Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145035.roa
File:                     AS145035.roa (raw, json)
Hash identifier:          3Hg9nK2GJ8pxiPfpOD37kp74EITR7yiRH3fFNX6GQAs=
Subject key identifier:   89:FA:64:83:BA:08:01:2B:81:60:63:8B:02:B2:B6:83:D8:70:D8:49
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       46BB4EE3837C61AB1190D96ACC542683793DAD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145035.roa
Signing time:             Tue 26 May 2026 02:34:51 +0000
ROA not before:           Tue 26 May 2026 02:29:51 +0000
ROA not after:            Tue 25 May 2027 02:34:51 +0000
asID:                     145035
IP address blocks:        240a:a951::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bb:4e:e3:83:7c:61:ab:11:90:d9:6a:cc:54:26:83:79:3d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:29:51 2026 GMT
            Not After : May 25 02:34:51 2027 GMT
        Subject: CN=89FA6483BA08012B8160638B02B2B683D870D849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:33:2e:58:88:33:2e:f2:df:e3:db:ad:e1:
                    45:3b:89:4a:c5:a6:7a:83:a7:d4:cf:8a:9e:55:fa:
                    04:20:b6:f1:dc:0d:5b:8d:5f:8a:ef:0d:1a:9a:65:
                    5a:41:11:f0:d6:f8:12:6c:c2:7f:ba:b4:85:41:7e:
                    00:c5:40:81:55:bd:0e:ce:d5:71:d1:5d:78:1d:d2:
                    da:35:ce:23:1e:82:cd:07:a6:4a:f7:41:bf:2f:51:
                    ca:70:ba:2b:7e:03:33:61:14:aa:b9:e8:57:4a:b2:
                    5d:bf:72:94:c1:61:06:c0:b5:4a:ba:23:2d:e7:15:
                    a3:32:8a:55:66:4c:a9:b3:83:a1:2b:2e:93:00:8e:
                    ed:32:86:67:7f:ae:88:6c:a0:a2:20:cc:59:e2:ba:
                    29:92:05:bf:99:58:55:f8:93:97:12:8e:55:b4:56:
                    75:36:1c:bf:c1:06:16:45:2f:d1:1f:a8:31:93:34:
                    38:2c:0e:8d:18:9c:1b:da:57:df:ec:50:fb:4e:e4:
                    ef:17:57:3f:2f:f1:71:15:ad:f0:89:ce:36:2f:4d:
                    9a:61:e7:e5:0a:a0:a6:96:20:97:92:44:e1:23:63:
                    2f:5f:da:b1:5c:77:0c:cc:00:f8:4d:2e:a8:c6:97:
                    ed:84:1c:75:5c:94:29:58:4c:a7:dd:d1:05:30:61:
                    cb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FA:64:83:BA:08:01:2B:81:60:63:8B:02:B2:B6:83:D8:70:D8:49
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a951::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:d6:e8:d5:b7:c9:3a:65:95:9d:1e:96:27:50:ae:b1:3a:de:
         92:48:e9:d5:63:41:9f:1b:4c:a4:e8:94:ec:a5:dd:f4:d4:5a:
