Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145197.roa
File:                     AS145197.roa (raw, json)
Hash identifier:          H2xUJ7O3g/c1JpnJKY8q/qVHPDcV53mD0cs4fQN6rgc=
Subject key identifier:   48:74:6D:9C:5E:3A:DC:FA:B9:7B:99:C2:8D:44:EA:39:CE:67:75:68
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       703E5D86B8824B6EFE2DCEE0DACB3D63E1F2A879
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145197.roa
Signing time:             Mon 25 May 2026 01:51:36 +0000
ROA not before:           Mon 25 May 2026 01:46:36 +0000
ROA not after:            Mon 24 May 2027 01:51:36 +0000
asID:                     145197
IP address blocks:        240a:a9f3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3e:5d:86:b8:82:4b:6e:fe:2d:ce:e0:da:cb:3d:63:e1:f2:a8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:36 2026 GMT
            Not After : May 24 01:51:36 2027 GMT
        Subject: CN=48746D9C5E3ADCFAB97B99C28D44EA39CE677568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:47:26:8a:21:50:73:20:b1:b7:f9:e2:98:
                    00:85:aa:fd:a9:15:db:1a:08:8c:76:67:aa:ba:90:
                    9a:e2:a6:00:9a:02:24:fe:8e:72:ff:27:6a:92:07:
                    5f:6c:83:eb:6f:45:2e:cf:e9:3e:45:0d:85:ee:e6:
                    42:cd:0d:8f:7c:b0:27:75:74:3f:6a:82:8d:35:19:
                    52:90:5f:9d:f6:6d:c6:83:42:f5:41:d7:5b:67:a7:
                    21:1b:af:74:70:5d:67:59:07:9f:84:09:ee:0a:fb:
                    b7:34:42:6b:97:d1:c0:03:b2:5b:c9:fa:9a:30:3a:
                    41:d1:9e:5d:dc:ac:c9:8f:48:7d:1f:71:f7:52:b5:
                    33:fb:77:b9:f0:4f:57:c9:fc:8a:cb:25:64:55:ea:
                    10:5d:8b:85:42:79:99:b7:2d:d0:82:91:a7:3d:df:
                    52:7f:cb:7b:ae:57:b0:0e:0a:a6:e0:2e:d9:8c:cd:
                    99:e9:c1:26:fd:6c:58:2b:af:dd:4c:b7:96:0f:ad:
                    46:0e:a9:f3:0d:15:76:9b:04:64:c8:c7:08:5a:d8:
                    52:f6:70:87:ff:0f:f8:c5:01:3c:b6:95:7a:fc:9e:
                    0d:92:e3:80:b1:9b:57:cb:49:24:a4:7d:e4:18:8b:
                    11:3a:5d:f8:af:60:73:9a:9c:9b:3f:f8:96:e5:0e:
                    d8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:74:6D:9C:5E:3A:DC:FA:B9:7B:99:C2:8D:44:EA:39:CE:67:75:68
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145197.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9f3::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:64:bb:4a:76:9e:cb:69:b2:58:10:57:9e:90:45:9e:7a:28:
         06:8c:a1:f9:78:0a:7a:1f:42:c0:bf:a6:f5:2a:e7:2a:ca:34:
         2d:c6:f8:85:75:5b:70:13:ea:3e:a2:d2:18:96:5f:3d:0c:bc:
         56:c4:92:e8:f3:62:76:f8:b1:ef:3d:b8:41:d8:fa:ba:40:30:
         3e:a3:2a:cb:94:e4:79:2f:91:38:a7:9e:01:6a:85:08:d0:00:
         18:4b:ad:80:b8:19:7d:ba:04:38:9d:74:4d:af:4c:36:f9:a2:
         91:a8:d3:73:c9:be:20:c7:70:8f:44:c8:dc:25:00:43:19:ea:
         2e:d8:f1:27:0f:5b:82:74:63:2d:99:e8:e6:fa:cc:2d:4f:ab:
         c7:e1:c4:fc:94:d5:43:0f:20:62:6d:5f:06:53:33:d7:f7:25:
         1e:79:bd:21:94:60:2e:39:46:0a:7f:1f:e0:2a:b6:db:70:2d:
         5b:e3:9e:be:1c:f6:d8:f7:ee:d5:a5:a5:ce:cc:c2:18:99:00:
         d6:bb:b1:24:b2:61:d8:76:fe:41:da:94:1c:91:8d:12:e2:b8:
         f4:4d:82:f3:d7:7c:41:ba:e8:78:88:31:3d:84:72:46:34:03:
         29:3b:47:c1:1b:a1:2d:9d:e8:68:5f:94:a7:dc:c2:e2:44:96:
         58:55:31:90
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcD5dhriCS27+Lc7g2ss9Y+HyqHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MzZaFw0yNzA1MjQwMTUxMzZaMDMxMTAvBgNV
BAMTKDQ4NzQ2RDlDNUUzQURDRkFCOTdCOTlDMjhENDRFQTM5Q0U2Nzc1NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHeEcmiiFQcyCxt/nimACFqv2p
FdsaCIx2Z6q6kJripgCaAiT+jnL/J2qSB19sg+tvRS7P6T5FDYXu5kLNDY98sCd1
dD9qgo01GVKQX532bcaDQvVB11tnpyEbr3RwXWdZB5+ECe4K+7c0QmuX0cADslvJ
+powOkHRnl3crMmPSH0fcfdStTP7d7nwT1fJ/IrLJWRV6hBdi4VCeZm3LdCCkac9
31J/y3uuV7AOCqbgLtmMzZnpwSb9bFgrr91Mt5YPrUYOqfMNFXabBGTIxwha2FL2
cIf/D/jFATy2lXr8ng2S44Cxm1fLSSSkfeQYixE6XfivYHOanJs/+JblDtg9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUSHRtnF463Pq5e5nCjUTqOc5ndWgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqp8zANBgkqhkiG9w0BAQsFAAOCAQEAVWS7
Snaey2myWBBXnpBFnnooBoyh+XgKeh9CwL+m9SrnKso0Lcb4hXVbcBPqPqLSGJZf
PQy8VsSS6PNidvix7z24Qdj6ukAwPqMqy5TkeS+ROKeeAWqFCNAAGEutgLgZfboE
OJ10Ta9MNvmikajTc8m+IMdwj0TI3CUAQxnqLtjxJw9bgnRjLZno5vrMLU+rx+HE
/JTVQw8gYm1fBlMz1/clHnm9IZRgLjlGCn8f4Cq223AtW+Oevhz22Pfu1aWlzszC
GJkA1ruxJLJh2Hb+QdqUHJGNEuK49E2C89d8QbroeIgxPYRyRjQDKTtHwRuhLZ3o
aF+Up9zC4kSWWFUxkA==
-----END CERTIFICATE-----