Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145084.roa
File:                     AS145084.roa (raw, json)
Hash identifier:          udz8/3hHyHZPYNGnYy5eL0jbIXHn8l/0+n9+Sosma+A=
Subject key identifier:   1E:2C:42:49:C9:85:B2:3C:C0:4F:5B:2F:0F:22:FC:F4:A6:86:EC:E7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0A4632F5F9779AF3AA152289697C3FDB7C60D806
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145084.roa
Signing time:             Fri 22 May 2026 06:46:19 +0000
ROA not before:           Fri 22 May 2026 06:41:19 +0000
ROA not after:            Fri 21 May 2027 06:46:19 +0000
asID:                     145084
IP address blocks:        240a:a982::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:46:32:f5:f9:77:9a:f3:aa:15:22:89:69:7c:3f:db:7c:60:d8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:19 2026 GMT
            Not After : May 21 06:46:19 2027 GMT
        Subject: CN=1E2C4249C985B23CC04F5B2F0F22FCF4A686ECE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:10:d8:1e:26:b0:38:9a:e4:05:38:ae:72:
                    b7:4b:bb:3e:24:59:92:d4:a7:4e:c3:0e:49:73:18:
                    ca:e5:6c:58:49:77:a3:4d:3b:e7:33:d8:7c:85:95:
                    dc:d2:c6:b4:24:a5:ef:c5:94:b0:0e:44:ba:f0:dc:
                    e6:df:c5:7b:b5:4a:a8:90:d5:0c:d7:3c:18:77:b5:
                    67:59:b7:fb:cf:65:78:8a:d3:d4:48:c2:50:67:a9:
                    fd:f7:ca:ec:88:52:e4:6f:bc:69:a6:1a:76:cd:71:
                    c5:3b:65:87:36:a0:e2:de:43:28:d0:28:00:da:39:
                    99:45:30:ae:5c:22:c9:0e:f0:56:b1:79:51:ae:ea:
                    75:7a:7d:34:aa:76:ea:0e:8b:6f:19:b1:e0:6a:c3:
                    5d:b9:5d:a3:5a:40:7a:b8:bf:4f:dd:bc:0e:aa:02:
                    2b:c4:54:74:2c:e8:7e:4a:88:53:9d:66:94:f6:13:
                    38:bf:dc:d8:6c:84:0c:12:53:99:c1:46:3b:02:08:
                    5e:62:d0:46:a1:73:74:93:6c:b1:e4:f0:b6:6e:73:
                    14:7f:f3:b1:d8:fa:96:23:3e:c8:06:53:b0:fa:7b:
                    5a:07:a1:d2:d9:24:40:6b:99:c2:a5:07:75:af:b2:
                    9d:e3:2e:cc:a0:fb:31:7b:0b:3e:c3:51:64:e3:5e:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2C:42:49:C9:85:B2:3C:C0:4F:5B:2F:0F:22:FC:F4:A6:86:EC:E7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145084.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a982::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:7e:47:45:1e:f2:4c:86:af:dd:50:59:63:5e:2d:22:7e:32:
         b1:f1:74:f7:54:33:91:56:85:b8:fe:17:5b:6a:2c:22:22:e3:
         39:37:96:9d:65:ab:57:d2:0d:77:00:dc:61:ff:55:a6:18:6e:
         c3:5f:ce:8c:5b:11:70:9a:dc:66:4a:d3:56:05:ad:4a:ec:9c:
         0c:02:fe:f3:93:71:3f:88:fa:f1:b8:75:6e:ce:2d:b9:70:82:
         bb:60:47:73:03:6c:66:0a:4d:e1:c5:8f:26:34:62:34:7f:f7:
         58:f3:bd:82:6c:86:0a:55:21:e7:11:b3:18:cc:2b:00:f1:8b:
         84:61:5c:d6:41:55:df:7b:73:0b:2c:68:ed:96:4d:0e:b2:7c:
         d9:57:be:fe:df:3f:24:64:bd:44:13:95:56:c8:b2:38:0e:43:
         9b:bb:70:5f:05:bb:4a:86:11:3a:fa:b4:c1:6b:a5:03:c1:f1:
         10:98:db:8a:fc:37:ac:f9:ca:a9:cb:fd:8e:43:38:ac:a3:b1:
         30:7f:93:3e:31:cf:ad:d2:f8:ef:44:23:d9:7b:c4:9f:17:82:
         d2:74:b1:7a:db:16:24:e2:a7:76:76:b0:67:15:10:8b:b7:64:
         b9:88:97:9a:84:68:d8:23:05:aa:46:9f:02:e2:20:9a:ca:ce:
         7c:0f:b3:8a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUCkYy9fl3mvOqFSKJaXw/23xg2AYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMTlaFw0yNzA1MjEwNjQ2MTlaMDMxMTAvBgNV
BAMTKDFFMkM0MjQ5Qzk4NUIyM0NDMDRGNUIyRjBGMjJGQ0Y0QTY4NkVDRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbRDYHiawOJrkBTiucrdLuz4k
WZLUp07DDklzGMrlbFhJd6NNO+cz2HyFldzSxrQkpe/FlLAORLrw3ObfxXu1SqiQ
1QzXPBh3tWdZt/vPZXiK09RIwlBnqf33yuyIUuRvvGmmGnbNccU7ZYc2oOLeQyjQ
KADaOZlFMK5cIskO8FaxeVGu6nV6fTSqduoOi28ZseBqw125XaNaQHq4v0/dvA6q
AivEVHQs6H5KiFOdZpT2Ezi/3NhshAwSU5nBRjsCCF5i0Eahc3STbLHk8LZucxR/
87HY+pYjPsgGU7D6e1oHodLZJEBrmcKlB3Wvsp3jLsyg+zF7Cz7DUWTjXjb5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUHixCScmFsjzAT1svDyL89KaG7OcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpgjANBgkqhkiG9w0BAQsFAAOCAQEAaX5H
RR7yTIav3VBZY14tIn4ysfF091QzkVaFuP4XW2osIiLjOTeWnWWrV9INdwDcYf9V
phhuw1/OjFsRcJrcZkrTVgWtSuycDAL+85NxP4j68bh1bs4tuXCCu2BHcwNsZgpN
4cWPJjRiNH/3WPO9gmyGClUh5xGzGMwrAPGLhGFc1kFV33tzCyxo7ZZNDrJ82Ve+
/t8/JGS9RBOVVsiyOA5Dm7twXwW7SoYROvq0wWulA8HxEJjbivw3rPnKqcv9jkM4
rKOxMH+TPjHPrdL470Qj2XvEnxeC0nSxetsWJOKndnawZxUQi7dkuYiXmoRo2CMF
qkafAuIgmsrOfA+zig==
-----END CERTIFICATE-----