Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145030.roa
File:                     AS145030.roa (raw, json)
Hash identifier:          KsyYHn84IlMZDOM1Is1spzgfVU8iOWjr+8FK4bbiLMM=
Subject key identifier:   D0:C4:BE:6B:BF:85:16:2F:07:55:FD:30:69:5D:A1:6C:A2:AA:B8:09
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1C8EFB40BA813419D51F5731C8A9B159FB5B0985
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145030.roa
Signing time:             Fri 22 May 2026 07:40:49 +0000
ROA not before:           Fri 22 May 2026 07:35:49 +0000
ROA not after:            Fri 21 May 2027 07:40:49 +0000
asID:                     145030
IP address blocks:        240a:a94c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8e:fb:40:ba:81:34:19:d5:1f:57:31:c8:a9:b1:59:fb:5b:09:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:49 2026 GMT
            Not After : May 21 07:40:49 2027 GMT
        Subject: CN=D0C4BE6BBF85162F0755FD30695DA16CA2AAB809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:7b:fb:3c:6b:98:c4:ca:8a:f8:d7:3e:21:
                    be:4c:6b:fd:19:54:b6:9c:d8:c2:49:3e:f1:31:fa:
                    5e:01:79:0e:0b:39:6a:b2:87:9d:da:93:80:c5:30:
                    be:4e:f4:6a:59:3c:1f:20:86:d5:16:80:d7:fb:ed:
                    7c:08:be:9b:fe:a4:83:9e:6e:1b:ba:3c:94:87:ff:
                    7b:02:5a:1f:22:94:7f:32:73:4a:e3:ed:52:35:2b:
                    61:ab:29:7c:ed:78:32:e1:19:37:78:38:95:30:e6:
                    35:bc:1d:67:8b:5f:24:8d:22:a0:54:39:41:b3:92:
                    bf:59:b4:4d:bd:23:93:6b:c5:00:50:d1:54:f2:f5:
                    74:cc:39:ae:22:55:57:21:d2:02:6d:3b:77:6b:95:
                    68:d0:e3:6e:2f:b0:e1:f9:93:46:77:c5:ec:df:5d:
                    d8:e1:d2:85:f3:75:fb:1b:ca:67:06:27:21:d9:f9:
                    9e:66:a7:8e:fe:ab:0a:6e:47:19:45:2f:62:75:ac:
                    67:20:85:2f:1d:8b:67:50:49:53:7a:cd:d1:57:e6:
                    4c:0e:ce:90:4e:70:f1:7f:b0:08:c3:67:39:0f:ed:
                    77:cb:2e:fa:df:72:bc:e8:d2:6f:02:e0:df:9a:19:
                    d1:ac:78:6f:15:d1:90:07:21:74:a7:2c:2f:8a:c1:
                    a4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C4:BE:6B:BF:85:16:2F:07:55:FD:30:69:5D:A1:6C:A2:AA:B8:09
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a94c::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:32:71:f1:df:fc:81:03:85:3c:30:f0:68:ed:3e:84:54:51:
         8d:9d:ac:56:a9:8d:f1:7c:e2:2b:5d:4c:4c:ce:31:42:2a:70:
         43:31:e5:9b:f4:49:b0:9b:36:16:61:60:68:36:75:5c:a5:99:
         d9:1f:c5:26:0f:53:07:22:42:93:a8:0e:64:16:9b:13:9e:f4:
         9e:9d:44:e6:5a:d8:09:99:7d:14:d6:33:47:62:a0:2a:7b:b4:
         c4:94:ad:40:cd:59:c1:fc:47:b8:d8:ba:fa:92:d7:17:89:03:
         af:55:2f:ae:6d:b7:18:a8:5b:db:be:cd:06:fd:35:5c:6a:95:
         7d:d8:66:ca:c6:27:e0:4a:54:28:91:96:54:09:ba:cb:ee:9d:
         d0:dc:63:96:71:1b:cd:a2:b6:2b:02:29:16:99:84:c5:55:19:
         c6:02:99:30:eb:f7:2f:ce:75:67:2d:7c:7e:5d:bb:14:9a:07:
         ef:b4:e9:55:a4:aa:d9:55:8a:f9:38:94:1f:25:7d:9e:78:87:
         21:11:34:12:e4:72:c4:3f:75:53:29:5a:cc:40:d3:20:07:8d:
         01:1e:d8:c0:6b:5d:2a:7a:23:97:d8:c0:0c:37:e7:14:60:60:
         1f:5e:42:a5:37:de:07:f2:9e:56:25:cc:73:fa:c6:c8:14:0e:
         ea:5e:67:3a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUHI77QLqBNBnVH1cxyKmxWftbCYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM1NDlaFw0yNzA1MjEwNzQwNDlaMDMxMTAvBgNV
BAMTKEQwQzRCRTZCQkY4NTE2MkYwNzU1RkQzMDY5NURBMTZDQTJBQUI4MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1onv7PGuYxMqK+Nc+Ib5Ma/0Z
VLac2MJJPvEx+l4BeQ4LOWqyh53ak4DFML5O9GpZPB8ghtUWgNf77XwIvpv+pIOe
bhu6PJSH/3sCWh8ilH8yc0rj7VI1K2GrKXzteDLhGTd4OJUw5jW8HWeLXySNIqBU
OUGzkr9ZtE29I5NrxQBQ0VTy9XTMOa4iVVch0gJtO3drlWjQ424vsOH5k0Z3xezf
Xdjh0oXzdfsbymcGJyHZ+Z5mp47+qwpuRxlFL2J1rGcghS8di2dQSVN6zdFX5kwO
zpBOcPF/sAjDZzkP7XfLLvrfcrzo0m8C4N+aGdGseG8V0ZAHIXSnLC+KwaTlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU0MS+a7+FFi8HVf0waV2hbKKquAkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpTDANBgkqhkiG9w0BAQsFAAOCAQEAFjJx
8d/8gQOFPDDwaO0+hFRRjZ2sVqmN8XziK11MTM4xQipwQzHlm/RJsJs2FmFgaDZ1
XKWZ2R/FJg9TByJCk6gOZBabE570np1E5lrYCZl9FNYzR2KgKnu0xJStQM1ZwfxH
uNi6+pLXF4kDr1Uvrm23GKhb277NBv01XGqVfdhmysYn4EpUKJGWVAm6y+6d0Nxj
lnEbzaK2KwIpFpmExVUZxgKZMOv3L851Zy18fl27FJoH77TpVaSq2VWK+TiUHyV9
nniHIRE0EuRyxD91UylazEDTIAeNAR7YwGtdKnojl9jADDfnFGBgH15CpTfeB/Ke
ViXMc/rGyBQO6l5nOg==
-----END CERTIFICATE-----