Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145165.roa
File:                     AS145165.roa (raw, json)
Hash identifier:          UENOViEaZyayLqB+9iIhthxBAVaJZyJnCdQ3CQa1ML4=
Subject key identifier:   B0:A8:28:D5:96:78:91:EB:0D:92:5A:78:15:E3:14:4A:74:FD:11:75
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7664E30141122EEB8E896D06EA6F110C93E2C1F1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145165.roa
Signing time:             Fri 22 May 2026 06:58:18 +0000
ROA not before:           Fri 22 May 2026 06:53:18 +0000
ROA not after:            Fri 21 May 2027 06:58:18 +0000
asID:                     145165
IP address blocks:        240a:a9d3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:64:e3:01:41:12:2e:eb:8e:89:6d:06:ea:6f:11:0c:93:e2:c1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:18 2026 GMT
            Not After : May 21 06:58:18 2027 GMT
        Subject: CN=B0A828D5967891EB0D925A7815E3144A74FD1175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:92:6b:56:02:d5:f5:43:fc:33:e6:f3:79:
                    de:4e:33:e0:7f:bd:4d:ee:4c:14:91:5f:bb:88:4f:
                    eb:c8:9c:92:93:35:fe:56:b5:98:e1:a4:96:0d:70:
                    7c:14:72:36:7f:3d:68:1b:d2:16:3b:d8:09:99:ae:
                    c5:0d:66:7c:8d:35:3f:85:d7:8d:c0:86:60:b9:c3:
                    bd:36:22:25:c7:3b:1e:10:72:84:34:94:5b:b5:b1:
                    11:8f:05:c7:32:7f:59:00:65:30:ce:3d:37:74:85:
                    66:f2:d5:74:60:b2:32:c6:f6:8c:d7:cb:71:61:48:
                    61:4f:ea:cd:9c:be:43:e3:c9:f8:12:6f:96:bb:23:
                    eb:5e:f5:f3:9f:56:d9:be:15:cb:38:18:4d:60:5f:
                    25:22:d3:bb:95:e7:5a:9e:87:73:bf:cb:12:d0:e9:
                    67:75:66:58:b4:31:8f:78:98:ea:e6:0e:98:63:7c:
                    14:12:6c:62:79:7f:f1:14:ca:a5:d1:49:60:ed:70:
                    fa:51:4d:b6:4d:9a:30:3a:f6:0b:a1:89:13:ea:60:
                    62:c7:8e:da:4b:11:b5:9e:53:27:aa:1b:a5:41:62:
                    d5:51:ed:61:c1:7c:3a:f4:97:aa:63:78:3d:dc:47:
                    06:c2:3e:ee:98:43:5d:ca:ed:9c:d9:95:36:55:fd:
                    79:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A8:28:D5:96:78:91:EB:0D:92:5A:78:15:E3:14:4A:74:FD:11:75
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145165.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9d3::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:26:77:fe:1d:5d:f5:16:6f:54:b8:88:dc:84:b2:eb:05:fb:
         cb:df:56:be:77:9e:58:ea:33:91:0a:b7:b8:8d:d5:38:26:84:
         cf:a1:2e:a5:99:f1:e9:2b:4d:6b:c4:a7:91:7b:56:cc:b1:ca:
         5f:b7:90:c2:a3:f6:3e:22:5b:a4:d7:39:6c:1f:90:14:f2:b5:
         41:ec:27:fe:10:a5:2e:cd:9e:b2:f2:72:95:24:4a:ba:bb:23:
         bd:ab:e8:82:b2:c5:1a:bb:a4:4d:f7:05:5b:bc:8a:3d:67:19:
         89:da:f7:19:bd:27:67:05:2a:f6:24:b5:05:e0:33:b7:d2:fd:
         57:e6:f0:ce:88:3c:80:c1:7c:9f:fb:f1:c9:42:e8:77:90:8a:
         81:bc:dd:3a:30:88:00:a7:9c:9e:1e:b4:8b:ee:9a:c2:0f:66:
         87:30:5e:4b:a0:52:88:5d:e8:61:2e:8a:f4:a1:7e:f4:84:e6:
         80:aa:e8:43:36:4a:d3:b4:d5:42:60:c0:7a:a9:76:f6:85:0e:
         62:24:33:1a:b9:95:58:aa:a1:42:79:d9:06:38:1e:54:61:d5:
         0d:6c:8b:d1:40:cb:71:c0:fc:aa:96:ff:24:dc:2c:02:2c:93:
         98:e4:0c:b6:f8:59:c2:a7:e5:e6:98:e8:15:30:e2:19:f9:bd:
         ec:c4:84:18
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdmTjAUESLuuOiW0G6m8RDJPiwfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMThaFw0yNzA1MjEwNjU4MThaMDMxMTAvBgNV
BAMTKEIwQTgyOEQ1OTY3ODkxRUIwRDkyNUE3ODE1RTMxNDRBNzRGRDExNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsK5JrVgLV9UP8M+bzed5OM+B/
vU3uTBSRX7uIT+vInJKTNf5WtZjhpJYNcHwUcjZ/PWgb0hY72AmZrsUNZnyNNT+F
143AhmC5w702IiXHOx4QcoQ0lFu1sRGPBccyf1kAZTDOPTd0hWby1XRgsjLG9ozX
y3FhSGFP6s2cvkPjyfgSb5a7I+te9fOfVtm+Fcs4GE1gXyUi07uV51qeh3O/yxLQ
6Wd1Zli0MY94mOrmDphjfBQSbGJ5f/EUyqXRSWDtcPpRTbZNmjA69guhiRPqYGLH
jtpLEbWeUyeqG6VBYtVR7WHBfDr0l6pjeD3cRwbCPu6YQ13K7ZzZlTZV/XnVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUsKgo1ZZ4kesNklp4FeMUSnT9EXUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqp0zANBgkqhkiG9w0BAQsFAAOCAQEAdyZ3
/h1d9RZvVLiI3ISy6wX7y99WvneeWOozkQq3uI3VOCaEz6EupZnx6StNa8SnkXtW
zLHKX7eQwqP2PiJbpNc5bB+QFPK1Qewn/hClLs2esvJylSRKursjvavogrLFGruk
TfcFW7yKPWcZidr3Gb0nZwUq9iS1BeAzt9L9V+bwzog8gMF8n/vxyULod5CKgbzd
OjCIAKecnh60i+6awg9mhzBeS6BSiF3oYS6K9KF+9ITmgKroQzZK07TVQmDAeql2
9oUOYiQzGrmVWKqhQnnZBjgeVGHVDWyL0UDLccD8qpb/JNwsAiyTmOQMtvhZwqfl
5pjoFTDiGfm97MSEGA==
-----END CERTIFICATE-----