Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145370.roa
File:                     AS145370.roa (raw, json)
Hash identifier:          NEx+FzjuXvqtD+iT5EqZOphJr+b2byqOc35WMS3VY/s=
Subject key identifier:   5F:CB:9C:7D:ED:E9:22:AD:1F:75:CA:3D:40:B8:52:06:62:78:00:CD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       73FFEF59F5E21BC2177EAE11C159FDA40FC36807
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145370.roa
Signing time:             Mon 25 May 2026 01:51:18 +0000
ROA not before:           Mon 25 May 2026 01:46:18 +0000
ROA not after:            Mon 24 May 2027 01:51:18 +0000
asID:                     145370
IP address blocks:        240a:aaa0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ff:ef:59:f5:e2:1b:c2:17:7e:ae:11:c1:59:fd:a4:0f:c3:68:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:18 2026 GMT
            Not After : May 24 01:51:18 2027 GMT
        Subject: CN=5FCB9C7DEDE922AD1F75CA3D40B85206627800CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:70:6f:a2:91:14:60:a7:f8:a4:52:3f:bd:0c:
                    b7:14:17:85:9a:26:33:6b:da:23:80:c0:ce:15:30:
                    dd:a3:43:14:5f:e8:51:cf:09:75:c5:ab:e5:49:17:
                    81:a3:1c:82:e5:44:75:c8:34:2c:32:14:7c:2f:1c:
                    8f:fd:21:97:3a:ae:dd:e7:9c:dc:54:f0:83:9c:0c:
                    d5:1c:a3:bb:6b:ff:53:ab:02:19:92:83:86:29:0d:
                    f9:1f:c6:9b:38:5a:37:bf:e4:eb:49:0f:db:c4:dd:
                    03:4c:fe:87:cf:36:12:e6:1d:da:fd:e5:19:e0:e2:
                    ff:43:7b:d1:a3:ba:3a:07:58:19:51:28:88:77:29:
                    6d:96:92:31:31:03:79:51:58:e2:45:f2:45:2a:53:
                    8c:7c:c9:5f:a3:6e:cb:21:26:bf:3f:e8:36:9c:59:
                    c2:33:ca:af:5f:2f:6c:e7:c8:dc:0d:93:7c:88:e9:
                    a3:61:66:6d:77:a6:b5:a2:b0:9e:95:85:7d:f9:40:
                    ec:ee:48:f4:07:92:ff:ff:3f:09:26:e8:94:49:39:
                    ed:d9:31:6d:5a:0e:e2:65:10:9e:05:6b:5c:b4:b0:
                    ea:07:f0:10:36:98:fb:d7:a4:ed:48:60:a1:dc:3d:
                    da:83:93:e5:12:c8:0d:84:19:e3:8e:5d:79:b4:58:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CB:9C:7D:ED:E9:22:AD:1F:75:CA:3D:40:B8:52:06:62:78:00:CD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145370.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aaa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:62:07:35:84:a0:81:e8:98:9f:b1:9c:3b:00:4e:58:64:a0:
         a6:a7:06:66:4d:10:f9:83:4f:1c:d9:a3:7d:1e:6e:df:eb:f3:
         a1:a1:bc:be:20:02:1f:ee:d5:17:c5:39:b6:cf:98:27:bb:12:
         86:72:4c:72:3c:a3:8f:49:51:7a:1a:4e:ec:ab:cf:41:18:02:
         ce:7a:37:a2:04:c7:ba:3d:29:8c:8f:52:55:9d:4a:91:45:56:
         e0:50:b9:56:10:cd:5e:78:ec:69:3c:fc:14:1b:e3:31:87:f0:
         b7:40:30:ed:87:c8:08:74:63:17:fb:13:3f:49:e0:b1:27:c4:
         32:16:de:0e:20:ea:03:df:e4:7c:6d:ab:fe:40:13:9b:0e:5c:
         6c:fa:34:6a:48:e1:25:6e:ca:ce:47:c7:8b:0b:8a:b7:da:8a:
         cf:36:60:43:a4:b0:ef:60:f4:fc:c2:85:10:86:73:a5:30:6e:
         c9:ce:e4:ad:da:c0:95:67:44:ef:f1:35:67:e5:93:b7:b4:a4:
         fc:91:04:7a:fd:75:4d:01:9e:a0:3f:b1:80:be:87:12:2d:38:
         95:33:28:6d:91:50:62:35:a6:d7:c8:4f:2f:fe:c5:8d:b2:2f:
         8e:cc:1a:5e:51:46:a8:1f:dc:73:d8:69:7d:29:d1:8c:d3:06:
         e1:bc:b5:27
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUc//vWfXiG8IXfq4RwVn9pA/DaAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MThaFw0yNzA1MjQwMTUxMThaMDMxMTAvBgNV
BAMTKDVGQ0I5QzdERURFOTIyQUQxRjc1Q0EzRDQwQjg1MjA2NjI3ODAwQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzcG+ikRRgp/ikUj+9DLcUF4Wa
JjNr2iOAwM4VMN2jQxRf6FHPCXXFq+VJF4GjHILlRHXINCwyFHwvHI/9IZc6rt3n
nNxU8IOcDNUco7tr/1OrAhmSg4YpDfkfxps4Wje/5OtJD9vE3QNM/ofPNhLmHdr9
5Rng4v9De9GjujoHWBlRKIh3KW2WkjExA3lRWOJF8kUqU4x8yV+jbsshJr8/6Dac
WcIzyq9fL2znyNwNk3yI6aNhZm13prWisJ6VhX35QOzuSPQHkv//Pwkm6JRJOe3Z
MW1aDuJlEJ4Fa1y0sOoH8BA2mPvXpO1IYKHcPdqDk+USyA2EGeOOXXm0WAXnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUX8ucfe3pIq0fdco9QLhSBmJ4AM0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqoDANBgkqhkiG9w0BAQsFAAOCAQEABWIH
NYSggeiYn7GcOwBOWGSgpqcGZk0Q+YNPHNmjfR5u3+vzoaG8viACH+7VF8U5ts+Y
J7sShnJMcjyjj0lRehpO7KvPQRgCzno3ogTHuj0pjI9SVZ1KkUVW4FC5VhDNXnjs
aTz8FBvjMYfwt0Aw7YfICHRjF/sTP0ngsSfEMhbeDiDqA9/kfG2r/kATmw5cbPo0
akjhJW7KzkfHiwuKt9qKzzZgQ6Sw72D0/MKFEIZzpTBuyc7krdrAlWdE7/E1Z+WT
t7Sk/JEEev11TQGeoD+xgL6HEi04lTMobZFQYjWm18hPL/7FjbIvjswaXlFGqB/c
c9hpfSnRjNMG4by1Jw==
-----END CERTIFICATE-----