Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145975.roa
File:                     AS145975.roa (raw, json)
Hash identifier:          Ufotjo+j/Okn97RX12aeMY1bHmQ0rMf4LVZFEdJXL3c=
Subject key identifier:   43:91:0B:38:53:A2:BF:5B:3C:A1:1F:2D:CE:03:46:E5:28:A5:BF:70
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       35A0168686F9D85AFCDBEC8BEC614857D4C9B025
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145975.roa
Signing time:             Fri 22 May 2026 06:46:01 +0000
ROA not before:           Fri 22 May 2026 06:41:01 +0000
ROA not after:            Fri 21 May 2027 06:46:01 +0000
asID:                     145975
IP address blocks:        240a:acfd::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a0:16:86:86:f9:d8:5a:fc:db:ec:8b:ec:61:48:57:d4:c9:b0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:01 2026 GMT
            Not After : May 21 06:46:01 2027 GMT
        Subject: CN=43910B3853A2BF5B3CA11F2DCE0346E528A5BF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:5e:91:fd:64:5e:4b:3a:58:00:ab:ef:a3:
                    cc:e8:51:a2:5b:87:be:76:79:45:9f:5f:ea:66:0d:
                    e7:55:66:b3:33:77:fd:79:81:77:17:52:62:95:81:
                    d6:49:75:f3:b8:d4:f7:58:22:c5:ae:bc:25:c9:29:
                    aa:6b:b4:63:a5:51:42:21:62:3d:a4:1f:e9:22:2f:
                    ad:72:4f:4f:c9:af:c3:ac:35:de:be:1c:97:f7:3d:
                    16:e6:08:bc:3b:fd:c1:ea:f1:81:a5:79:d0:66:b6:
                    72:19:f1:df:8d:9e:4b:88:a5:f0:a6:b1:ed:02:85:
                    04:90:7a:0f:ff:a9:5b:2f:0a:27:f9:e7:ac:d6:8c:
                    c2:4e:67:27:2f:0a:5d:a9:bc:ce:92:4c:a5:a3:ff:
                    19:8f:05:95:57:35:1d:30:6f:58:30:57:63:cf:bc:
                    4a:11:45:20:1f:c1:3d:a7:1e:00:86:9c:ab:20:d9:
                    ca:ab:af:93:96:26:9c:4e:87:88:2c:59:0b:43:5e:
                    4d:c6:2b:6e:0e:93:95:5a:ef:bb:21:6a:35:ec:2c:
                    f5:88:a8:ed:b7:03:7f:44:0f:b0:06:73:8b:be:97:
                    f0:68:f3:e0:99:ff:2a:f8:01:81:22:e6:4d:aa:61:
                    f1:9c:7f:ad:1f:1f:7c:08:8a:b0:e4:9f:05:70:91:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:91:0B:38:53:A2:BF:5B:3C:A1:1F:2D:CE:03:46:E5:28:A5:BF:70
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145975.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acfd::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:ce:36:0b:2d:a1:b4:13:ac:fa:f8:12:d0:be:30:20:09:a3:
         9a:9e:a3:c3:e7:be:28:aa:e6:87:c6:ac:a5:c7:75:62:d0:2a:
         1e:95:ae:21:16:b9:83:88:4d:ba:62:a4:1b:d1:d1:d0:63:b4:
         9a:89:da:51:2c:7d:a4:27:60:f3:a2:51:b4:39:3c:95:59:aa:
         60:06:d9:af:88:07:54:45:46:63:d3:d9:49:78:67:9a:9e:eb:
         0e:bf:22:41:1d:21:57:91:8b:77:68:de:81:df:12:87:60:06:
         e2:e2:fc:f6:a2:21:4e:d9:a0:c0:5c:24:b3:c6:85:33:8e:d3:
         2f:9c:86:9e:9a:e1:dc:c1:39:a5:e4:9b:6c:e9:ce:e2:48:71:
         3d:22:7c:41:bc:fd:75:71:46:3f:ae:66:88:5d:6a:bd:50:14:
         08:79:94:59:c9:2a:36:7f:b8:eb:9c:a6:97:14:1d:69:54:53:
         4c:ad:e8:aa:2c:98:4c:29:5c:44:37:be:06:94:f0:59:1f:37:
         39:27:c7:d1:73:13:46:30:4c:8f:ba:8d:83:74:92:9f:ee:a7:
         26:e5:26:6b:f0:af:4c:a6:82:2e:fd:4e:73:60:68:22:1f:c9:
         5e:c1:c9:fb:2e:5c:40:07:dc:28:e7:2e:73:f1:f4:8b:f0:67:
         0c:fc:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----