Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145348.roa
File:                     AS145348.roa (raw, json)
Hash identifier:          D7pfiJWbwanTuV1xEl9OorU5YcOqA5KhEpR+l4IzW9w=
Subject key identifier:   E7:CE:F3:BD:4F:49:F0:06:88:18:22:65:48:D1:54:33:E7:88:8D:87
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2A9D798935C6A6F485E8B466739D94D26523DF2A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145348.roa
Signing time:             Tue 26 May 2026 06:30:40 +0000
ROA not before:           Tue 26 May 2026 06:25:40 +0000
ROA not after:            Tue 25 May 2027 06:30:40 +0000
asID:                     145348
IP address blocks:        240a:aa8a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9d:79:89:35:c6:a6:f4:85:e8:b4:66:73:9d:94:d2:65:23:df:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:40 2026 GMT
            Not After : May 25 06:30:40 2027 GMT
        Subject: CN=E7CEF3BD4F49F0068818226548D15433E7888D87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:bb:0a:21:7b:c6:ce:73:82:f4:de:3a:80:
                    77:06:ea:41:80:c6:4b:4f:f0:bb:8d:ff:7b:db:f8:
                    be:db:85:16:68:aa:51:b4:4b:50:ef:39:72:28:44:
                    9c:e4:85:ff:f1:3c:22:e5:16:8a:65:b8:99:85:45:
                    93:90:d2:70:5c:8e:36:65:73:0b:e8:13:04:b4:57:
                    0c:6a:3c:74:50:ee:5e:ea:0f:97:71:6d:3b:07:0a:
                    cc:e2:fd:d4:43:02:0e:3d:e0:84:f7:48:f4:eb:d3:
                    1a:9c:77:2f:b7:c9:67:11:82:57:e5:0c:ac:db:cb:
                    9a:ed:1d:21:22:35:95:e0:c6:76:32:cc:41:2d:ec:
                    41:31:a7:88:d4:7f:c3:52:d1:4c:53:d9:00:12:4a:
                    aa:cf:bf:93:02:99:28:12:53:79:a2:24:b5:ac:f9:
                    fe:68:17:0f:47:a4:e1:18:b1:4c:f2:de:8f:a8:2b:
                    ce:29:21:46:11:ee:02:47:3e:8f:76:fd:2b:d6:13:
                    c2:8c:80:c7:6b:11:ad:c5:96:a5:ac:2b:d8:dc:58:
                    24:80:fc:e5:21:58:39:b7:3e:05:f9:ba:65:ee:82:
                    39:87:e8:bb:48:d0:ae:44:7f:4a:82:20:8f:7d:52:
                    79:ca:ca:18:05:54:8f:a2:64:84:84:58:18:a1:83:
                    e4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CE:F3:BD:4F:49:F0:06:88:18:22:65:48:D1:54:33:E7:88:8D:87
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145348.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa8a::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:89:64:fe:92:c1:ea:22:60:f8:e9:6e:c3:26:b2:51:43:7f:
         4c:be:34:f0:b7:51:55:ed:07:e3:c4:69:9b:81:3c:83:2b:d5:
         cc:cf:c6:6f:2d:e5:e7:a2:bc:6d:ce:b8:b3:d5:b4:e0:f1:27:
         6e:ac:ca:e6:55:fb:a2:cd:e0:3a:03:fb:e9:34:4b:eb:e8:a9:
         88:df:d1:77:91:4a:2c:ab:f5:bf:6d:76:45:63:27:13:e9:dd:
         a2:5a:8b:4b:5f:65:74:5d:24:c5:f2:d7:6f:b8:a6:f3:42:7d:
         6f:e7:db:b9:02:05:c6:4e:9e:e2:11:62:c0:ba:11:83:45:f2:
         44:31:eb:ed:1f:b1:a1:0e:c8:51:ae:c0:12:2c:1f:38:88:93:
         61:ab:f1:d0:b7:d9:09:d3:73:45:54:d0:0c:46:52:e6:fa:7a:
         48:e9:9b:30:a5:2f:98:05:98:68:c6:62:82:a4:df:7b:64:0b:
         80:43:fd:ff:ff:b2:9b:07:ef:87:18:91:09:89:3f:a1:63:60:
         ce:e1:cd:75:14:8d:c4:20:19:c9:0a:0e:7a:19:6c:bb:75:49:
         cb:82:47:1d:5b:60:b9:e1:78:87:04:dc:cc:86:8c:7b:82:52:
         40:c7:70:17:8e:2e:7d:d9:8a:e9:82:1c:aa:57:79:49:6d:7a:
         e1:b8:3f:bc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKp15iTXGpvSF6LRmc52U0mUj3yowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NDBaFw0yNzA1MjUwNjMwNDBaMDMxMTAvBgNV
BAMTKEU3Q0VGM0JENEY0OUYwMDY4ODE4MjI2NTQ4RDE1NDMzRTc4ODhEODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ZbsKIXvGznOC9N46gHcG6kGA
xktP8LuN/3vb+L7bhRZoqlG0S1DvOXIoRJzkhf/xPCLlFopluJmFRZOQ0nBcjjZl
cwvoEwS0VwxqPHRQ7l7qD5dxbTsHCszi/dRDAg494IT3SPTr0xqcdy+3yWcRglfl
DKzby5rtHSEiNZXgxnYyzEEt7EExp4jUf8NS0UxT2QASSqrPv5MCmSgSU3miJLWs
+f5oFw9HpOEYsUzy3o+oK84pIUYR7gJHPo92/SvWE8KMgMdrEa3FlqWsK9jcWCSA
/OUhWDm3PgX5umXugjmH6LtI0K5Ef0qCII99UnnKyhgFVI+iZISEWBihg+QVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU587zvU9J8AaIGCJlSNFUM+eIjYcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqijANBgkqhkiG9w0BAQsFAAOCAQEAXolk
/pLB6iJg+OluwyayUUN/TL408LdRVe0H48Rpm4E8gyvVzM/Gby3l56K8bc64s9W0
4PEnbqzK5lX7os3gOgP76TRL6+ipiN/Rd5FKLKv1v212RWMnE+ndolqLS19ldF0k
xfLXb7im80J9b+fbuQIFxk6e4hFiwLoRg0XyRDHr7R+xoQ7IUa7AEiwfOIiTYavx
0LfZCdNzRVTQDEZS5vp6SOmbMKUvmAWYaMZigqTfe2QLgEP9//+ymwfvhxiRCYk/
oWNgzuHNdRSNxCAZyQoOehlsu3VJy4JHHVtgueF4hwTczIaMe4JSQMdwF44ufdmK
6YIcqld5SW164bg/vA==
-----END CERTIFICATE-----