Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145984.roa
File:                     AS145984.roa (raw, json)
Hash identifier:          +NoWNHVtnZeeMgLstN/CKhstX/0N50hIJdqnXVPOq8k=
Subject key identifier:   9A:97:AE:B9:FC:F1:86:FE:85:F5:2E:9B:D9:52:2E:79:63:68:16:18
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       288EB937F80665FB433540CCA048005D47C29290
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145984.roa
Signing time:             Tue 26 May 2026 06:30:30 +0000
ROA not before:           Tue 26 May 2026 06:25:30 +0000
ROA not after:            Tue 25 May 2027 06:30:30 +0000
asID:                     145984
IP address blocks:        240a:ad06::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8e:b9:37:f8:06:65:fb:43:35:40:cc:a0:48:00:5d:47:c2:92:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:30 2026 GMT
            Not After : May 25 06:30:30 2027 GMT
        Subject: CN=9A97AEB9FCF186FE85F52E9BD9522E7963681618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b0:18:1e:ea:61:23:6a:3d:bc:00:80:3b:aa:
                    2a:ca:1a:f9:cc:7a:71:be:e1:ec:c8:e8:82:1d:c2:
                    5c:5b:13:64:94:cb:d5:e5:f1:bc:8c:1b:7c:89:46:
                    a3:9d:bb:d8:20:e8:77:fa:e7:83:bb:19:ab:33:8b:
                    e5:b4:9d:24:a2:51:49:94:bf:fe:25:c7:0a:17:6b:
                    79:db:29:c1:dd:62:18:5a:15:8e:8e:6c:b3:c8:9a:
                    6b:6d:47:df:0b:9c:bb:75:2c:b0:df:a2:33:a3:5e:
                    57:b2:71:e7:a5:2e:7b:90:92:8b:62:1e:c3:9f:b5:
                    b3:84:9d:3b:93:36:ce:e2:d8:dc:b7:4e:60:ad:2d:
                    7c:d9:eb:42:e3:10:b6:5a:69:df:ee:15:9f:2a:64:
                    ba:8f:60:a8:35:7c:dc:a3:77:a7:46:3f:a1:5a:62:
                    06:90:0b:77:76:a8:15:b0:b6:69:24:22:46:70:6d:
                    18:ff:56:f0:cc:27:3a:80:85:11:18:36:db:fa:69:
                    2a:14:4a:4c:07:e8:1c:fa:99:fa:57:09:ef:de:0b:
                    fc:d4:dc:d2:9f:dd:5e:aa:aa:98:f4:81:b7:b4:03:
                    72:56:dd:33:e8:0b:7e:cc:96:4f:f0:9f:cc:1b:74:
                    9e:2d:67:4d:12:c3:04:17:d0:0a:1b:11:5a:7b:2f:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:97:AE:B9:FC:F1:86:FE:85:F5:2E:9B:D9:52:2E:79:63:68:16:18
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145984.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad06::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:e0:f7:33:e5:3f:91:e8:08:24:e5:60:af:90:c5:00:a8:ca:
         58:c5:e4:33:45:2d:6f:ab:6a:0b:73:ce:a4:9a:10:56:95:3a:
         b4:d4:2f:d9:e4:82:80:2b:ea:80:46:18:98:b6:95:a2:eb:8d:
         43:90:93:23:94:2a:16:8f:e0:fa:48:de:4d:c7:f9:0d:4d:68:
         ca:d8:e0:0c:af:b1:87:9c:35:f8:d0:c8:85:70:d0:2c:bd:b8:
         d7:2b:31:8a:35:78:80:be:d9:fd:a8:5f:5a:c4:fa:0a:42:b2:
         a0:74:fb:5a:ab:6c:fc:4b:9f:69:f6:22:76:1a:34:b2:b7:60:
         b1:75:5e:c0:41:a5:45:4b:7e:54:f8:79:f1:40:cc:28:c6:53:
         38:72:c6:9e:5f:6f:cc:b5:c8:58:e7:00:f0:7a:92:e7:b2:25:
         62:bf:47:62:78:9e:2b:87:82:92:1a:5d:39:6d:ba:a1:19:f5:
         9c:4d:6f:cb:77:75:8d:62:55:8c:0b:a8:4c:5d:04:e0:77:9f:
         ba:59:32:3e:57:6a:da:3e:3e:26:e4:6d:bb:f6:00:6a:7a:13:
         c5:5e:ab:01:79:ae:72:2c:5e:20:ea:f4:9b:d5:b2:2a:e8:b1:
         90:de:db:35:ea:22:15:0d:25:b4:ba:98:3b:4b:be:38:77:5d:
         fb:49:fc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----