:3b:c6:57:ff:d4:a3:38:26:b6:
         51:25:0c:24:7c:f6:de:bd:e7:3e:5a:56:9c:c5:84:25:b3:8c:
         c7:fe:08:d2:e5:cc:66:a9:50:17:0f:4f:c1:02:bc:49:cb:73:
         fd:f6:0d:f6:0d:32:de:fd:61:bc:10:0f:47:28:e8:59:51:de:
         2f:e0:73:e9:aa:d4:26:e9:7f:e1:79:72:20:2d:f1:7c:0c:b1:
         c0:4d:5e:9a:ed:0a:92:ce:47:21:b0:f4:55:02:ef:89:13:ae:
         29:a1:f2:c1:44:35:f9:66:52:9f:89:62:e0:34:18:3b:eb:78:
         83:2d:3c:26:7b:20:05:bc:b8:82:0d:cb:6d:1d:38:19:8e:f4:
         a2:88:ad:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----