Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145708.roa
File:                     AS145708.roa (raw, json)
Hash identifier:          wy+yGPe2eVaYufPFoRMAraLMc48k1qSc3z+6cMrVURo=
Subject key identifier:   39:51:22:7C:EF:0A:79:F5:83:D8:A9:4C:92:AA:A4:B5:7E:16:F6:3C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       BAE7AE82467FCF766C64FF807D78F1A43B464E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145708.roa
Signing time:             Fri 22 May 2026 06:05:25 +0000
ROA not before:           Fri 22 May 2026 06:00:25 +0000
ROA not after:            Fri 21 May 2027 06:05:25 +0000
asID:                     145708
IP address blocks:        240a:abf2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ba:e7:ae:82:46:7f:cf:76:6c:64:ff:80:7d:78:f1:a4:3b:46:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:25 2026 GMT
            Not After : May 21 06:05:25 2027 GMT
        Subject: CN=3951227CEF0A79F583D8A94C92AAA4B57E16F63C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:a2:40:09:32:cc:f7:aa:15:f6:0b:77:5d:
                    ab:78:5f:bb:9e:5a:7d:67:46:10:91:3e:6b:99:db:
                    3e:f4:ef:cb:3f:fb:83:b7:eb:47:62:af:18:00:f9:
                    08:16:f3:01:75:e8:16:9e:68:ba:45:46:e1:b8:21:
                    1f:96:5b:9e:33:0a:05:33:bc:b8:12:e9:f9:99:a7:
                    4f:db:19:01:6b:f0:11:b0:ef:52:8e:64:de:1a:3d:
                    9f:c1:dc:a4:bf:20:8d:eb:99:83:d0:0b:f1:8b:ce:
                    96:be:a1:d9:a8:64:f3:67:5a:2d:1a:fd:bb:db:53:
                    8c:ff:5b:02:4f:a3:e9:5a:58:1c:da:9c:76:31:8d:
                    9d:5f:ce:3c:75:a9:ae:61:3f:da:d8:b9:8b:29:55:
                    5f:93:4b:df:c3:f3:4e:28:ef:61:ce:78:1e:ea:85:
                    12:31:c0:af:ee:f1:65:70:d3:22:3e:7d:ed:25:ae:
                    82:3b:68:0a:cd:85:c5:70:0d:4a:52:da:86:79:fd:
                    bb:99:36:e8:6c:02:4a:6e:6b:35:7f:b7:26:6f:25:
                    68:a9:02:17:f7:7b:a6:19:f7:67:c3:0f:1b:2b:5e:
                    2a:4b:0f:92:5d:ed:e4:cb:f6:ae:2d:3a:c2:82:cf:
                    68:71:7f:7f:45:71:66:07:7f:86:d8:0a:9e:80:a8:
                    63:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:51:22:7C:EF:0A:79:F5:83:D8:A9:4C:92:AA:A4:B5:7E:16:F6:3C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145708.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abf2::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:f5:1c:3d:b3:05:1c:32:db:37:49:b5:46:30:bc:a9:4e:bd:
         2d:96:e8:05:75:a0:ba:e9:39:0a:15:44:31:7e:c3:d2:36:a4:
         1f:05:e5:95:31:fb:39:44:2e:09:81:e2:0f:f2:62:4c:dd:c5:
         12:c8:aa:b3:71:ba:d1:f4:97:8c:6d:2a:3d:f6:a6:69:91:5f:
         15:4d:fe:fc:79:97:96:d0:5c:2e:07:07:51:86:fe:72:c5:b8:
         eb:3e:cb:3d:86:52:d0:53:11:67:fb:b1:cf:e1:04:73:b9:08:
         6f:0d:c4:dd:1b:a5:f2:49:7a:e1:b1:60:ca:c1:60:d4:b5:16:
         70:a5:83:4f:9f:e2:ba:ac:20:53:63:e2:70:6a:08:cc:89:1b:
         a8:ea:81:a0:50:ad:0f:df:91:2c:4c:15:25:c4:f8:86:14:b5:
         76:50:05:72:ef:95:8d:62:fe:06:27:6c:99:0b:79:ce:fa:af:
         72:cd:4b:c4:9d:a2:71:5e:70:f9:8c:d3:64:46:63:fa:95:fe:
         ff:fe:e2:7f:b2:7a:98:b6:1d:e8:97:72:08:21:f5:90:26:a6:
         52:64:d3:3c:5b:cb:6d:64:09:63:94:b6:4a:15:86:1d:b9:bb:
         97:4d:d0:7c:22:5e:b2:a9:14:07:e4:db:91:5a:b9:b1:c1:e6:
         ae:77:02:19
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUALrnroJGf892bGT/gH148aQ7Rk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMjVaFw0yNzA1MjEwNjA1MjVaMDMxMTAvBgNV
BAMTKDM5NTEyMjdDRUYwQTc5RjU4M0Q4QTk0QzkyQUFBNEI1N0UxNkY2M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fKJACTLM96oV9gt3Xat4X7ue
Wn1nRhCRPmuZ2z7078s/+4O360dirxgA+QgW8wF16BaeaLpFRuG4IR+WW54zCgUz
vLgS6fmZp0/bGQFr8BGw71KOZN4aPZ/B3KS/II3rmYPQC/GLzpa+odmoZPNnWi0a
/bvbU4z/WwJPo+laWBzanHYxjZ1fzjx1qa5hP9rYuYspVV+TS9/D804o72HOeB7q
hRIxwK/u8WVw0yI+fe0lroI7aArNhcVwDUpS2oZ5/buZNuhsAkpuazV/tyZvJWip
Ahf3e6YZ92fDDxsrXipLD5Jd7eTL9q4tOsKCz2hxf39FcWYHf4bYCp6AqGMlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOVEifO8KefWD2KlMkqqktX4W9jwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzA4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqr8jANBgkqhkiG9w0BAQsFAAOCAQEARfUc
PbMFHDLbN0m1RjC8qU69LZboBXWguuk5ChVEMX7D0jakHwXllTH7OUQuCYHiD/Ji
TN3FEsiqs3G60fSXjG0qPfamaZFfFU3+/HmXltBcLgcHUYb+csW46z7LPYZS0FMR
Z/uxz+EEc7kIbw3E3Rul8kl64bFgysFg1LUWcKWDT5/iuqwgU2PicGoIzIkbqOqB
oFCtD9+RLEwVJcT4hhS1dlAFcu+VjWL+BidsmQt5zvqvcs1LxJ2icV5w+YzTZEZj
+pX+//7if7J6mLYd6JdyCCH1kCamUmTTPFvLbWQJY5S2ShWGHbm7l03QfCJesqkU
B+TbkVq5scHmrncCGQ==
-----END CERTIFICATE-----