Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145196.roa
File:                     AS145196.roa (raw, json)
Hash identifier:          88BGrXsjWGB+zj62m6OTLIlcZVhBLj0OnYTn3t/yKD4=
Subject key identifier:   2C:5D:2D:34:DC:38:C6:5F:8C:7F:38:9D:49:B4:02:28:79:C7:7D:20
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       386CF43CD2A6386E2EFBF1FB4A3B57636B055356
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145196.roa
Signing time:             Fri 22 May 2026 06:46:13 +0000
ROA not before:           Fri 22 May 2026 06:41:13 +0000
ROA not after:            Fri 21 May 2027 06:46:13 +0000
asID:                     145196
IP address blocks:        240a:a9f2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6c:f4:3c:d2:a6:38:6e:2e:fb:f1:fb:4a:3b:57:63:6b:05:53:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:13 2026 GMT
            Not After : May 21 06:46:13 2027 GMT
        Subject: CN=2C5D2D34DC38C65F8C7F389D49B4022879C77D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:4f:b8:9a:ee:6d:0b:83:c7:3a:dc:0b:06:
                    a1:9a:00:62:16:79:13:85:71:d1:a1:ff:28:1c:d1:
                    58:a4:e3:8f:43:49:59:55:d6:db:dd:07:1e:c7:d4:
                    08:4d:f2:e1:1d:8d:a2:27:78:04:d9:7c:e6:cb:4a:
                    d3:a5:75:be:2c:20:bb:49:40:b9:d6:76:bc:22:65:
                    67:97:cc:77:2f:81:af:d2:79:06:62:18:8f:86:40:
                    19:94:e9:c1:6c:38:eb:db:99:8a:7d:bc:b5:83:79:
                    39:f6:a3:81:12:1a:ee:d3:25:1c:cb:3d:a8:4e:84:
                    59:3d:92:22:7b:e1:10:ba:e7:12:32:c0:bc:1b:c8:
                    2b:4e:09:fd:33:12:70:e6:39:59:db:14:b0:a9:23:
                    82:36:20:9d:0d:26:7a:28:c7:f9:a6:10:1e:42:cf:
                    a9:bd:41:e7:01:0f:30:a2:77:9e:f7:48:31:28:24:
                    f7:65:13:55:ef:6e:63:6a:b4:ed:2c:fc:db:40:fb:
                    91:60:0d:0e:2f:7d:3a:2f:3a:c7:95:08:29:11:7d:
                    8d:0a:4d:8c:cb:b4:95:76:2d:11:41:77:e5:c2:ed:
                    7a:f5:24:58:c8:58:9a:07:fa:60:1f:aa:e9:66:f4:
                    19:7d:54:82:de:85:7b:01:4b:d7:c8:81:2a:88:8b:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5D:2D:34:DC:38:C6:5F:8C:7F:38:9D:49:B4:02:28:79:C7:7D:20
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145196.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9f2::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:fa:bf:51:8b:f0:e8:d7:3d:22:70:69:91:1a:e8:58:61:b8:
         dc:32:89:30:87:1b:b7:fd:f4:67:53:f6:7c:2d:49:39:17:62:
         d9:63:c7:6f:16:1c:13:ca:21:fc:7b:14:72:6e:3a:46:43:87:
         81:3a:0e:79:f3:ea:fa:8e:21:fc:fd:14:8c:e8:fb:d2:09:7f:
         89:dc:fb:7a:ee:d9:d4:94:7d:25:30:5d:e6:03:a8:2f:6c:ef:
         d7:01:53:87:7a:ac:37:0b:7d:e2:d7:da:a3:14:f4:41:d8:68:
         da:6b:88:6f:12:84:57:2c:58:3e:4d:0e:9d:3a:c9:80:9b:76:
         a4:7b:66:bc:52:9c:28:cf:18:72:51:98:74:ab:6e:02:66:f3:
         29:de:4e:97:04:f2:1c:6b:61:01:c4:5c:f5:49:e8:65:3f:0d:
         71:b1:82:15:c6:18:62:91:31:8b:05:4c:cf:33:2b:c4:ac:0e:
         41:57:44:0f:df:17:df:6d:74:66:65:f6:f6:88:92:0b:3f:4d:
         6a:95:fd:96:09:09:74:1f:6e:39:6b:09:e9:9b:cb:3e:98:3f:
         42:86:be:fc:fa:c7:5b:47:50:32:4c:d3:ef:0e:39:61:d2:e7:
         28:68:90:f4:02:2a:b4:db:8c:a0:8c:6e:03:65:4f:9c:0d:e2:
         98:8a:92:7b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOGz0PNKmOG4u+/H7SjtXY2sFU1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMTNaFw0yNzA1MjEwNjQ2MTNaMDMxMTAvBgNV
BAMTKDJDNUQyRDM0REMzOEM2NUY4QzdGMzg5RDQ5QjQwMjI4NzlDNzdEMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnE+4mu5tC4PHOtwLBqGaAGIW
eROFcdGh/ygc0Vik449DSVlV1tvdBx7H1AhN8uEdjaIneATZfObLStOldb4sILtJ
QLnWdrwiZWeXzHcvga/SeQZiGI+GQBmU6cFsOOvbmYp9vLWDeTn2o4ESGu7TJRzL
PahOhFk9kiJ74RC65xIywLwbyCtOCf0zEnDmOVnbFLCpI4I2IJ0NJnoox/mmEB5C
z6m9QecBDzCid573SDEoJPdlE1XvbmNqtO0s/NtA+5FgDQ4vfTovOseVCCkRfY0K
TYzLtJV2LRFBd+XC7Xr1JFjIWJoH+mAfqulm9Bl9VILehXsBS9fIgSqIi9kVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULF0tNNw4xl+MfzidSbQCKHnHfSAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqp8jANBgkqhkiG9w0BAQsFAAOCAQEAc/q/
UYvw6Nc9InBpkRroWGG43DKJMIcbt/30Z1P2fC1JORdi2WPHbxYcE8oh/HsUcm46
RkOHgToOefPq+o4h/P0UjOj70gl/idz7eu7Z1JR9JTBd5gOoL2zv1wFTh3qsNwt9
4tfaoxT0Qdho2muIbxKEVyxYPk0OnTrJgJt2pHtmvFKcKM8YclGYdKtuAmbzKd5O
lwTyHGthAcRc9UnoZT8NcbGCFcYYYpExiwVMzzMrxKwOQVdED98X3210ZmX29oiS
Cz9NapX9lgkJdB9uOWsJ6ZvLPpg/Qoa+/PrHW0dQMkzT7w45YdLnKGiQ9AIqtNuM
oIxuA2VPnA3imIqSew==
-----END CERTIFICATE-----