         ff:5e:90:3b:41:d5:bd:7c:a3:8e:2c:b0:99:65:3c:e1:1a:02:
         6a:38:06:44:3a:23:f2:30:cb:c5:7f:f1:fa:83:72:c5:95:51:
         bb:60:cb:77:be:e6:97:cb:87:41:92:2e:df:11:46:56:27:12:
         2d:5c:f3:03:b6:67:47:e1:cd:18:24:66:49:09:6b:0e:3f:95:
         2f:d5:a2:e8:57:14:a9:80:e8:42:07:53:99:6e:07:2b:89:40:
         6f:dc:1b:66:75:5a:1b:83:e1:a5:aa:ed:0f:af:c9:e1:ad:7b:
         a0:a1:8b:be:fe:94:98:f2:1b:8b:e9:dd:18:71:5c:11:9b:05:
         95:03:e9:e6:9b:e9:8e:db:eb:9c:d8:ba:50:ad:a8:25:ee:b9:
         14:31:ac:78:aa:75:e9:85:74:d7:71:99:1f:58:5a:52:e4:38:
         e7:91:e1:f7:76:1d:ec:ff:15:60:45:7b:da:a3:c6:b4:4a:c5:
         e1:fc:cb:84:5c:04:13:3a:0c:b5:61:ba:17:71:83:60:61:ba:
         02:e3:25:e3:71:4f:c9:68:4e:51:fc:28:ce:d6:dd:72:fd:ff:
         48:59:c4:6a
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgITRrtO44N8YasRkNlqzFQmg3k9rTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg1N0I5NzNGODcyN0YxMTY1MzY4RDFEQTNGMTg1OEZENzY2
MEE0OTYwMB4XDTI2MDUyNjAyMjk1MVoXDTI3MDUyNTAyMzQ1MVowMzExMC8GA1UE
AxMoODlGQTY0ODNCQTA4MDEyQjgxNjA2MzhCMDJCMkI2ODNEODcwRDg0OTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALQjMy5YiDMu8t/j263hRTuJSsWm
eoOn1M+KnlX6BCC28dwNW41fiu8NGpplWkER8Nb4EmzCf7q0hUF+AMVAgVW9Ds7V
cdFdeB3S2jXOIx6CzQemSvdBvy9RynC6K34DM2EUqrnoV0qyXb9ylMFhBsC1Sroj
LecVozKKVWZMqbODoSsukwCO7TKGZ3+uiGygoiDMWeK6KZIFv5lYVfiTlxKOVbRW
dTYcv8EGFkUv0R+oMZM0OCwOjRicG9pX3+xQ+07k7xdXPy/xcRWt8InONi9NmmHn
5QqgppYgl5JE4SNjL1/asVx3DMwA+E0uqMaX7YQcdVyUKVhMp93RBTBhy+8CAwEA
AaOCAcMwggG/MB0GA1UdDgQWBBSJ+mSDuggBK4FgY4sCsraD2HDYSTAfBgNVHSME
GDAWgBRXuXP4cn8RZTaNHaPxhY/XZgpJYDAOBgNVHQ8BAf8EBAMCB4AwagYDVR0f
BGMwYTBfoF2gW4ZZcnN5bmM6Ly9yc3luYy5maXRpLm5ldC5jbi9yZXBvL2ZpdGkt
c3ViMDAyLzAvNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2NjBBNDk2
MC5jcmwwbgYIKwYBBQUHAQEEYjBgMF4GCCsGAQUFBzAChlJyc3luYzovL3Jwa2ku
Y2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURB
M0YxODU4RkQ3NjYwQTQ5NjAuY2VyMFUGCCsGAQUFBwELBEkwRzBFBggrBgEFBQcw
C4Y5cnN5bmM6Ly9yc3luYy5maXRpLm5ldC5jbi9yZXBvL2ZpdGktc3ViMDAyLzAv
QVMxNDUwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAkCqlRMA0GCSqGSIb3DQEBCwUAA4IBAQBb1ujV
t8k6ZZWdHpYnUK6xOt6SSOnVY0GfG0yk6JTspd301Fr/XpA7QdW9fKOOLLCZZTzh
GgJqOAZEOiPyMMvFf/H6g3LFlVG7YMt3vuaXy4dBki7fEUZWJxItXPMDtmdH4c0Y
JGZJCWsOP5Uv1aLoVxSpgOhCB1OZbgcriUBv3BtmdVobg+Glqu0Pr8nhrXugoYu+
/pSY8huL6d0YcVwRmwWVA+nmm+mO2+uc2LpQragl7rkUMax4qnXphXTXcZkfWFpS
5DjnkeH3dh3s/xVgRXvao8a0SsXh/MuEXAQTOgy1YboXcYNgYboC4yXjcU/JaE5R
/CjO1t1y/f9IWcRq
-----END CERTIFICATE-----