Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145664.roa
File:                     AS145664.roa (raw, json)
Hash identifier:          xwI+rRSd/RXMQyXwUGNjxgqVPrBn6xavEupp8RwBW/E=
Subject key identifier:   FC:B7:64:D8:A7:CF:2A:57:13:78:EE:50:8C:FD:6B:6E:61:7A:56:62
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       71ADCDF23F5A261D8B8212B341C7D73A25DD9B43
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145664.roa
Signing time:             Fri 22 May 2026 07:08:54 +0000
ROA not before:           Fri 22 May 2026 07:03:54 +0000
ROA not after:            Fri 21 May 2027 07:08:54 +0000
asID:                     145664
IP address blocks:        240a:abc6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ad:cd:f2:3f:5a:26:1d:8b:82:12:b3:41:c7:d7:3a:25:dd:9b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:54 2026 GMT
            Not After : May 21 07:08:54 2027 GMT
        Subject: CN=FCB764D8A7CF2A571378EE508CFD6B6E617A5662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:68:de:5a:31:4c:fd:90:b9:49:a2:8a:2a:
                    63:74:9b:f6:4d:d4:5d:0d:d2:9e:2d:44:2d:8e:f2:
                    88:8f:81:e9:a7:20:b7:3b:00:5a:9f:be:01:3e:b9:
                    19:16:fd:48:2d:b2:b0:54:8e:be:b9:07:f3:25:86:
                    2f:cd:02:02:c1:19:a4:a0:6f:29:db:37:49:2e:fc:
                    22:84:91:15:64:d0:27:22:55:f4:96:7a:56:18:5a:
                    3c:06:84:77:fb:ec:16:72:f4:83:ac:01:0d:90:b5:
                    ce:db:4c:fe:91:90:bd:c7:a6:d8:2b:15:a3:5a:0e:
                    67:7e:8d:73:cf:0d:25:56:52:b4:4c:3e:03:64:bd:
                    f2:e7:1c:99:78:b3:dc:1f:d7:90:bb:c5:17:77:29:
                    fb:1f:bc:3c:d2:44:b9:2b:3b:bd:1a:e6:a5:02:d8:
                    eb:2e:b1:d4:d3:e6:e2:0a:47:de:72:86:5d:9a:33:
                    54:38:81:e5:b0:29:d1:f2:1c:73:e5:8d:99:86:71:
                    7f:26:ce:b9:41:7c:2f:4c:5b:4e:f1:e5:1a:3f:75:
                    5a:d8:41:ad:1d:98:50:4e:ae:15:a0:58:4a:22:b3:
                    ac:6c:15:13:b2:be:3a:b4:b2:53:c8:ab:9f:41:b9:
                    93:63:b1:d1:49:c8:9d:d9:7a:b9:3e:fe:4a:9f:2a:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B7:64:D8:A7:CF:2A:57:13:78:EE:50:8C:FD:6B:6E:61:7A:56:62
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145664.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:10:c9:9d:f6:c8:11:34:34:85:bb:0a:23:fa:3e:e8:07:1e:
         29:63:cf:19:56:f5:3f:3f:cd:77:33:64:37:9c:99:b5:3f:b2:
         47:68:f0:5f:88:42:50:cc:78:21:e5:56:57:f2:11:29:94:9d:
         2b:bf:99:a3:f8:3d:b6:bc:e6:15:7b:f0:8e:dc:9f:63:68:75:
         97:10:39:97:1e:f8:ec:77:64:f6:05:b2:38:fb:d8:34:6a:b2:
         39:e7:28:07:49:b1:1f:4b:85:9c:f0:72:89:eb:b6:a8:34:7d:
         f9:9c:7e:07:7f:e9:2e:3f:c2:19:0e:d2:79:86:00:ae:d7:bb:
         69:5e:3f:b6:bf:42:c2:10:15:10:ba:06:ca:94:4f:ac:06:64:
         af:07:8c:ec:99:23:1d:d5:14:a2:56:0e:7d:9e:d2:e8:e6:28:
         bb:63:77:8a:89:9d:b2:7c:1a:a8:02:0a:c6:dd:ef:0c:7a:35:
         5e:c9:68:ec:e8:09:f2:c4:57:95:3f:8d:33:81:b6:d8:76:99:
         ec:98:e6:8f:2e:42:97:15:0e:79:75:28:c7:a8:1f:88:33:a7:
         03:83:e1:be:0f:91:ca:5c:ec:35:d1:50:04:9f:73:51:54:e0:
         6e:18:f9:32:98:c6:ae:17:64:c9:70:fa:d1:98:c3:e2:c2:c7:
         fe:3c:2f:9f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUca3N8j9aJh2LghKzQcfXOiXdm0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNTRaFw0yNzA1MjEwNzA4NTRaMDMxMTAvBgNV
BAMTKEZDQjc2NEQ4QTdDRjJBNTcxMzc4RUU1MDhDRkQ2QjZFNjE3QTU2NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PWjeWjFM/ZC5SaKKKmN0m/ZN
1F0N0p4tRC2O8oiPgemnILc7AFqfvgE+uRkW/UgtsrBUjr65B/Mlhi/NAgLBGaSg
bynbN0ku/CKEkRVk0CciVfSWelYYWjwGhHf77BZy9IOsAQ2Qtc7bTP6RkL3Hptgr
FaNaDmd+jXPPDSVWUrRMPgNkvfLnHJl4s9wf15C7xRd3KfsfvDzSRLkrO70a5qUC
2OsusdTT5uIKR95yhl2aM1Q4geWwKdHyHHPljZmGcX8mzrlBfC9MW07x5Ro/dVrY
Qa0dmFBOrhWgWEois6xsFROyvjq0slPIq59BuZNjsdFJyJ3Zerk+/kqfKvCNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/Ldk2KfPKlcTeO5QjP1rbmF6VmIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrxjANBgkqhkiG9w0BAQsFAAOCAQEASBDJ
nfbIETQ0hbsKI/o+6AceKWPPGVb1Pz/NdzNkN5yZtT+yR2jwX4hCUMx4IeVWV/IR
KZSdK7+Zo/g9trzmFXvwjtyfY2h1lxA5lx747Hdk9gWyOPvYNGqyOecoB0mxH0uF
nPByieu2qDR9+Zx+B3/pLj/CGQ7SeYYArte7aV4/tr9CwhAVELoGypRPrAZkrweM
7JkjHdUUolYOfZ7S6OYou2N3iomdsnwaqAIKxt3vDHo1Xslo7OgJ8sRXlT+NM4G2
2HaZ7Jjmjy5ClxUOeXUox6gfiDOnA4Phvg+RylzsNdFQBJ9zUVTgbhj5MpjGrhdk
yXD60ZjD4sLH/jwvnw==
-----END CERTIFICATE-----