Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145360.roa
File:                     AS145360.roa (raw, json)
Hash identifier:          e4THBGkEsfZDOjJ8yZ/OWhcKYnYteRrT0s8tKm4DSUA=
Subject key identifier:   2D:A2:26:67:04:F5:28:C2:49:61:F9:3D:1D:2E:80:26:49:86:68:A3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       498E36828D04457987CA8753C75E265B07A4EF58
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145360.roa
Signing time:             Mon 25 May 2026 02:22:19 +0000
ROA not before:           Mon 25 May 2026 02:17:19 +0000
ROA not after:            Mon 24 May 2027 02:22:19 +0000
asID:                     145360
IP address blocks:        240a:aa96::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8e:36:82:8d:04:45:79:87:ca:87:53:c7:5e:26:5b:07:a4:ef:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:19 2026 GMT
            Not After : May 24 02:22:19 2027 GMT
        Subject: CN=2DA2266704F528C24961F93D1D2E8026498668A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0a:9d:e9:6a:de:b3:a8:42:c7:65:ea:c9:75:
                    9b:c3:fb:74:b9:74:ef:cb:90:0a:8c:de:4b:e8:de:
                    e8:fe:18:cf:27:98:1a:8e:6c:d7:b0:20:ae:61:9e:
                    44:bc:4d:59:84:83:4f:2b:4a:e0:f3:01:e8:4c:c1:
                    c1:29:0f:98:a7:f6:45:6a:53:e4:79:3a:5c:06:fb:
                    e6:5b:28:97:26:b2:ae:b3:6a:80:30:29:94:d6:b0:
                    cf:39:3a:a3:f0:89:52:1f:ee:f4:0a:66:7e:8a:c3:
                    fc:64:d1:aa:e5:8f:38:6a:96:c7:ff:fb:0d:4d:27:
                    17:0e:d8:49:ca:39:0d:2c:fb:f5:10:d8:4f:a4:b5:
                    08:f8:5c:ad:63:b7:39:26:83:24:84:da:b7:57:3c:
                    14:3c:7d:6c:a7:8d:c7:70:78:86:07:e0:a5:b5:7e:
                    c8:1a:fe:fa:57:75:b5:53:a2:22:34:2c:bb:b1:fa:
                    34:c1:26:95:5b:c3:f9:df:94:a5:6e:00:50:02:1a:
                    80:dd:15:af:c3:4b:23:c1:30:86:65:02:1b:44:1f:
                    bb:d2:24:78:29:90:b3:03:82:0c:56:b1:23:5d:05:
                    88:42:29:a7:3c:8a:0d:ba:6a:87:77:14:b0:d5:61:
                    26:2d:a2:02:c6:72:18:d7:da:39:df:29:b0:cf:5b:
                    8d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A2:26:67:04:F5:28:C2:49:61:F9:3D:1D:2E:80:26:49:86:68:A3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145360.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa96::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:74:5a:98:a1:f9:67:cc:83:ec:16:5a:2d:3c:56:d4:77:e8:
         5e:22:ff:f1:28:34:1d:bb:05:2b:29:47:fe:35:1e:37:d4:84:
         c9:77:1a:3b:46:ee:83:f4:68:d8:cc:4b:95:12:ac:17:b3:86:
         8a:f9:a1:19:03:50:ea:b6:18:39:84:69:23:4d:d7:76:e1:37:
         ba:24:fd:c7:51:c5:1b:5f:35:4a:3a:59:1c:93:5d:b3:9c:dc:
         de:cb:27:5d:d4:51:84:b7:47:92:69:4b:08:02:1b:bb:80:89:
         56:f7:33:6c:b7:4d:00:07:24:09:bc:dd:22:f1:92:9c:45:fc:
         e3:7e:53:97:98:7c:ea:bb:8f:f3:ac:bd:62:ae:7e:f6:2c:d0:
         f3:b4:e6:cb:b8:fe:2e:e7:2d:8e:70:f1:39:36:ec:0d:df:be:
         94:df:36:e8:92:8e:18:19:9a:f0:3e:85:4b:06:c3:f0:5a:64:
         23:c6:e6:c2:60:87:ea:c0:a8:d7:7a:83:30:14:81:24:d8:43:
         6a:dd:08:f4:48:b2:d6:b3:ad:bf:6c:ca:34:1c:84:84:1d:5e:
         53:af:d2:09:de:b5:92:e3:e6:a9:97:34:d4:e8:cb:9e:fc:55:
         0d:04:1b:e2:09:74:5a:60:69:36:a5:5a:af:94:c4:67:c0:ec:
         3c:07:c8:c5
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSY42go0ERXmHyodTx14mWwek71gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MTlaFw0yNzA1MjQwMjIyMTlaMDMxMTAvBgNV
BAMTKDJEQTIyNjY3MDRGNTI4QzI0OTYxRjkzRDFEMkU4MDI2NDk4NjY4QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnCp3pat6zqELHZerJdZvD+3S5
dO/LkAqM3kvo3uj+GM8nmBqObNewIK5hnkS8TVmEg08rSuDzAehMwcEpD5in9kVq
U+R5OlwG++ZbKJcmsq6zaoAwKZTWsM85OqPwiVIf7vQKZn6Kw/xk0arljzhqlsf/
+w1NJxcO2EnKOQ0s+/UQ2E+ktQj4XK1jtzkmgySE2rdXPBQ8fWynjcdweIYH4KW1
fsga/vpXdbVToiI0LLux+jTBJpVbw/nflKVuAFACGoDdFa/DSyPBMIZlAhtEH7vS
JHgpkLMDggxWsSNdBYhCKac8ig26aod3FLDVYSYtogLGchjX2jnfKbDPW409AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULaImZwT1KMJJYfk9HS6AJkmGaKMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzYwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqljANBgkqhkiG9w0BAQsFAAOCAQEAWnRa
mKH5Z8yD7BZaLTxW1HfoXiL/8Sg0HbsFKylH/jUeN9SEyXcaO0bug/Ro2MxLlRKs
F7OGivmhGQNQ6rYYOYRpI03XduE3uiT9x1HFG181SjpZHJNds5zc3ssnXdRRhLdH
kmlLCAIbu4CJVvczbLdNAAckCbzdIvGSnEX8435Tl5h86ruP86y9Yq5+9izQ87Tm
y7j+LuctjnDxOTbsDd++lN826JKOGBma8D6FSwbD8FpkI8bmwmCH6sCo13qDMBSB
JNhDat0I9Eiy1rOtv2zKNByEhB1eU6/SCd61kuPmqZc01OjLnvxVDQQb4gl0WmBp
NqVar5TEZ8DsPAfIxQ==
-----END CERTIFICATE-----