Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145496.roa
File:                     AS145496.roa (raw, json)
Hash identifier:          pcG6cuc2sz9MqqnKLnuNhMbmgw6F2nIaYH19SSxSlKs=
Subject key identifier:   AE:E8:3B:E7:B6:E5:41:17:D6:72:67:76:0E:81:22:DD:E8:C1:E0:41
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3035C494A0A6B1CD01A4CAEDABC1525BDF0AFC3D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145496.roa
Signing time:             Mon 25 May 2026 06:28:20 +0000
ROA not before:           Mon 25 May 2026 06:23:20 +0000
ROA not after:            Mon 24 May 2027 06:28:20 +0000
asID:                     145496
IP address blocks:        240a:ab1e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:35:c4:94:a0:a6:b1:cd:01:a4:ca:ed:ab:c1:52:5b:df:0a:fc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:20 2026 GMT
            Not After : May 24 06:28:20 2027 GMT
        Subject: CN=AEE83BE7B6E54117D67267760E8122DDE8C1E041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b0:83:16:99:bc:2b:19:5f:7e:0a:f7:85:cc:
                    be:53:4b:c5:2e:de:da:cb:5f:fb:d8:40:86:6b:10:
                    db:9c:37:8c:8f:f6:79:dd:6e:80:e9:d0:56:d9:dd:
                    46:9d:1f:bb:6a:f4:17:6d:36:10:8b:da:e1:96:a0:
                    4d:e8:6f:52:d1:a6:af:21:c4:3b:42:ec:be:78:51:
                    b0:9e:31:23:c1:26:52:72:e7:b5:ca:6d:2b:61:47:
                    fb:e9:7f:65:38:32:53:78:bf:3d:90:89:c9:4f:a3:
                    36:c8:67:13:92:23:3b:21:a8:9e:50:08:7f:5d:22:
                    bd:a9:96:f4:ef:8b:8d:b2:57:52:82:4b:29:51:01:
                    87:e0:41:53:8c:61:6e:d2:70:db:ec:6d:b2:6a:17:
                    c3:75:38:7a:2a:17:ac:2d:24:9d:77:45:82:cb:87:
                    75:e9:48:4e:09:0c:a2:46:0d:5c:d9:c9:90:12:b1:
                    ab:3e:3c:b6:65:98:76:03:1a:90:f2:8f:8e:37:12:
                    26:a6:7c:19:72:01:9b:f0:c7:3b:24:7c:8f:34:bc:
                    5e:6a:ac:d6:cb:73:c0:54:54:ec:45:3c:5a:e4:55:
                    5f:d3:cd:c3:2f:2d:13:a9:14:18:2e:c2:9a:07:39:
                    6c:61:6f:0d:8d:98:ef:b9:cb:cd:7c:90:c8:f2:18:
                    a2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E8:3B:E7:B6:E5:41:17:D6:72:67:76:0E:81:22:DD:E8:C1:E0:41
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145496.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab1e::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:5c:84:b8:17:7c:6c:53:8e:cb:f1:3b:c8:10:94:14:9c:09:
         4e:c4:6d:fa:24:a5:91:ee:a4:68:d6:1c:dc:a5:52:fa:60:a2:
         38:c8:a8:b7:5a:7b:3a:b9:30:5b:48:57:15:03:23:81:05:5e:
         54:28:1f:ae:5c:26:96:39:06:6c:cf:8c:00:7e:7c:40:d4:8e:
         ef:5c:80:6b:f3:71:e2:ee:7f:f2:4d:c3:43:a6:0d:59:d7:fb:
         3e:f8:9f:3d:7a:75:9a:9d:71:04:92:5b:a7:53:7b:89:2e:4e:
         5d:c5:9c:fa:cd:85:5d:c6:8c:4c:00:ab:a4:72:da:52:d2:a2:
         0f:06:87:44:d9:19:87:4d:93:fe:a2:8a:f8:7e:e2:27:c1:ab:
         6e:30:eb:11:3d:a2:94:0d:b6:fb:d5:f1:15:57:0f:84:7b:01:
         d7:d2:0f:fd:80:27:26:d3:78:f2:f1:b4:b7:17:1b:62:bd:12:
         b2:78:13:77:17:0e:49:2c:b8:da:60:ae:e9:8d:bf:a6:8a:4a:
         2f:3c:2d:fa:c6:0f:23:c2:ea:f5:d1:4e:0c:fc:4d:34:35:9e:
         ce:c5:f3:38:29:c2:e4:0b:30:cd:92:38:f2:bb:d7:86:8f:de:
         c6:10:29:e6:88:e9:b2:35:59:29:85:5f:3a:d0:8a:50:67:0f:
         9f:96:c1:a3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMDXElKCmsc0BpMrtq8FSW98K/D0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMjBaFw0yNzA1MjQwNjI4MjBaMDMxMTAvBgNV
BAMTKEFFRTgzQkU3QjZFNTQxMTdENjcyNjc3NjBFODEyMkRERThDMUUwNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsIMWmbwrGV9+CveFzL5TS8Uu
3trLX/vYQIZrENucN4yP9nndboDp0FbZ3UadH7tq9BdtNhCL2uGWoE3ob1LRpq8h
xDtC7L54UbCeMSPBJlJy57XKbSthR/vpf2U4MlN4vz2QiclPozbIZxOSIzshqJ5Q
CH9dIr2plvTvi42yV1KCSylRAYfgQVOMYW7ScNvsbbJqF8N1OHoqF6wtJJ13RYLL
h3XpSE4JDKJGDVzZyZASsas+PLZlmHYDGpDyj443EiamfBlyAZvwxzskfI80vF5q
rNbLc8BUVOxFPFrkVV/TzcMvLROpFBguwpoHOWxhbw2NmO+5y818kMjyGKJFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUrug757blQRfWcmd2DoEi3ejB4EEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrHjANBgkqhkiG9w0BAQsFAAOCAQEAolyE
uBd8bFOOy/E7yBCUFJwJTsRt+iSlke6kaNYc3KVS+mCiOMiot1p7OrkwW0hXFQMj
gQVeVCgfrlwmljkGbM+MAH58QNSO71yAa/Nx4u5/8k3DQ6YNWdf7PvifPXp1mp1x
BJJbp1N7iS5OXcWc+s2FXcaMTACrpHLaUtKiDwaHRNkZh02T/qKK+H7iJ8GrbjDr
ET2ilA22+9XxFVcPhHsB19IP/YAnJtN48vG0txcbYr0SsngTdxcOSSy42mCu6Y2/
popKLzwt+sYPI8Lq9dFODPxNNDWezsXzOCnC5AswzZI48rvXho/exhAp5ojpsjVZ
KYVfOtCKUGcPn5bBow==
-----END CERTIFICATE-----