Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145002.roa
File:                     AS145002.roa (raw, json)
Hash identifier:          7tp8xUW9jK4XoruLfUZLpF0F26g9+SfSSY1+d31xtco=
Subject key identifier:   B7:D4:EF:67:94:33:25:5F:AE:FB:5E:85:AC:D3:AF:87:DB:B2:B7:30
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5D0194B525D868ABDE9A84DA26D567B9B12C7003
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145002.roa
Signing time:             Fri 22 May 2026 01:50:46 +0000
ROA not before:           Fri 22 May 2026 01:45:46 +0000
ROA not after:            Fri 21 May 2027 01:50:46 +0000
asID:                     145002
IP address blocks:        240a:a930::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:01:94:b5:25:d8:68:ab:de:9a:84:da:26:d5:67:b9:b1:2c:70:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:46 2026 GMT
            Not After : May 21 01:50:46 2027 GMT
        Subject: CN=B7D4EF679433255FAEFB5E85ACD3AF87DBB2B730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:f2:1f:d1:55:32:17:82:01:68:78:d0:ec:
                    b4:b2:42:94:ed:48:40:c9:c8:53:56:5d:18:49:5c:
                    14:20:4b:89:c4:6f:b7:1b:21:f8:89:ba:e0:b0:e4:
                    d9:40:52:1e:f6:e3:e9:61:56:d0:f1:81:ad:56:1a:
                    44:0e:b9:dd:90:76:aa:e1:77:93:f2:f8:b4:8c:75:
                    30:02:07:60:51:1f:8a:de:cc:d7:5d:da:af:ee:c8:
                    16:6f:e1:72:76:67:6f:67:2b:f5:09:cd:b9:18:34:
                    59:4b:26:a6:23:2e:4c:d8:19:93:47:78:f7:7b:67:
                    76:bc:24:ad:b6:e8:5d:33:0b:eb:52:9f:3a:c7:b2:
                    5b:f9:98:81:b8:9e:18:a7:3c:bf:19:dc:e9:96:e8:
                    4d:81:e7:72:4a:2c:8d:e0:04:d6:40:6c:f5:43:99:
                    8a:3d:a8:ee:92:7d:22:ad:c0:6e:78:6f:0a:cc:5a:
                    e1:2b:bd:c4:fa:b8:83:61:18:56:53:5b:21:72:5c:
                    9b:2d:17:bd:0a:c8:37:a6:50:66:0a:7f:de:a5:cf:
                    a6:be:8d:93:eb:cb:c0:69:bd:39:cf:a1:40:b0:22:
                    91:62:ef:b5:93:15:b1:a2:b3:28:00:5e:0d:69:ac:
                    8e:bf:e4:90:53:07:8f:b7:11:ce:50:d4:e4:bb:e8:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D4:EF:67:94:33:25:5F:AE:FB:5E:85:AC:D3:AF:87:DB:B2:B7:30
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145002.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a930::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:31:18:e7:c7:6b:f8:78:e7:a9:2c:6b:30:41:7e:1a:c9:cf:
         c6:6b:6f:d2:05:8e:c4:5b:cc:be:5e:41:ef:04:75:ea:58:56:
         1c:a5:ff:fd:e6:20:92:98:39:97:f8:8a:a8:93:a8:bc:08:49:
         b6:8d:77:2a:9d:23:90:76:bd:15:33:0f:02:7c:ef:df:7e:3f:
         d8:44:54:70:0e:b9:e8:f3:53:40:9f:de:99:42:1a:47:17:82:
         55:8b:61:f3:e5:d6:29:f5:85:e0:40:c4:3b:1d:ca:8c:5f:d9:
         7f:d8:32:57:ac:aa:c4:c8:f7:c7:a3:77:f9:6d:68:42:c7:37:
         11:0e:35:4d:70:cc:2f:e0:e3:56:27:95:5d:4a:e3:49:03:b5:
         2b:3d:ae:c8:4c:e3:9b:c7:5d:99:b4:c3:db:9f:b6:03:52:9c:
         d3:1c:5f:b1:29:55:bc:e6:6d:bc:19:ab:1a:7e:53:cd:47:1f:
         11:73:22:3c:fc:d6:c5:18:7a:9f:1b:8c:eb:50:52:dd:cb:cf:
         74:19:45:e0:f3:6d:3d:f0:72:89:30:bd:6a:cb:f3:e6:8a:f6:
         c6:c1:b0:ec:fd:77:97:38:f6:5b:59:05:78:d1:92:f7:d4:4d:
         00:de:18:e1:36:0c:b8:dc:2e:e6:81:51:ed:b9:ac:a5:a8:e7:
         fc:c1:63:f6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXQGUtSXYaKvemoTaJtVnubEscAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1NDZaFw0yNzA1MjEwMTUwNDZaMDMxMTAvBgNV
BAMTKEI3RDRFRjY3OTQzMzI1NUZBRUZCNUU4NUFDRDNBRjg3REJCMkI3MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudvIf0VUyF4IBaHjQ7LSyQpTt
SEDJyFNWXRhJXBQgS4nEb7cbIfiJuuCw5NlAUh724+lhVtDxga1WGkQOud2Qdqrh
d5Py+LSMdTACB2BRH4rezNdd2q/uyBZv4XJ2Z29nK/UJzbkYNFlLJqYjLkzYGZNH
ePd7Z3a8JK226F0zC+tSnzrHslv5mIG4nhinPL8Z3OmW6E2B53JKLI3gBNZAbPVD
mYo9qO6SfSKtwG54bwrMWuErvcT6uINhGFZTWyFyXJstF70KyDemUGYKf96lz6a+
jZPry8BpvTnPoUCwIpFi77WTFbGisygAXg1prI6/5JBTB4+3Ec5Q1OS76CojAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUt9TvZ5QzJV+u+16FrNOvh9uytzAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpMDANBgkqhkiG9w0BAQsFAAOCAQEAGzEY
58dr+HjnqSxrMEF+GsnPxmtv0gWOxFvMvl5B7wR16lhWHKX//eYgkpg5l/iKqJOo
vAhJto13Kp0jkHa9FTMPAnzv334/2ERUcA656PNTQJ/emUIaRxeCVYth8+XWKfWF
4EDEOx3KjF/Zf9gyV6yqxMj3x6N3+W1oQsc3EQ41TXDML+DjVieVXUrjSQO1Kz2u
yEzjm8ddmbTD25+2A1Kc0xxfsSlVvOZtvBmrGn5TzUcfEXMiPPzWxRh6nxuM61BS
3cvPdBlF4PNtPfByiTC9asvz5or2xsGw7P13lzj2W1kFeNGS99RNAN4Y4TYMuNwu
5oFR7bmspajn/MFj9g==
-----END CERTIFICATE-----