Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145997.roa
File:                     AS145997.roa (raw, json)
Hash identifier:          XqTyE37RZOjhalNC5Q/MR6lprVV55ZtW0r3qle78kKE=
Subject key identifier:   36:48:5D:2B:73:2B:E5:CF:D6:A4:28:73:F9:80:AA:F3:31:5A:79:18
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       03D13BC8F839BD5586443A6C19890DD11C777517
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145997.roa
Signing time:             Mon 25 May 2026 01:38:05 +0000
ROA not before:           Mon 25 May 2026 01:33:05 +0000
ROA not after:            Mon 24 May 2027 01:38:05 +0000
asID:                     145997
IP address blocks:        240a:ad13::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d1:3b:c8:f8:39:bd:55:86:44:3a:6c:19:89:0d:d1:1c:77:75:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:05 2026 GMT
            Not After : May 24 01:38:05 2027 GMT
        Subject: CN=36485D2B732BE5CFD6A42873F980AAF3315A7918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:1e:3c:5a:5f:75:eb:cf:28:24:ec:2c:c7:
                    08:79:5f:97:bc:5a:7d:72:b0:50:e4:7c:d4:3a:2d:
                    a3:50:eb:0e:96:15:85:78:ba:e9:69:ff:24:9e:b1:
                    52:05:26:36:53:f6:28:ec:16:df:c0:46:3c:92:3a:
                    d7:02:ec:0d:4a:fc:26:d7:66:56:ec:be:93:f9:f4:
                    c8:3f:68:1c:ef:48:fc:1d:9e:39:40:3f:8b:1d:85:
                    5e:a1:75:9c:a9:e1:0d:9f:2f:8e:3b:8b:89:b7:a4:
                    83:c7:1b:9e:dd:05:00:dc:92:fe:49:40:ce:e6:ba:
                    70:ba:e8:5f:b0:d5:6e:fd:60:b3:11:1a:59:ff:c9:
                    52:a2:76:35:f6:01:d6:04:de:cd:fb:5c:92:a8:df:
                    fa:16:66:5b:c3:8a:a4:27:77:f9:a7:e5:5a:c9:27:
                    80:73:44:2d:04:8a:88:f2:cd:33:b0:04:3d:f6:5e:
                    c2:f3:d0:bc:c0:d1:c3:92:1a:e1:9f:03:1c:7a:37:
                    75:67:9b:61:e2:92:7c:27:54:ed:74:fb:e4:4e:e1:
                    2f:8f:be:b3:e6:53:e3:0c:ac:b9:af:ab:6a:46:98:
                    81:97:8f:47:1e:51:21:31:f0:91:99:e1:95:b2:91:
                    89:99:73:19:1e:d2:05:83:1f:90:1f:3a:95:72:9f:
                    20:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:48:5D:2B:73:2B:E5:CF:D6:A4:28:73:F9:80:AA:F3:31:5A:79:18
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145997.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad13::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:53:d7:00:c9:3e:bb:24:e1:35:b3:b5:40:ed:94:84:12:d3:
         f2:f9:16:46:ee:1f:d1:a5:7f:b0:db:89:01:a3:bc:f8:04:6f:
         83:45:6b:c3:dd:04:ae:83:d8:08:04:a1:0c:73:fa:2b:77:a8:
         dd:84:fa:a3:0b:18:50:34:a8:48:93:c3:c0:ed:0f:ee:cc:00:
         e9:13:34:d8:7a:65:1f:a8:16:96:92:6e:4a:7b:e2:52:5a:7b:
         e3:ae:f9:3e:27:14:69:9e:fc:45:87:d7:12:7f:31:dc:38:66:
         5c:c5:8d:16:5f:3e:b4:29:73:ad:9f:a5:69:e6:15:a1:46:e2:
         f5:2e:81:4b:f0:34:8e:d3:7a:04:8a:72:ad:a8:e6:af:5b:bc:
         e9:9f:6e:c9:43:74:d4:49:e8:c2:6d:3c:65:33:27:11:a5:f2:
         9a:c1:93:57:15:b8:33:1b:9c:36:71:c4:09:52:f1:f6:f1:92:
         4d:01:54:73:a5:e5:48:5a:de:35:21:24:9d:b7:ff:a8:68:3a:
         ac:f9:01:c8:6b:15:ce:84:53:4c:bc:48:1e:e1:09:06:d9:78:
         9d:fb:b8:82:2e:05:5c:6f:ec:1f:4c:d9:1d:8f:60:36:70:29:
         92:12:d9:bc:6b:54:f2:45:7c:6e:a2:7a:d6:14:cd:c5:5e:06:
         fd:a2:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----