Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145436.roa
File:                     AS145436.roa (raw, json)
Hash identifier:          4dwIULzdGxzu7LcQz/Ak38q5hpZocvLiiHO8pqinc3k=
Subject key identifier:   EF:DF:93:09:C5:32:A2:E5:5A:03:0F:C1:76:65:78:87:14:9A:E8:E3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4919DBF848CA3E77C95890B9EC329A56F51018F3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145436.roa
Signing time:             Fri 22 May 2026 07:09:16 +0000
ROA not before:           Fri 22 May 2026 07:04:16 +0000
ROA not after:            Fri 21 May 2027 07:09:16 +0000
asID:                     145436
IP address blocks:        240a:aae2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:19:db:f8:48:ca:3e:77:c9:58:90:b9:ec:32:9a:56:f5:10:18:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:16 2026 GMT
            Not After : May 21 07:09:16 2027 GMT
        Subject: CN=EFDF9309C532A2E55A030FC176657887149AE8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:e7:54:d3:3e:d4:cf:1e:f3:73:3c:61:2c:
                    39:af:12:43:37:61:f5:bc:98:d1:6a:b2:ed:44:e7:
                    30:5b:27:7f:76:c6:be:b2:c5:40:cf:c6:47:15:07:
                    18:f0:6d:aa:e0:45:09:fa:fc:86:34:f8:c8:a7:e4:
                    ab:ba:46:66:fe:45:d6:f0:89:52:0e:0e:64:12:e9:
                    1e:8d:98:e5:b8:4d:8c:9f:52:e4:59:9a:1e:c3:28:
                    67:fe:8e:c0:86:9f:c4:3e:29:ca:11:4c:e8:c0:74:
                    7e:cd:c4:a5:66:27:8c:15:d5:a9:fe:78:0f:f7:3d:
                    e1:25:f0:7c:6c:fb:5e:b3:f6:97:05:c0:a1:e2:3a:
                    e3:71:9f:b0:87:60:e0:ac:dc:53:77:2e:c8:26:ae:
                    11:ee:bb:63:f1:cb:b0:43:05:62:6a:d9:7d:56:9d:
                    ec:b7:9f:41:f8:b8:c7:d7:d4:6e:32:a5:b1:b6:2f:
                    9b:3f:f1:d8:ff:dd:a5:18:f1:ba:aa:0d:67:7c:c2:
                    1c:24:cd:14:ba:ad:0f:a5:5e:c2:a3:33:69:3a:e4:
                    fc:0d:d0:35:3c:de:ff:d2:d2:24:55:d0:82:40:7e:
                    be:db:78:5b:e7:c0:a7:91:dc:ee:d6:2d:0e:a6:13:
                    8c:b8:56:1e:7a:f5:51:b1:f8:e6:6f:9f:79:99:c4:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DF:93:09:C5:32:A2:E5:5A:03:0F:C1:76:65:78:87:14:9A:E8:E3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aae2::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:94:0e:8c:c1:26:eb:73:90:44:42:47:c0:b3:77:61:b6:fb:
         ab:61:1e:33:cc:8a:d1:2b:c0:55:72:78:a9:76:68:72:f1:28:
         1d:b4:f2:5b:f6:74:38:7f:b3:ef:eb:ca:9f:b9:e7:0e:08:20:
         16:95:90:59:f3:b9:19:e6:0a:20:ec:f6:a1:77:67:18:c9:75:
         a7:3f:b2:7f:b0:4c:07:00:a5:61:2b:c6:ed:47:94:54:8b:7f:
         a6:b5:22:43:7a:16:6b:b9:ca:bb:27:27:5a:c4:82:8e:fa:11:
         7b:b8:24:7a:b4:f3:0c:b8:49:d9:bb:19:c8:79:4f:b4:5d:fd:
         7e:80:fd:ec:a9:88:78:dd:bb:ec:8c:d9:0f:11:cb:4d:88:7a:
         94:c7:42:7f:a9:dd:bd:62:92:9d:75:38:c5:76:a3:51:b0:af:
         72:c5:00:23:85:81:4a:a1:0e:02:09:ec:b3:01:52:9e:60:fc:
         9d:39:6c:41:3e:e6:eb:2f:e5:c0:56:97:15:f8:6d:3f:b8:85:
         4e:b3:84:68:79:d8:45:c1:02:d5:02:d3:f5:6a:0a:25:2b:f5:
         d7:80:4c:6f:39:b4:69:09:4e:ff:d6:41:a5:bb:33:80:7b:79:
         db:1b:e6:06:29:63:f1:02:0b:be:0c:80:92:34:78:aa:3b:16:
         1c:d9:7d:e3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSRnb+EjKPnfJWJC57DKaVvUQGPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MTZaFw0yNzA1MjEwNzA5MTZaMDMxMTAvBgNV
BAMTKEVGREY5MzA5QzUzMkEyRTU1QTAzMEZDMTc2NjU3ODg3MTQ5QUU4RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WedU0z7Uzx7zczxhLDmvEkM3
YfW8mNFqsu1E5zBbJ392xr6yxUDPxkcVBxjwbargRQn6/IY0+Min5Ku6Rmb+Rdbw
iVIODmQS6R6NmOW4TYyfUuRZmh7DKGf+jsCGn8Q+KcoRTOjAdH7NxKVmJ4wV1an+
eA/3PeEl8Hxs+16z9pcFwKHiOuNxn7CHYOCs3FN3LsgmrhHuu2Pxy7BDBWJq2X1W
ney3n0H4uMfX1G4ypbG2L5s/8dj/3aUY8bqqDWd8whwkzRS6rQ+lXsKjM2k65PwN
0DU83v/S0iRV0IJAfr7beFvnwKeR3O7WLQ6mE4y4Vh569VGx+OZvn3mZxESrAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU79+TCcUyouVaAw/BdmV4hxSa6OMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqq4jANBgkqhkiG9w0BAQsFAAOCAQEAu5QO
jMEm63OQREJHwLN3Ybb7q2EeM8yK0SvAVXJ4qXZocvEoHbTyW/Z0OH+z7+vKn7nn
DgggFpWQWfO5GeYKIOz2oXdnGMl1pz+yf7BMBwClYSvG7UeUVIt/prUiQ3oWa7nK
uycnWsSCjvoRe7gkerTzDLhJ2bsZyHlPtF39foD97KmIeN277IzZDxHLTYh6lMdC
f6ndvWKSnXU4xXajUbCvcsUAI4WBSqEOAgnsswFSnmD8nTlsQT7m6y/lwFaXFfht
P7iFTrOEaHnYRcEC1QLT9WoKJSv114BMbzm0aQlO/9ZBpbszgHt52xvmBilj8QIL
vgyAkjR4qjsWHNl94w==
-----END CERTIFICATE-----