Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145435.roa
File:                     AS145435.roa (raw, json)
Hash identifier:          WXC2kKVD47lID6ABidi9Gxj0FpMTCwwH4q1T+ypUJPM=
Subject key identifier:   A3:7A:FF:F6:53:25:F2:D1:EF:C3:3A:70:F3:66:EF:9B:65:EC:CF:19
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4D8EB29E902C154469222E2B3D0AAB5263480FFE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145435.roa
Signing time:             Mon 25 May 2026 02:22:35 +0000
ROA not before:           Mon 25 May 2026 02:17:35 +0000
ROA not after:            Mon 24 May 2027 02:22:35 +0000
asID:                     145435
IP address blocks:        240a:aae1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8e:b2:9e:90:2c:15:44:69:22:2e:2b:3d:0a:ab:52:63:48:0f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:35 2026 GMT
            Not After : May 24 02:22:35 2027 GMT
        Subject: CN=A37AFFF65325F2D1EFC33A70F366EF9B65ECCF19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:bb:46:b3:9b:9e:2d:d6:aa:a1:4b:ce:ad:
                    61:ff:c0:a9:c7:5c:1a:5a:38:5c:1f:65:ba:46:ae:
                    ad:e5:f3:58:86:90:f2:b2:98:1e:a3:9b:49:6a:b5:
                    56:a0:67:1b:7a:4e:44:62:54:d5:16:d4:f5:d6:ac:
                    7c:a2:4a:1c:41:58:34:68:62:24:d7:45:50:9d:fa:
                    59:9f:21:e5:9c:da:2f:b7:61:f5:66:23:ad:38:18:
                    ef:ad:69:e1:89:c0:f0:e7:82:32:6f:d2:e4:6c:d9:
                    a4:01:a8:68:8b:84:10:36:05:8e:ad:d6:9b:a5:07:
                    21:67:63:5e:a3:2f:c1:02:26:bf:32:68:8b:4b:bd:
                    f0:53:65:12:75:74:b0:64:47:c7:c7:b4:8e:74:2d:
                    d9:62:a7:1e:2e:53:4d:b1:f7:fa:69:73:58:d3:27:
                    1b:b2:92:70:f4:9f:42:2b:7d:c0:e9:56:8a:a2:e3:
                    c6:33:74:3d:47:5c:aa:c9:e9:44:e0:b6:cd:17:c3:
                    79:fd:a3:74:1c:7f:66:65:fe:a7:15:54:50:e7:c6:
                    bf:73:80:b5:f3:8c:e6:0d:cf:3c:78:54:96:f9:77:
                    27:04:71:ea:78:ae:19:62:b6:86:24:7d:e4:3b:56:
                    58:43:c6:cd:21:93:b0:04:ba:3c:f9:55:1a:c2:45:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7A:FF:F6:53:25:F2:D1:EF:C3:3A:70:F3:66:EF:9B:65:EC:CF:19
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aae1::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:fb:ae:ec:1e:ec:76:98:e2:95:ae:d4:e0:3b:78:f5:ec:
         dc:6f:b0:99:cc:c2:05:f0:a3:20:a0:f9:70:d5:b7:e2:cf:29:
         f9:1c:fb:e2:e6:f8:dd:ac:35:68:47:1d:8d:71:3b:d4:64:81:
         a3:15:ea:a0:bf:9b:0e:0d:a9:c1:05:01:fd:29:70:2b:a0:6c:
         ca:42:c1:88:a7:e2:55:2f:fc:d9:b1:50:c2:48:34:b3:d2:51:
         1b:aa:d5:53:e4:17:4f:2c:90:5c:f3:3b:12:33:8c:19:56:9f:
         31:76:4a:99:c7:fd:c9:0f:24:c4:c7:f2:c6:bf:80:16:f0:0a:
         fa:ec:48:8d:2f:5d:1e:f8:d0:73:3c:f2:c3:eb:b7:da:a4:85:
         46:2c:73:6c:55:c6:ce:22:09:50:50:7a:8c:8d:cc:c8:12:e9:
         30:68:76:f4:bf:2d:e2:28:e6:c4:7c:df:d7:24:bf:86:b7:44:
         15:44:9e:1a:59:46:6e:5e:3f:5d:97:87:6d:6c:06:27:15:55:
         48:d1:c1:a4:6c:e9:35:71:ca:81:e9:7a:89:b5:07:79:a0:60:
         bd:c7:02:59:92:1c:a9:7e:c7:28:7a:39:97:8b:cd:8a:7e:76:
         78:2e:da:6c:70:b9:eb:7b:28:9c:21:c5:d6:87:01:cf:8e:91:
         de:81:36:0f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTY6ynpAsFURpIi4rPQqrUmNID/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MzVaFw0yNzA1MjQwMjIyMzVaMDMxMTAvBgNV
BAMTKEEzN0FGRkY2NTMyNUYyRDFFRkMzM0E3MEYzNjZFRjlCNjVFQ0NGMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6LtGs5ueLdaqoUvOrWH/wKnH
XBpaOFwfZbpGrq3l81iGkPKymB6jm0lqtVagZxt6TkRiVNUW1PXWrHyiShxBWDRo
YiTXRVCd+lmfIeWc2i+3YfVmI604GO+taeGJwPDngjJv0uRs2aQBqGiLhBA2BY6t
1pulByFnY16jL8ECJr8yaItLvfBTZRJ1dLBkR8fHtI50Ldlipx4uU02x9/ppc1jT
JxuyknD0n0IrfcDpVoqi48YzdD1HXKrJ6UTgts0Xw3n9o3Qcf2Zl/qcVVFDnxr9z
gLXzjOYNzzx4VJb5dycEcep4rhlitoYkfeQ7VlhDxs0hk7AEujz5VRrCRYhrAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUo3r/9lMl8tHvwzpw82bvm2XszxkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqq4TANBgkqhkiG9w0BAQsFAAOCAQEAOYv7
ruwe7HaY4pWu1OA7ePXs3G+wmczCBfCjIKD5cNW34s8p+Rz74ub43aw1aEcdjXE7
1GSBoxXqoL+bDg2pwQUB/SlwK6BsykLBiKfiVS/82bFQwkg0s9JRG6rVU+QXTyyQ
XPM7EjOMGVafMXZKmcf9yQ8kxMfyxr+AFvAK+uxIjS9dHvjQczzyw+u32qSFRixz
bFXGziIJUFB6jI3MyBLpMGh29L8t4ijmxHzf1yS/hrdEFUSeGllGbl4/XZeHbWwG
JxVVSNHBpGzpNXHKgel6ibUHeaBgvccCWZIcqX7HKHo5l4vNin52eC7abHC563so
nCHF1ocBz46R3oE2Dw==
-----END CERTIFICATE-----