Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145228.roa
File:                     AS145228.roa (raw, json)
Hash identifier:          QmM/YxTFlEYo1AC8uiBiZ/djyhJBHMDXObpCT0YwNiM=
Subject key identifier:   65:F5:0B:A1:18:78:C9:CF:05:1F:69:DA:A0:D1:0D:97:AE:64:53:93
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2B3621AAD8F2BCD09EF77BE19A97303E6FE6DF51
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145228.roa
Signing time:             Mon 25 May 2026 01:51:15 +0000
ROA not before:           Mon 25 May 2026 01:46:15 +0000
ROA not after:            Mon 24 May 2027 01:51:15 +0000
asID:                     145228
IP address blocks:        240a:aa12::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:36:21:aa:d8:f2:bc:d0:9e:f7:7b:e1:9a:97:30:3e:6f:e6:df:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:15 2026 GMT
            Not After : May 24 01:51:15 2027 GMT
        Subject: CN=65F50BA11878C9CF051F69DAA0D10D97AE645393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:ab:76:35:eb:42:d1:d0:8e:54:2b:83:5d:
                    bf:87:22:df:a7:1c:8a:e5:39:ab:0c:b9:31:bd:a0:
                    05:e6:41:d3:e9:fe:5c:34:8f:7e:d9:89:ef:f1:be:
                    24:6b:49:33:91:4d:24:96:fa:e9:82:1e:20:bb:f9:
                    69:c8:01:ca:f0:3c:f0:35:72:81:3d:41:0f:a7:6c:
                    25:be:14:1f:6c:4e:16:15:5b:1b:fc:3d:8b:3e:be:
                    2a:e1:02:4d:06:ea:2f:c0:3a:c2:a3:dd:31:7a:f0:
                    7d:68:74:ab:ac:3b:69:55:59:fa:77:e3:b2:51:a8:
                    af:bf:80:4d:00:62:9d:48:cb:75:77:57:8b:2d:94:
                    20:ce:d7:e8:34:f0:5e:0b:4f:39:65:cf:34:14:55:
                    ca:72:25:b1:43:aa:b0:a8:3f:bc:89:54:1d:21:99:
                    70:f5:d1:95:37:71:83:e5:ee:25:8b:af:fc:b5:fd:
                    f8:14:03:d7:13:6a:a8:4a:d2:f9:e2:87:81:e0:48:
                    c0:49:4a:20:b2:85:10:9e:15:a3:45:22:cc:93:eb:
                    5d:8d:dc:d8:68:57:08:5b:01:57:c8:54:88:62:9d:
                    07:36:77:59:0f:ef:46:27:de:28:7a:a5:42:10:19:
                    07:29:6a:71:3b:fb:8e:7e:c4:a9:46:f1:4f:f6:02:
                    04:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F5:0B:A1:18:78:C9:CF:05:1F:69:DA:A0:D1:0D:97:AE:64:53:93
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145228.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa12::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:8a:fd:9f:bf:bc:d8:9f:d3:98:5e:31:34:71:cc:ab:90:97:
         b0:8c:2a:e3:ee:8e:49:26:13:a6:e0:8d:56:8d:08:c9:5a:90:
         53:23:f5:d3:1d:94:7a:19:6a:24:9b:11:f1:05:be:ef:a1:7e:
         57:99:25:89:2a:bb:49:06:a8:94:79:13:0c:e7:26:62:51:d5:
         66:8d:e4:91:8f:fe:62:f2:ec:0e:2c:44:33:a9:13:c9:f4:db:
         1f:f0:da:d0:51:93:f1:5e:64:c6:fa:97:5c:fd:c9:1b:33:e3:
         a0:c4:da:f9:bf:f4:5b:f6:d4:8a:6a:f1:22:30:2b:b8:f7:0f:
         7a:25:91:f1:21:98:79:8a:be:87:76:9a:7c:ac:d8:21:e1:a9:
         30:e3:dc:73:fd:70:98:35:2f:01:e4:43:4a:29:a1:67:58:83:
         c4:27:98:1e:be:f1:a4:52:60:45:d3:11:96:f3:6d:61:e3:2e:
         64:e0:00:4c:99:a9:b7:c4:37:23:25:08:ad:9c:26:92:20:ff:
         5e:a5:f0:8c:7f:e4:00:24:2e:be:f6:d4:01:f4:70:1c:b9:37:
         f9:47:b8:db:90:fd:6d:79:d6:1c:14:ce:19:0a:51:19:44:50:
         60:6c:65:a5:aa:6d:bf:69:08:50:64:fe:8c:bf:fd:8a:3b:68:
         86:57:5f:b4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKzYhqtjyvNCe93vhmpcwPm/m31EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MTVaFw0yNzA1MjQwMTUxMTVaMDMxMTAvBgNV
BAMTKDY1RjUwQkExMTg3OEM5Q0YwNTFGNjlEQUEwRDEwRDk3QUU2NDUzOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0qt2NetC0dCOVCuDXb+HIt+n
HIrlOasMuTG9oAXmQdPp/lw0j37Zie/xviRrSTORTSSW+umCHiC7+WnIAcrwPPA1
coE9QQ+nbCW+FB9sThYVWxv8PYs+virhAk0G6i/AOsKj3TF68H1odKusO2lVWfp3
47JRqK+/gE0AYp1Iy3V3V4stlCDO1+g08F4LTzllzzQUVcpyJbFDqrCoP7yJVB0h
mXD10ZU3cYPl7iWLr/y1/fgUA9cTaqhK0vnih4HgSMBJSiCyhRCeFaNFIsyT612N
3NhoVwhbAVfIVIhinQc2d1kP70Yn3ih6pUIQGQcpanE7+45+xKlG8U/2AgTRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUZfULoRh4yc8FH2naoNENl65kU5MwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqEjANBgkqhkiG9w0BAQsFAAOCAQEATYr9
n7+82J/TmF4xNHHMq5CXsIwq4+6OSSYTpuCNVo0IyVqQUyP10x2UehlqJJsR8QW+
76F+V5kliSq7SQaolHkTDOcmYlHVZo3kkY/+YvLsDixEM6kTyfTbH/Da0FGT8V5k
xvqXXP3JGzPjoMTa+b/0W/bUimrxIjAruPcPeiWR8SGYeYq+h3aafKzYIeGpMOPc
c/1wmDUvAeRDSimhZ1iDxCeYHr7xpFJgRdMRlvNtYeMuZOAATJmpt8Q3IyUIrZwm
kiD/XqXwjH/kACQuvvbUAfRwHLk3+Ue425D9bXnWHBTOGQpRGURQYGxlpaptv2kI
UGT+jL/9ijtohldftA==
-----END CERTIFICATE-----