Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145186.roa
File:                     AS145186.roa (raw, json)
Hash identifier:          fUdEJAyf3OGrTU04P43Ov88wLI7/f3oJ9xG/MV643uw=
Subject key identifier:   89:29:C3:5F:EA:A9:0D:A3:AD:BA:00:BD:8B:E5:AE:E8:25:F1:09:0F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7820F2081933E6439FBC817BDB2E732239C4A7CF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145186.roa
Signing time:             Mon 25 May 2026 01:38:12 +0000
ROA not before:           Mon 25 May 2026 01:33:12 +0000
ROA not after:            Mon 24 May 2027 01:38:12 +0000
asID:                     145186
IP address blocks:        240a:a9e8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:20:f2:08:19:33:e6:43:9f:bc:81:7b:db:2e:73:22:39:c4:a7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:12 2026 GMT
            Not After : May 24 01:38:12 2027 GMT
        Subject: CN=8929C35FEAA90DA3ADBA00BD8BE5AEE825F1090F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:c0:26:4f:ad:31:d4:a4:2e:fe:22:4d:a1:
                    57:18:3b:e1:a1:7d:e7:9f:a6:fd:97:f9:57:12:98:
                    ff:5c:3c:60:a4:17:86:88:bc:fb:ed:92:f0:64:78:
                    dc:24:6e:80:96:40:32:0d:62:98:35:0f:01:69:ac:
                    89:c1:c6:24:9f:2a:c7:f6:37:53:b3:6f:e7:2a:bc:
                    04:af:55:e3:f5:fd:32:a8:14:80:0b:2a:83:19:8f:
                    55:3e:b0:3b:07:52:86:62:00:f7:8b:59:0a:db:f1:
                    4e:f2:00:ff:71:e1:91:75:6b:c7:b1:d2:34:85:16:
                    39:a1:39:60:11:ab:c2:24:32:85:7f:b2:0f:16:9a:
                    41:76:cd:09:e6:bd:d1:32:26:a1:cf:d1:94:3f:37:
                    58:12:0f:c1:bd:9e:c5:47:25:eb:f6:bf:f3:a1:fb:
                    df:43:b9:98:8e:9c:72:4f:3c:b3:90:1b:49:6f:6e:
                    92:5b:f3:6e:7c:4d:2e:df:13:15:bc:dc:6a:f7:0b:
                    46:3e:73:53:ac:b8:cd:dc:67:8d:88:f5:06:85:bc:
                    fd:a4:49:4c:be:f4:c5:9e:30:d6:f0:aa:f3:ee:04:
                    78:59:0e:0f:69:b9:3f:50:49:36:b2:c6:6c:02:96:
                    75:35:7e:18:0f:b2:2e:be:42:13:b2:c5:9a:a8:7d:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:29:C3:5F:EA:A9:0D:A3:AD:BA:00:BD:8B:E5:AE:E8:25:F1:09:0F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:f4:c3:62:e9:1d:16:69:dd:95:1c:f4:cf:fb:12:da:2f:1c:
         23:83:a7:0c:bd:df:27:f7:5b:26:b3:91:0f:63:e5:dc:c8:d4:
         9f:cb:92:fc:d2:c7:df:bc:5a:33:51:9d:b0:c3:2c:bd:48:75:
         ac:9c:9e:e8:23:5d:19:f9:78:7d:03:63:d5:8f:c8:3f:e1:e9:
         da:36:57:05:59:ed:26:3c:08:87:38:97:c1:78:35:46:2c:4a:
         6f:65:fc:0b:e2:02:b9:2c:4b:92:c9:2a:69:33:aa:21:91:94:
         d1:e4:ed:2f:28:37:8b:b3:f6:86:33:3a:f7:3a:8a:70:87:37:
         08:76:79:8a:46:f3:4f:c1:b1:31:43:42:9e:32:a7:22:9a:bf:
         be:9e:c7:a4:7c:bd:d3:c3:0d:21:5d:25:c2:ef:61:2c:d1:c5:
         e5:13:b1:7a:8b:37:b0:1f:4e:5d:2b:94:66:42:90:62:9d:3d:
         41:b5:3d:de:a5:cf:61:b6:9b:3c:a7:08:05:bb:87:90:1f:84:
         73:2a:9a:ef:30:ae:83:a4:7c:c1:ed:51:39:25:28:ee:91:76:
         24:00:da:cd:1d:2a:a2:25:63:82:93:41:7b:c3:9d:96:96:6f:
         2a:17:66:c0:a9:7e:3b:71:9f:12:94:fc:86:85:ff:e2:f6:97:
         22:0f:18:5c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUeCDyCBkz5kOfvIF72y5zIjnEp88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMTJaFw0yNzA1MjQwMTM4MTJaMDMxMTAvBgNV
BAMTKDg5MjlDMzVGRUFBOTBEQTNBREJBMDBCRDhCRTVBRUU4MjVGMTA5MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi/sAmT60x1KQu/iJNoVcYO+Gh
feefpv2X+VcSmP9cPGCkF4aIvPvtkvBkeNwkboCWQDINYpg1DwFprInBxiSfKsf2
N1Ozb+cqvASvVeP1/TKoFIALKoMZj1U+sDsHUoZiAPeLWQrb8U7yAP9x4ZF1a8ex
0jSFFjmhOWARq8IkMoV/sg8WmkF2zQnmvdEyJqHP0ZQ/N1gSD8G9nsVHJev2v/Oh
+99DuZiOnHJPPLOQG0lvbpJb8258TS7fExW83Gr3C0Y+c1OsuM3cZ42I9QaFvP2k
SUy+9MWeMNbwqvPuBHhZDg9puT9QSTayxmwClnU1fhgPsi6+QhOyxZqofaOfAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUiSnDX+qpDaOtugC9i+Wu6CXxCQ8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqp6DANBgkqhkiG9w0BAQsFAAOCAQEALfTD
YukdFmndlRz0z/sS2i8cI4OnDL3fJ/dbJrORD2Pl3MjUn8uS/NLH37xaM1GdsMMs
vUh1rJye6CNdGfl4fQNj1Y/IP+Hp2jZXBVntJjwIhziXwXg1RixKb2X8C+ICuSxL
kskqaTOqIZGU0eTtLyg3i7P2hjM69zqKcIc3CHZ5ikbzT8GxMUNCnjKnIpq/vp7H
pHy908MNIV0lwu9hLNHF5ROxeos3sB9OXSuUZkKQYp09QbU93qXPYbabPKcIBbuH
kB+Ecyqa7zCug6R8we1ROSUo7pF2JADazR0qoiVjgpNBe8OdlpZvKhdmwKl+O3Gf
EpT8hoX/4vaXIg8YXA==
-----END CERTIFICATE-----