Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145674.roa
File:                     AS145674.roa (raw, json)
Hash identifier:          t+y7ljXopBWhwnUn1OSloit95xVdvYciOP//BrB5Xw4=
Subject key identifier:   42:26:04:43:5B:34:BC:53:B7:A5:D8:52:C9:6C:BE:6F:92:35:8D:65
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7429F961C0F952EB342EA62BB9B7114C3F6878E5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145674.roa
Signing time:             Mon 25 May 2026 03:19:43 +0000
ROA not before:           Mon 25 May 2026 03:14:43 +0000
ROA not after:            Mon 24 May 2027 03:19:43 +0000
asID:                     145674
IP address blocks:        240a:abd0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:29:f9:61:c0:f9:52:eb:34:2e:a6:2b:b9:b7:11:4c:3f:68:78:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:43 2026 GMT
            Not After : May 24 03:19:43 2027 GMT
        Subject: CN=422604435B34BC53B7A5D852C96CBE6F92358D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:6b:ae:45:fd:63:ff:be:af:dd:9d:aa:c9:
                    fe:01:85:7f:62:c8:98:01:1c:d9:81:9f:48:6b:2b:
                    77:3d:cc:95:7b:f4:24:b2:8f:b5:bc:9a:0b:1f:4d:
                    ef:89:b8:da:ff:af:ca:ef:b3:1b:4c:8c:9c:19:ce:
                    c6:09:e6:e2:11:1e:02:a1:d6:4f:e2:36:fa:84:9a:
                    e2:9e:ba:e5:ed:95:0f:09:ba:41:62:c5:5b:9c:0e:
                    54:29:d8:03:87:a1:8b:3f:5d:1c:0d:50:95:ea:a8:
                    3e:08:6f:2a:6b:76:22:8a:4c:33:42:71:e8:2e:c0:
                    bd:f6:26:a1:a0:3d:61:4b:9e:68:fc:bd:e1:88:b1:
                    d5:e2:2f:f9:75:06:0d:52:c8:8a:21:b9:57:3e:5b:
                    00:bf:a5:72:50:36:95:82:56:67:ad:f4:93:99:46:
                    3d:5c:28:18:55:05:95:d1:41:25:12:53:6e:bf:33:
                    31:89:ee:4b:f9:e2:66:6d:05:5f:26:a4:50:ba:e3:
                    6b:2c:99:4b:ac:b9:bf:10:b8:77:5b:6d:9d:7e:d3:
                    98:7e:ad:31:f1:83:f3:58:46:c2:5d:19:b9:5e:fd:
                    8c:94:6e:a0:8e:d1:08:f6:2c:c5:49:54:58:4a:0e:
                    38:21:5a:e7:31:c6:1e:f4:10:17:aa:27:df:5a:0b:
                    06:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:26:04:43:5B:34:BC:53:B7:A5:D8:52:C9:6C:BE:6F:92:35:8D:65
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145674.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:f0:c0:be:73:df:c2:a9:59:80:ea:75:1a:66:95:3a:66:
         64:a7:17:75:cd:21:f2:f8:a8:e0:5a:e7:c5:32:18:66:2c:26:
         df:d5:fa:5e:98:33:45:9a:90:0a:bc:5d:f8:94:78:1b:fb:37:
         88:e8:a6:ec:26:56:b0:5c:04:9c:14:45:1f:43:c0:57:53:f1:
         fa:35:24:29:cf:fc:be:d6:30:ed:69:f6:c8:16:9e:eb:3a:c3:
         e3:59:32:a9:49:6c:c8:18:37:d1:5e:d7:65:4e:15:81:40:01:
         1f:ab:9f:94:90:65:67:36:32:82:60:49:15:1a:ad:44:52:a2:
         34:2d:71:12:4b:97:e0:a6:e6:2c:9f:7a:b3:05:a3:56:11:5e:
         e7:97:e3:1f:f0:89:bb:7c:59:8c:dc:3f:9a:dd:8c:d7:4a:1f:
         3f:15:f4:73:e9:bc:6d:af:15:99:5e:3d:76:49:db:e7:f8:e7:
         f0:a1:8c:99:89:d5:93:8a:21:56:64:8d:0f:d3:1f:46:b0:58:
         d7:dc:28:68:6b:a2:eb:38:2e:4f:ee:fe:ca:6d:d0:84:79:ca:
         e8:07:97:1e:0e:b4:37:65:84:02:6b:4f:2c:f7:06:0c:1d:d6:
         ec:ef:97:9b:07:a5:1a:e8:11:15:85:9c:02:10:bd:e8:2b:bf:
         07:ba:78:a1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdCn5YcD5Uus0LqYrubcRTD9oeOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0NDNaFw0yNzA1MjQwMzE5NDNaMDMxMTAvBgNV
BAMTKDQyMjYwNDQzNUIzNEJDNTNCN0E1RDg1MkM5NkNCRTZGOTIzNThENjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk72uuRf1j/76v3Z2qyf4BhX9i
yJgBHNmBn0hrK3c9zJV79CSyj7W8mgsfTe+JuNr/r8rvsxtMjJwZzsYJ5uIRHgKh
1k/iNvqEmuKeuuXtlQ8JukFixVucDlQp2AOHoYs/XRwNUJXqqD4IbyprdiKKTDNC
ceguwL32JqGgPWFLnmj8veGIsdXiL/l1Bg1SyIohuVc+WwC/pXJQNpWCVmet9JOZ
Rj1cKBhVBZXRQSUSU26/MzGJ7kv54mZtBV8mpFC642ssmUusub8QuHdbbZ1+05h+
rTHxg/NYRsJdGble/YyUbqCO0Qj2LMVJVFhKDjghWucxxh70EBeqJ99aCwanAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUQiYEQ1s0vFO3pdhSyWy+b5I1jWUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1Njc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqr0DANBgkqhkiG9w0BAQsFAAOCAQEAdMHw
wL5z38KpWYDqdRpmlTpmZKcXdc0h8vio4FrnxTIYZiwm39X6XpgzRZqQCrxd+JR4
G/s3iOim7CZWsFwEnBRFH0PAV1Px+jUkKc/8vtYw7Wn2yBae6zrD41kyqUlsyBg3
0V7XZU4VgUABH6uflJBlZzYygmBJFRqtRFKiNC1xEkuX4KbmLJ96swWjVhFe55fj
H/CJu3xZjNw/mt2M10ofPxX0c+m8ba8VmV49dknb5/jn8KGMmYnVk4ohVmSND9Mf
RrBY19woaGui6zguT+7+ym3QhHnK6AeXHg60N2WEAmtPLPcGDB3W7O+XmwelGugR
FYWcAhC96Cu/B7p4oQ==
-----END CERTIFICATE-----