Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145235.roa
File:                     AS145235.roa (raw, json)
Hash identifier:          mtFk0uBBiOJR5RWHdUTq0b0VB5+ndloWxChVhJLNGX4=
Subject key identifier:   29:89:07:60:FB:4F:99:8A:5F:87:87:2D:F6:35:D5:E9:A9:0D:24:7D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       70704A33C4225BF911ACDD18C40897B9693C0DD2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145235.roa
Signing time:             Fri 22 May 2026 06:27:49 +0000
ROA not before:           Fri 22 May 2026 06:22:49 +0000
ROA not after:            Fri 21 May 2027 06:27:49 +0000
asID:                     145235
IP address blocks:        240a:aa19::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:70:4a:33:c4:22:5b:f9:11:ac:dd:18:c4:08:97:b9:69:3c:0d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:49 2026 GMT
            Not After : May 21 06:27:49 2027 GMT
        Subject: CN=29890760FB4F998A5F87872DF635D5E9A90D247D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:97:e6:90:4f:62:db:df:c9:22:b7:17:6c:
                    8c:3d:e6:ff:c0:18:9c:07:cd:d4:b5:97:d2:f3:21:
                    88:a3:8e:99:9e:be:9d:92:ee:d7:51:2d:4e:01:41:
                    e1:07:2f:a5:01:27:61:95:73:d7:76:54:45:ca:19:
                    34:2a:d3:14:e2:1e:3e:16:ea:ce:e1:85:77:f7:19:
                    27:8e:f8:d4:17:91:82:74:f4:f2:5b:7f:05:fb:66:
                    a5:e3:99:52:c5:55:b0:cf:3c:7b:c2:33:a7:f1:b5:
                    c2:ba:bf:4e:d4:d5:e3:bb:17:bb:cc:a5:a3:68:33:
                    1a:9d:5e:9d:70:ea:d7:9e:ae:c6:c4:8a:3c:87:75:
                    37:87:1c:c1:0e:e6:c2:c7:89:b6:16:86:40:42:0a:
                    a6:3b:47:86:85:b4:e5:c2:49:8a:66:5b:29:43:0c:
                    ec:e0:60:6d:c8:6b:73:7e:b2:10:b5:3b:3c:2d:85:
                    49:2c:06:2c:ff:a0:ad:25:9b:38:99:19:d3:94:0a:
                    12:7b:99:59:db:16:8b:51:13:00:3f:d4:68:5d:0b:
                    75:ec:32:14:2f:08:0c:6d:71:f3:91:c4:6e:31:1c:
                    e9:34:79:8a:f8:ef:9f:e2:b6:80:53:48:cc:82:fc:
                    fe:65:d7:8b:cd:a0:9c:e1:b0:e9:65:63:03:79:92:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:89:07:60:FB:4F:99:8A:5F:87:87:2D:F6:35:D5:E9:A9:0D:24:7D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa19::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:51:07:8b:76:cc:51:4d:43:01:bc:c6:db:40:57:8b:dd:9d:
         f7:5e:b2:7c:64:de:96:73:a3:95:c7:9f:ca:8c:22:c4:32:2f:
         8e:5d:0e:7e:7d:32:68:33:3f:1f:61:98:bc:e5:22:2c:af:0e:
         6a:2d:20:8c:1c:f9:2a:b6:e5:58:9e:7e:1a:a3:2f:0a:18:53:
         1e:ed:bc:fd:18:7a:25:a0:db:e7:1b:30:22:a3:90:27:e3:97:
         1f:18:6a:7f:d4:79:1a:01:62:df:74:c0:f4:f6:5e:73:63:b7:
         73:e3:04:c1:3a:f8:2a:5e:87:14:a0:4e:c6:e8:26:04:a3:d9:
         97:75:d6:89:78:36:44:79:dc:91:d8:44:c3:09:92:72:0f:5d:
         db:85:aa:c0:c2:e3:05:b2:77:cb:bc:8b:25:80:3b:3f:b9:be:
         ff:57:ba:cc:8e:34:24:c9:db:34:de:4b:74:58:0d:b3:fb:47:
         b2:a8:39:9d:42:43:26:8c:2a:e8:d3:6a:ad:56:73:34:ad:41:
         98:b5:8a:f1:0d:01:65:54:76:69:9f:17:b0:55:1a:40:57:b2:
         28:32:28:f0:1e:aa:24:61:68:26:75:74:29:ee:6c:e6:69:9d:
         22:55:e6:24:11:0a:ea:28:79:00:0f:be:0a:a3:b6:60:25:99:
         ff:b4:4d:0a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcHBKM8QiW/kRrN0YxAiXuWk8DdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNDlaFw0yNzA1MjEwNjI3NDlaMDMxMTAvBgNV
BAMTKDI5ODkwNzYwRkI0Rjk5OEE1Rjg3ODcyREY2MzVENUU5QTkwRDI0N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIyJfmkE9i29/JIrcXbIw95v/A
GJwHzdS1l9LzIYijjpmevp2S7tdRLU4BQeEHL6UBJ2GVc9d2VEXKGTQq0xTiHj4W
6s7hhXf3GSeO+NQXkYJ09PJbfwX7ZqXjmVLFVbDPPHvCM6fxtcK6v07U1eO7F7vM
paNoMxqdXp1w6teersbEijyHdTeHHMEO5sLHibYWhkBCCqY7R4aFtOXCSYpmWylD
DOzgYG3Ia3N+shC1OzwthUksBiz/oK0lmziZGdOUChJ7mVnbFotREwA/1GhdC3Xs
MhQvCAxtcfORxG4xHOk0eYr475/itoBTSMyC/P5l14vNoJzhsOllYwN5kqetAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUKYkHYPtPmYpfh4ct9jXV6akNJH0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqGTANBgkqhkiG9w0BAQsFAAOCAQEAVVEH
i3bMUU1DAbzG20BXi92d916yfGTelnOjlcefyowixDIvjl0Ofn0yaDM/H2GYvOUi
LK8Oai0gjBz5KrblWJ5+GqMvChhTHu28/Rh6JaDb5xswIqOQJ+OXHxhqf9R5GgFi
33TA9PZec2O3c+MEwTr4Kl6HFKBOxugmBKPZl3XWiXg2RHnckdhEwwmScg9d24Wq
wMLjBbJ3y7yLJYA7P7m+/1e6zI40JMnbNN5LdFgNs/tHsqg5nUJDJowq6NNqrVZz
NK1BmLWK8Q0BZVR2aZ8XsFUaQFeyKDIo8B6qJGFoJnV0Ke5s5mmdIlXmJBEK6ih5
AA++CqO2YCWZ/7RNCg==
-----END CERTIFICATE-----