Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145245.roa
File:                     AS145245.roa (raw, json)
Hash identifier:          zK42A19ZEWZPrMoJn1Fxy1I0myu7STSYaQ/RA7hj1Mg=
Subject key identifier:   87:0D:2B:F4:01:D9:B6:D8:94:0C:7C:7C:B2:18:C1:23:D0:B4:91:E6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5BD8B2CDC23EB8AC4DC1D69A03FEA8D63372CAAF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145245.roa
Signing time:             Mon 25 May 2026 03:19:36 +0000
ROA not before:           Mon 25 May 2026 03:14:36 +0000
ROA not after:            Mon 24 May 2027 03:19:36 +0000
asID:                     145245
IP address blocks:        240a:aa23::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d8:b2:cd:c2:3e:b8:ac:4d:c1:d6:9a:03:fe:a8:d6:33:72:ca:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:36 2026 GMT
            Not After : May 24 03:19:36 2027 GMT
        Subject: CN=870D2BF401D9B6D8940C7C7CB218C123D0B491E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:f1:58:22:56:bd:fe:b9:71:e1:29:e3:3c:
                    33:0d:53:1c:ee:78:74:2c:9f:7d:14:c4:7d:9c:61:
                    90:78:91:5b:97:a9:89:75:24:3f:9e:3f:9c:33:85:
                    5a:f5:dd:7c:13:05:d9:4f:e0:e5:55:3f:80:31:a3:
                    cd:6a:72:b0:19:14:63:7e:8d:c0:77:8e:79:dc:c6:
                    c0:d6:d4:67:5e:92:e4:ec:e1:5d:14:99:90:b9:d1:
                    87:bf:e2:39:d8:f0:0c:8e:82:26:7f:4a:2a:9d:9e:
                    1c:5b:01:5f:d1:98:21:7e:7b:5b:54:c1:a4:56:a3:
                    ff:c3:05:80:25:c4:c1:ce:ed:e2:1e:1e:09:54:55:
                    5b:7c:41:e4:77:e1:7a:3a:03:1f:a8:df:71:6f:19:
                    8d:98:2c:c0:5a:64:32:d1:86:84:52:81:5f:8a:cd:
                    88:9e:5d:72:b0:44:16:f1:fa:41:46:27:c0:d6:86:
                    a4:7e:37:8f:c9:93:8a:93:d0:41:27:f4:e9:c0:bc:
                    e8:39:d5:2d:a6:2d:1c:71:b4:0c:0e:a1:31:5e:56:
                    2d:36:4e:2e:b5:16:4a:b2:b4:92:33:e7:fc:b2:e9:
                    0b:c9:c7:ec:49:74:f3:fd:d0:0d:d8:32:31:20:63:
                    1b:6b:ba:f3:9a:15:dd:0e:89:14:87:12:89:b6:9d:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0D:2B:F4:01:D9:B6:D8:94:0C:7C:7C:B2:18:C1:23:D0:B4:91:E6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145245.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa23::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:16:b5:9e:ef:b7:63:bf:b2:fb:25:13:85:6f:96:24:99:28:
         88:dc:2d:56:07:9f:da:62:26:48:fb:e6:59:a1:e2:2f:27:cf:
         3c:8f:6d:61:81:47:0c:ee:a7:42:42:61:cb:fe:d8:ae:b2:6f:
         4a:3d:cd:25:ea:58:8d:db:9f:14:7e:ec:5f:1d:c1:d5:fa:ef:
         96:ca:de:61:c5:9b:5e:c2:7b:7e:0c:67:77:72:22:09:87:73:
         19:f7:51:8f:07:0e:1e:1c:de:3e:1e:5a:40:42:45:ca:01:37:
         95:39:4b:13:c0:00:ce:dd:df:5d:8e:a2:11:fe:e9:f6:5e:99:
         d9:19:6a:a8:3c:6b:5d:33:f8:22:1e:4e:00:fb:02:92:c9:14:
         aa:ab:74:3b:42:05:1e:96:69:ce:8b:3f:89:16:d3:a7:50:6e:
         0a:02:4c:68:75:da:1d:f5:69:24:36:89:ea:11:7f:2d:97:f1:
         e4:99:1d:72:1b:60:6b:aa:eb:ab:70:30:b8:56:e6:5f:a0:86:
         46:20:02:2e:08:42:93:9f:d8:ec:f2:fb:60:da:2c:ea:b9:b1:
         e5:9f:86:de:04:ac:18:21:8b:d8:ac:b2:f8:44:0c:fb:a2:40:
         7b:4c:38:cb:59:02:c3:fd:6d:cf:15:8f:08:3a:4a:0b:b5:48:
         a3:08:fd:6e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUW9iyzcI+uKxNwdaaA/6o1jNyyq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MzZaFw0yNzA1MjQwMzE5MzZaMDMxMTAvBgNV
BAMTKDg3MEQyQkY0MDFEOUI2RDg5NDBDN0M3Q0IyMThDMTIzRDBCNDkxRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0dPFYIla9/rlx4SnjPDMNUxzu
eHQsn30UxH2cYZB4kVuXqYl1JD+eP5wzhVr13XwTBdlP4OVVP4Axo81qcrAZFGN+
jcB3jnncxsDW1GdekuTs4V0UmZC50Ye/4jnY8AyOgiZ/SiqdnhxbAV/RmCF+e1tU
waRWo//DBYAlxMHO7eIeHglUVVt8QeR34Xo6Ax+o33FvGY2YLMBaZDLRhoRSgV+K
zYieXXKwRBbx+kFGJ8DWhqR+N4/Jk4qT0EEn9OnAvOg51S2mLRxxtAwOoTFeVi02
Ti61FkqytJIz5/yy6QvJx+xJdPP90A3YMjEgYxtruvOaFd0OiRSHEom2ncJ1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUhw0r9AHZttiUDHx8shjBI9C0keYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqIzANBgkqhkiG9w0BAQsFAAOCAQEAcxa1
nu+3Y7+y+yUThW+WJJkoiNwtVgef2mImSPvmWaHiLyfPPI9tYYFHDO6nQkJhy/7Y
rrJvSj3NJepYjdufFH7sXx3B1frvlsreYcWbXsJ7fgxnd3IiCYdzGfdRjwcOHhze
Ph5aQEJFygE3lTlLE8AAzt3fXY6iEf7p9l6Z2RlqqDxrXTP4Ih5OAPsCkskUqqt0
O0IFHpZpzos/iRbTp1BuCgJMaHXaHfVpJDaJ6hF/LZfx5Jkdchtga6rrq3AwuFbm
X6CGRiACLghCk5/Y7PL7YNos6rmx5Z+G3gSsGCGL2Kyy+EQM+6JAe0w4y1kCw/1t
zxWPCDpKC7VIowj9bg==
-----END CERTIFICATE-----