Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145440.roa
File:                     AS145440.roa (raw, json)
Hash identifier:          /ycift8ciTc5OuFEVnrbrrf0azVSSaQkFRMcHYACoo8=
Subject key identifier:   5F:45:33:26:11:61:84:7B:5B:49:D1:1B:68:7C:07:06:47:84:C5:FD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       67DB40F3FC216DDBF6660AD08B5FE0915EB6F13F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145440.roa
Signing time:             Tue 26 May 2026 01:12:56 +0000
ROA not before:           Tue 26 May 2026 01:07:56 +0000
ROA not after:            Tue 25 May 2027 01:12:56 +0000
asID:                     145440
IP address blocks:        240a:aae6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:db:40:f3:fc:21:6d:db:f6:66:0a:d0:8b:5f:e0:91:5e:b6:f1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:07:56 2026 GMT
            Not After : May 25 01:12:56 2027 GMT
        Subject: CN=5F4533261161847B5B49D11B687C07064784C5FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cb:71:b4:63:99:cd:39:dd:ed:5c:2a:94:31:
                    5d:ca:c6:8b:53:c4:5a:24:2b:56:30:14:ea:fb:67:
                    06:8f:94:52:23:0b:84:5d:e4:1a:2e:33:76:83:0c:
                    91:02:84:5b:a0:cc:95:4e:5c:29:18:92:0b:6f:87:
                    9c:a7:19:32:66:cb:6a:78:e3:f4:2c:5b:51:f9:bf:
                    d4:83:fa:e2:36:6d:9a:54:e3:07:e1:9c:cc:63:39:
                    bc:60:00:21:14:49:91:80:08:03:45:67:aa:40:01:
                    a5:d4:7f:bf:ec:7d:3a:81:6c:d2:9e:4c:6a:5c:e4:
                    1e:b4:46:d1:35:6c:24:0f:ca:46:77:08:d0:4a:40:
                    70:70:7d:19:4c:b4:10:d3:a5:5b:9c:b9:85:59:59:
                    d9:6d:34:b9:7b:60:48:d6:36:a0:71:2c:28:0f:fd:
                    3c:b1:93:ec:d0:35:b2:77:b7:c8:17:68:7c:bb:4c:
                    d9:a2:2d:ad:38:89:23:75:b8:c7:f8:ee:7b:2d:d4:
                    47:7d:34:3b:a9:e0:4f:66:dd:d0:0e:17:fd:2c:4e:
                    29:a2:3d:d9:10:c8:fd:ca:e4:52:8c:2a:c0:2d:18:
                    f9:89:87:6f:cf:45:8c:bd:d8:b0:31:eb:e8:18:9e:
                    8b:1f:43:8b:1d:40:2d:1e:d6:37:6c:57:c2:40:ab:
                    d1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:45:33:26:11:61:84:7B:5B:49:D1:1B:68:7C:07:06:47:84:C5:FD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145440.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aae6::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:82:1b:d3:52:3b:05:49:65:d1:16:d1:79:b0:6c:2a:5e:2d:
         c5:ad:d9:ee:67:57:e8:4c:34:f3:9d:a8:0f:66:9c:c8:bf:0b:
         ef:c1:d8:5b:8b:e7:c7:92:19:62:6c:98:34:74:7f:a4:ba:fe:
         11:45:1b:da:0c:79:86:df:27:af:0d:7b:b6:c1:af:53:f8:5a:
         3d:71:02:35:95:79:d1:21:5f:7f:de:d0:99:29:e3:79:9e:48:
         bc:2a:a2:e0:fb:88:d3:1a:74:1e:95:33:35:f1:3f:01:ff:4a:
         05:dc:34:f5:65:50:13:e7:66:b4:6d:49:c6:f7:8f:74:27:6f:
         07:7e:17:90:87:f6:bf:13:ab:35:22:12:ff:64:3b:3f:93:a8:
         fc:d4:3b:df:9f:c5:3a:20:0f:10:fc:fb:ab:a6:87:59:4b:f9:
         e4:f3:4f:ee:5a:3b:81:d4:0c:4b:62:80:54:d6:8f:41:3d:75:
         70:83:ad:cc:b5:dc:c5:6f:6b:75:95:c5:1c:13:d8:b6:fa:91:
         74:60:43:c1:f0:5b:dc:ed:fe:a4:06:78:04:d6:05:b0:ee:c1:
         6e:e5:30:1e:36:c4:8e:22:66:99:fe:26:3e:62:53:87:ce:2b:
         27:62:00:b0:2f:25:b9:30:b8:26:b2:b8:7f:23:c9:e0:f3:11:
         9e:57:e2:7d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZ9tA8/whbdv2ZgrQi1/gkV628T8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA3NTZaFw0yNzA1MjUwMTEyNTZaMDMxMTAvBgNV
BAMTKDVGNDUzMzI2MTE2MTg0N0I1QjQ5RDExQjY4N0MwNzA2NDc4NEM1RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOy3G0Y5nNOd3tXCqUMV3KxotT
xFokK1YwFOr7ZwaPlFIjC4Rd5BouM3aDDJEChFugzJVOXCkYkgtvh5ynGTJmy2p4
4/QsW1H5v9SD+uI2bZpU4wfhnMxjObxgACEUSZGACANFZ6pAAaXUf7/sfTqBbNKe
TGpc5B60RtE1bCQPykZ3CNBKQHBwfRlMtBDTpVucuYVZWdltNLl7YEjWNqBxLCgP
/Tyxk+zQNbJ3t8gXaHy7TNmiLa04iSN1uMf47nst1Ed9NDup4E9m3dAOF/0sTimi
PdkQyP3K5FKMKsAtGPmJh2/PRYy92LAx6+gYnosfQ4sdQC0e1jdsV8JAq9HzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUX0UzJhFhhHtbSdEbaHwHBkeExf0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqq5jANBgkqhkiG9w0BAQsFAAOCAQEASIIb
01I7BUll0RbRebBsKl4txa3Z7mdX6Ew0852oD2acyL8L78HYW4vnx5IZYmyYNHR/
pLr+EUUb2gx5ht8nrw17tsGvU/haPXECNZV50SFff97QmSnjeZ5IvCqi4PuI0xp0
HpUzNfE/Af9KBdw09WVQE+dmtG1JxvePdCdvB34XkIf2vxOrNSIS/2Q7P5Oo/NQ7
35/FOiAPEPz7q6aHWUv55PNP7lo7gdQMS2KAVNaPQT11cIOtzLXcxW9rdZXFHBPY
tvqRdGBDwfBb3O3+pAZ4BNYFsO7BbuUwHjbEjiJmmf4mPmJTh84rJ2IAsC8luTC4
JrK4fyPJ4PMRnlfifQ==
-----END CERTIFICATE-----