Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145054.roa
File:                     AS145054.roa (raw, json)
Hash identifier:          2gtp91X59os+DSW0SSVu/H67U1Lnu6Q2ooUo1hJ+PuI=
Subject key identifier:   FC:74:43:1E:5C:8D:7D:11:63:93:62:9B:57:12:4E:86:5B:41:0C:20
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4BB746EE9CD8DC714B9F09E9E5B5F9EA1B20F1CE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145054.roa
Signing time:             Fri 22 May 2026 04:08:10 +0000
ROA not before:           Fri 22 May 2026 04:03:10 +0000
ROA not after:            Fri 21 May 2027 04:08:10 +0000
asID:                     145054
IP address blocks:        240a:a964::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b7:46:ee:9c:d8:dc:71:4b:9f:09:e9:e5:b5:f9:ea:1b:20:f1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:10 2026 GMT
            Not After : May 21 04:08:10 2027 GMT
        Subject: CN=FC74431E5C8D7D116393629B57124E865B410C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:be:e1:0d:b4:a7:86:33:f7:42:52:5f:6f:21:
                    b7:fc:09:78:6e:41:8d:34:ee:a2:24:de:64:a6:71:
                    53:df:0e:9d:9e:ec:b1:d9:b9:7f:35:36:58:7b:45:
                    55:7e:2a:43:48:6a:6c:73:ad:dd:d1:bc:08:9d:62:
                    85:b7:fd:51:77:53:ff:a8:44:1f:61:9f:fe:9b:98:
                    fa:2a:a8:d0:42:34:6e:65:7a:cb:bf:24:ec:04:65:
                    a1:46:14:0d:ce:4b:3e:a5:ee:e2:b9:87:2e:ee:c6:
                    74:84:98:4d:e6:11:34:1d:da:e8:de:2e:92:bd:22:
                    cd:d3:d3:41:2a:78:bf:00:84:c0:89:f6:bc:38:be:
                    30:f8:34:68:3f:25:d7:99:98:a5:39:22:57:5c:ee:
                    02:09:42:42:78:15:9b:21:52:9d:ab:4a:ad:e5:47:
                    08:1c:de:ac:d4:94:7c:af:f0:f4:bb:aa:3b:09:71:
                    6f:a7:95:89:0b:96:b0:0d:72:5d:a4:42:34:a8:06:
                    a2:9f:0a:f5:c9:75:89:14:2a:2d:13:fb:c8:79:95:
                    aa:18:eb:85:32:bc:22:84:f6:b7:91:20:46:bd:53:
                    40:b5:1d:0f:72:ba:8b:a9:ac:59:2f:3b:ea:0e:e9:
                    88:ac:b7:13:88:82:d9:4b:e8:cc:01:59:9d:e8:27:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:74:43:1E:5C:8D:7D:11:63:93:62:9B:57:12:4E:86:5B:41:0C:20
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145054.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a964::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:53:d1:b7:9b:6f:e7:51:8a:79:60:46:ab:41:50:60:6f:56:
         93:7a:96:64:9b:fd:69:d9:e9:7c:eb:18:f9:5c:bd:6b:b1:a9:
         39:12:de:5e:b2:b4:08:a4:d0:e2:c2:d0:7e:da:df:b2:3d:07:
         7a:32:8b:ae:91:37:33:88:0d:8b:8c:69:6f:09:24:4a:12:9a:
         44:41:e6:b1:26:c3:1d:aa:83:5e:b3:5a:95:b3:54:8d:ea:22:
         c4:d6:b1:12:42:2a:2a:05:38:7d:53:ab:51:4e:8a:6c:80:1f:
         ee:a2:60:7c:7d:df:10:6d:48:59:67:93:98:d0:de:c5:bb:d5:
         6f:ef:45:a6:d6:71:13:91:c9:4c:74:5e:5f:46:e9:30:da:23:
         14:98:f8:f6:ed:45:cc:b7:c3:58:f6:e3:e0:90:03:46:62:9c:
         24:70:41:17:32:1b:51:2e:b5:0b:db:e5:3f:17:55:5b:d4:5b:
         d8:07:72:94:64:b1:20:e4:c0:d8:a2:18:06:9f:c8:b6:9f:6f:
         72:6e:12:cc:ee:84:70:b6:39:60:89:a1:5d:d0:71:05:07:53:
         f6:e1:e8:80:ae:b5:65:64:7f:ee:15:8b:26:8a:2f:5f:bd:37:
         c4:7d:4b:c9:fe:cd:a7:90:b9:6f:1c:d4:10:de:f6:4b:03:a7:
         ba:93:50:84
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUS7dG7pzY3HFLnwnp5bX56hsg8c4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMTBaFw0yNzA1MjEwNDA4MTBaMDMxMTAvBgNV
BAMTKEZDNzQ0MzFFNUM4RDdEMTE2MzkzNjI5QjU3MTI0RTg2NUI0MTBDMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPvuENtKeGM/dCUl9vIbf8CXhu
QY007qIk3mSmcVPfDp2e7LHZuX81Nlh7RVV+KkNIamxzrd3RvAidYoW3/VF3U/+o
RB9hn/6bmPoqqNBCNG5lesu/JOwEZaFGFA3OSz6l7uK5hy7uxnSEmE3mETQd2uje
LpK9Is3T00EqeL8AhMCJ9rw4vjD4NGg/JdeZmKU5Ildc7gIJQkJ4FZshUp2rSq3l
Rwgc3qzUlHyv8PS7qjsJcW+nlYkLlrANcl2kQjSoBqKfCvXJdYkUKi0T+8h5laoY
64UyvCKE9reRIEa9U0C1HQ9yuouprFkvO+oO6YistxOIgtlL6MwBWZ3oJyoRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/HRDHlyNfRFjk2KbVxJOhltBDCAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpZDANBgkqhkiG9w0BAQsFAAOCAQEAmlPR
t5tv51GKeWBGq0FQYG9Wk3qWZJv9adnpfOsY+Vy9a7GpORLeXrK0CKTQ4sLQftrf
sj0HejKLrpE3M4gNi4xpbwkkShKaREHmsSbDHaqDXrNalbNUjeoixNaxEkIqKgU4
fVOrUU6KbIAf7qJgfH3fEG1IWWeTmNDexbvVb+9FptZxE5HJTHReX0bpMNojFJj4
9u1FzLfDWPbj4JADRmKcJHBBFzIbUS61C9vlPxdVW9Rb2AdylGSxIOTA2KIYBp/I
tp9vcm4SzO6EcLY5YImhXdBxBQdT9uHogK61ZWR/7hWLJoovX703xH1Lyf7Np5C5
bxzUEN72SwOnupNQhA==
-----END CERTIFICATE-----