Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145974.roa
File:                     AS145974.roa (raw, json)
Hash identifier:          t8HPyawBiVFK3lMNxCRAXTY9ObhC3Ydfvj2KbEcf558=
Subject key identifier:   89:28:87:F4:53:8D:83:04:6D:78:52:60:10:A1:93:70:9E:F6:D3:A1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7765701E07FDE55FFEFCB8B05495C57D857F416E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145974.roa
Signing time:             Tue 26 May 2026 06:12:31 +0000
ROA not before:           Tue 26 May 2026 06:07:31 +0000
ROA not after:            Tue 25 May 2027 06:12:31 +0000
asID:                     145974
IP address blocks:        240a:acfc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:65:70:1e:07:fd:e5:5f:fe:fc:b8:b0:54:95:c5:7d:85:7f:41:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:31 2026 GMT
            Not After : May 25 06:12:31 2027 GMT
        Subject: CN=892887F4538D83046D78526010A193709EF6D3A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fe:2f:8e:2c:fc:a8:b9:db:a0:32:37:22:95:
                    a4:71:5c:f3:14:8f:c6:89:38:50:2a:e6:28:f8:1d:
                    ff:15:89:ce:a9:96:96:88:02:4e:8e:3a:6b:63:86:
                    57:66:85:ff:b6:f0:85:15:94:f3:1d:43:59:c8:f9:
                    2f:74:38:8a:79:35:0b:49:97:ad:cd:e4:5e:43:b0:
                    f7:b6:29:17:1d:31:48:7a:42:b3:51:37:2f:10:77:
                    ca:90:79:bb:a5:bf:00:6e:8a:c6:51:f5:62:d4:39:
                    74:75:62:10:c9:83:55:7e:55:35:c8:31:a9:0d:aa:
                    f5:d8:ce:97:0d:23:ea:4c:a5:c1:3a:a6:7b:09:69:
                    2a:b7:60:81:b9:4b:83:26:84:7a:76:a2:5a:15:85:
                    42:ce:5d:19:cc:90:49:3b:52:e2:cf:26:bb:25:e0:
                    63:47:d0:c7:62:82:e8:8f:1b:fc:1c:dd:12:9a:e7:
                    35:19:de:d7:d5:6d:4b:d2:1e:a2:e7:e6:08:e5:9c:
                    c6:cf:21:7e:b0:4b:ba:a0:a8:f3:74:25:a3:9d:15:
                    64:26:d1:d0:3a:92:0c:01:9b:0c:ca:60:db:6d:05:
                    74:66:99:cb:68:06:5a:26:aa:ef:c8:52:e4:d2:e6:
                    af:b9:0e:3f:ff:02:ed:72:28:ad:16:21:10:be:f9:
                    ec:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:28:87:F4:53:8D:83:04:6D:78:52:60:10:A1:93:70:9E:F6:D3:A1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145974.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:0c:3b:51:55:12:ae:b5:49:0e:fd:cd:ac:60:0a:22:61:98:
         61:f0:87:c9:90:8e:fc:88:7e:09:46:5f:17:fa:d5:67:8e:08:
         7d:2e:26:ac:1b:3e:4e:c2:0f:14:dc:72:32:63:a1:c0:2e:18:
         92:0c:6c:0a:7b:04:f3:9c:d5:4d:52:00:0e:b5:a8:a2:b1:e1:
         b1:d9:89:c5:de:52:c9:e6:7b:6d:43:3e:f7:29:5d:16:87:00:
         23:22:f9:d3:4f:e0:83:9c:7f:2e:9c:6b:ef:96:d7:8f:a4:33:
         c9:08:14:78:20:79:25:73:c2:db:c4:7d:0b:f5:da:6a:12:ed:
         f8:2e:c0:3f:0c:44:47:de:63:5a:c4:02:e8:50:5d:40:40:df:
         e4:e4:9c:a0:15:64:f5:97:da:df:bf:e1:a8:76:f0:17:58:34:
         eb:46:d1:ff:c2:17:73:60:4f:77:7c:f3:cb:b4:7b:0b:98:2e:
         26:92:d0:90:1e:e1:f8:1f:01:50:e9:30:ed:02:e8:5c:65:04:
         39:b2:d9:3a:75:7f:f4:ab:f7:ce:40:0c:9a:96:15:5c:fe:be:
         a8:f5:1a:3c:80:ae:05:c0:a1:d7:b8:24:66:f1:24:14:b2:2a:
         c8:03:b4:60:a8:59:c8:3d:9d:3c:2a:01:ad:63:94:97:3b:2a:
         8d:d3:78:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----