Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145247.roa
File:                     AS145247.roa (raw, json)
Hash identifier:          yYDcp6PwxA/Hpa12MBA6ci4BJphmoJteLHkpIKxI6T8=
Subject key identifier:   47:72:9B:96:EA:A7:8D:F1:92:1E:39:9E:50:20:16:75:FE:AB:62:5C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5F4E3FC833C530DBD684B4B902376A76E9ADEC16
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145247.roa
Signing time:             Mon 25 May 2026 06:28:46 +0000
ROA not before:           Mon 25 May 2026 06:23:46 +0000
ROA not after:            Mon 24 May 2027 06:28:46 +0000
asID:                     145247
IP address blocks:        240a:aa25::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4e:3f:c8:33:c5:30:db:d6:84:b4:b9:02:37:6a:76:e9:ad:ec:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:46 2026 GMT
            Not After : May 24 06:28:46 2027 GMT
        Subject: CN=47729B96EAA78DF1921E399E50201675FEAB625C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:85:c4:97:e0:44:db:60:1e:07:c5:4b:b1:
                    7d:b4:32:ee:cb:e8:87:df:37:cf:a4:c7:d2:e1:d9:
                    49:78:0b:fd:9a:fa:37:b5:35:ea:0b:e3:9c:c3:95:
                    4b:5c:e0:66:47:cd:5b:96:4b:9b:82:a3:58:1c:e2:
                    69:02:73:5d:8d:80:5e:7c:7a:0e:35:b3:76:6d:07:
                    1e:34:0a:e5:4b:98:a9:bc:7c:52:e9:6a:a8:1b:39:
                    05:b9:48:5c:50:20:70:ef:2f:f4:46:54:f6:cd:31:
                    67:7d:a7:5d:b8:fe:f8:8b:4e:c9:61:ef:f2:8c:5e:
                    55:d7:d1:85:66:b7:00:69:8b:0e:34:b4:c2:5c:25:
                    d6:ff:98:23:48:62:c9:e1:09:13:22:9b:c9:56:90:
                    80:21:eb:c8:81:1c:11:6e:4a:66:51:8f:5d:44:b9:
                    82:eb:0b:b7:d4:02:e6:c6:a5:e0:15:50:ed:ba:df:
                    fb:5e:7c:8c:90:4e:0c:03:b5:3c:67:15:e2:81:69:
                    19:d7:aa:82:45:19:8a:8d:86:6f:e9:4b:11:e1:8e:
                    ec:85:89:33:f9:18:54:6b:fe:43:94:8d:0a:21:5f:
                    07:9b:eb:fb:ff:5d:aa:82:1e:6c:5f:aa:8a:05:06:
                    00:9d:8f:53:8e:d3:8b:ac:c6:d9:6d:d3:b3:88:fc:
                    dc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:72:9B:96:EA:A7:8D:F1:92:1E:39:9E:50:20:16:75:FE:AB:62:5C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145247.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa25::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:28:14:df:ff:7e:b7:bd:f1:f6:25:5d:14:84:03:76:4a:d3:
         03:0c:a3:2f:d3:e1:c6:11:94:9d:b1:e3:8d:24:32:09:55:8a:
         67:cd:26:13:46:34:3c:7d:16:8f:29:b8:24:93:7d:52:f1:44:
         4d:c0:d3:ee:32:a2:ac:30:b7:7c:b0:80:52:45:30:bb:19:5b:
         3e:6c:80:26:6d:38:ef:14:02:c6:a7:94:7a:5e:ce:eb:93:df:
         5b:f6:e7:96:1e:13:11:cb:13:e1:52:17:33:37:8d:5f:ea:cf:
         b0:9a:76:b3:32:86:10:c3:fb:5f:06:db:6f:44:7a:c0:5e:2e:
         ba:ee:62:8c:9d:6d:51:7e:f0:d4:db:29:6f:e9:a1:d6:27:a6:
         d0:29:56:f9:47:e4:ae:e8:8a:43:0a:e0:72:58:cf:2a:0f:5c:
         ea:8c:c0:ec:7a:c8:ca:93:c0:03:97:a2:c4:e9:b7:7a:aa:42:
         a5:c6:7e:bb:0d:f9:4a:8b:cf:58:ee:db:4c:7c:a0:56:ff:c6:
         50:71:e7:9d:cf:da:c1:2e:c0:1d:41:45:9e:d1:56:7e:e4:34:
         8e:d9:1e:1d:2d:72:7f:c7:18:3f:13:ec:e4:e1:7c:c1:90:bb:
         45:fe:ac:eb:cb:e4:5e:62:08:bb:0c:78:c3:41:8e:02:3d:cb:
         bc:db:7f:0f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUX04/yDPFMNvWhLS5Ajdqdumt7BYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNDZaFw0yNzA1MjQwNjI4NDZaMDMxMTAvBgNV
BAMTKDQ3NzI5Qjk2RUFBNzhERjE5MjFFMzk5RTUwMjAxNjc1RkVBQjYyNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5koXEl+BE22AeB8VLsX20Mu7L
6IffN8+kx9Lh2Ul4C/2a+je1NeoL45zDlUtc4GZHzVuWS5uCo1gc4mkCc12NgF58
eg41s3ZtBx40CuVLmKm8fFLpaqgbOQW5SFxQIHDvL/RGVPbNMWd9p124/viLTslh
7/KMXlXX0YVmtwBpiw40tMJcJdb/mCNIYsnhCRMim8lWkIAh68iBHBFuSmZRj11E
uYLrC7fUAubGpeAVUO263/tefIyQTgwDtTxnFeKBaRnXqoJFGYqNhm/pSxHhjuyF
iTP5GFRr/kOUjQohXweb6/v/XaqCHmxfqooFBgCdj1OO04usxtlt07OI/NxlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUR3KbluqnjfGSHjmeUCAWdf6rYlwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqJTANBgkqhkiG9w0BAQsFAAOCAQEAGigU
3/9+t73x9iVdFIQDdkrTAwyjL9PhxhGUnbHjjSQyCVWKZ80mE0Y0PH0Wjym4JJN9
UvFETcDT7jKirDC3fLCAUkUwuxlbPmyAJm047xQCxqeUel7O65PfW/bnlh4TEcsT
4VIXMzeNX+rPsJp2szKGEMP7Xwbbb0R6wF4uuu5ijJ1tUX7w1Nspb+mh1iem0ClW
+UfkruiKQwrgcljPKg9c6ozA7HrIypPAA5eixOm3eqpCpcZ+uw35SovPWO7bTHyg
Vv/GUHHnnc/awS7AHUFFntFWfuQ0jtkeHS1yf8cYPxPs5OF8wZC7Rf6s68vkXmII
uwx4w0GOAj3LvNt/Dw==
-----END CERTIFICATE-----