Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145988.roa
File:                     AS145988.roa (raw, json)
Hash identifier:          oNtDeHW6CxjQ9ctWHqig6ElZnGAaPUblkWmXm0rHT4E=
Subject key identifier:   C9:C2:9A:41:E3:D1:0B:82:75:0B:91:2B:2F:2B:14:4A:26:D8:23:E2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       76BD5F7E57E5EA47B5FC666988E045ED3C9F51E1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145988.roa
Signing time:             Tue 26 May 2026 03:17:00 +0000
ROA not before:           Tue 26 May 2026 03:12:00 +0000
ROA not after:            Tue 25 May 2027 03:17:00 +0000
asID:                     145988
IP address blocks:        240a:ad0a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bd:5f:7e:57:e5:ea:47:b5:fc:66:69:88:e0:45:ed:3c:9f:51:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:00 2026 GMT
            Not After : May 25 03:17:00 2027 GMT
        Subject: CN=C9C29A41E3D10B82750B912B2F2B144A26D823E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:5b:81:2d:f6:87:11:44:a6:50:8a:84:6d:00:
                    bb:e6:d7:43:09:19:98:66:41:0c:b4:b1:a4:f6:a3:
                    46:6f:55:59:13:dc:6c:47:18:e2:8c:04:00:14:ae:
                    b3:f8:f0:46:66:9d:71:bb:ac:5b:ca:ef:2e:0f:4f:
                    f6:7d:2b:8f:52:25:c6:10:0b:c5:dd:1a:df:4f:0a:
                    d3:3f:5a:c9:a6:22:fc:02:32:ae:96:5a:2e:d8:bd:
                    0c:ff:12:83:6d:d8:a1:ad:8b:0d:61:c1:89:c3:18:
                    09:fa:6a:31:25:2b:ac:b4:91:dd:57:96:e3:ef:18:
                    ea:25:83:a4:02:d1:a8:1d:57:62:a0:86:45:92:b7:
                    67:50:5e:a8:dc:77:a8:47:e5:a5:ca:26:6a:6f:41:
                    61:09:7c:83:93:3d:be:a5:52:e1:55:03:d7:87:9c:
                    e7:7b:3a:dc:7d:45:ed:ad:a7:04:1f:b1:e1:ca:14:
                    fd:ef:bd:75:cd:72:90:31:d4:88:fc:ca:b2:e0:5e:
                    69:bb:e9:b8:1e:66:c7:36:ed:bc:88:a5:a9:05:92:
                    7e:7c:8d:19:07:8a:fe:c4:7b:67:74:61:d9:32:5c:
                    a5:6e:09:c9:e8:33:9d:62:94:b6:ff:80:5a:19:27:
                    e8:a5:1f:a3:dd:bf:f2:c6:a1:56:ca:5b:79:a8:e3:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C2:9A:41:E3:D1:0B:82:75:0B:91:2B:2F:2B:14:4A:26:D8:23:E2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145988.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad0a::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:8e:f1:36:c2:de:d9:5b:1a:89:b9:07:67:69:28:f6:af:bc:
         e8:1d:8d:4b:e5:f8:4b:02:7d:d5:0d:a7:e3:be:ec:e0:78:da:
         10:ab:06:a4:1d:17:ca:f9:e4:33:9f:b7:7f:28:dc:27:ba:47:
         77:5a:20:8b:d2:6c:99:60:32:ee:2c:ce:3d:38:42:b6:bd:c5:
         29:49:a4:53:e2:db:f8:63:f0:f2:21:c5:41:93:96:85:ab:1e:
         80:f9:c5:fd:d5:48:46:7f:95:5b:ea:d4:72:cf:65:be:dd:ab:
         1f:4e:ec:75:6b:c0:93:3e:8a:83:56:74:29:d9:01:c6:18:45:
         17:b7:12:40:46:47:57:22:d0:08:06:37:d1:1f:55:d2:e6:51:
         ab:3d:81:28:4d:89:5b:e7:9e:da:99:1f:51:36:99:42:ae:93:
         cd:00:12:20:c0:40:b2:d6:b3:0f:70:ff:0e:a1:09:2a:bb:12:
         fe:b0:ba:94:9e:02:6c:fd:eb:d1:23:94:5f:f1:77:03:9d:f2:
         70:83:d6:97:30:b1:8f:52:b7:45:c5:99:fa:03:6f:4e:18:91:
         2e:e6:31:1d:92:09:68:06:c5:9d:f6:77:c7:41:4e:d0:dc:5b:
         6f:6c:2a:23:f2:2d:fb:26:e6:b2:49:ed:d6:9c:b1:62:81:60:
         ab:f3:1e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----