Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145736.roa
File:                     AS145736.roa (raw, json)
Hash identifier:          YJGCwcgvcvhmx625m4X8XU5wHTrirVlZQnKOjAtrCQk=
Subject key identifier:   F8:31:7C:38:9B:89:A4:60:31:69:91:02:9C:2A:C8:6E:5F:C7:21:8A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       370AE52ECC151AD4A78B6E6FEC7AD8840EEB3305
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145736.roa
Signing time:             Mon 25 May 2026 01:51:31 +0000
ROA not before:           Mon 25 May 2026 01:46:31 +0000
ROA not after:            Mon 24 May 2027 01:51:31 +0000
asID:                     145736
IP address blocks:        240a:ac0e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0a:e5:2e:cc:15:1a:d4:a7:8b:6e:6f:ec:7a:d8:84:0e:eb:33:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:31 2026 GMT
            Not After : May 24 01:51:31 2027 GMT
        Subject: CN=F8317C389B89A460316991029C2AC86E5FC7218A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:d7:e7:9f:c9:17:af:21:56:df:c4:83:8e:
                    80:1f:51:fa:6f:91:e2:d3:ff:b1:fb:67:a3:8e:6d:
                    ec:1d:d4:3b:c5:49:dd:36:77:31:74:7b:93:04:09:
                    37:f5:51:98:08:c0:40:e1:1b:9a:bd:93:74:68:75:
                    85:d0:1c:33:da:2d:fc:75:cf:dd:55:2f:ee:76:d1:
                    c4:c7:5b:5d:02:55:f7:17:e7:99:86:11:c4:c2:29:
                    6f:32:df:df:88:5d:79:65:cb:e9:b5:ce:57:4d:e0:
                    c5:d4:15:0d:0f:54:e6:75:7e:0f:d6:09:31:50:f5:
                    7e:47:e5:a7:4c:96:99:0c:1b:7d:57:f0:53:58:16:
                    80:50:65:38:fc:cf:0a:79:91:d8:49:0f:f8:2f:04:
                    cd:88:b9:b9:81:8c:65:80:17:4b:dd:2b:d1:b1:c4:
                    8f:5d:ee:e4:df:00:d9:f7:fa:bb:58:3c:f9:27:f0:
                    4f:5b:68:f3:5b:48:84:ef:fd:67:9a:3d:e5:5f:6e:
                    83:a7:69:cc:33:6c:fe:21:ac:2a:c5:02:9c:3d:95:
                    85:85:4b:a1:3a:65:59:a5:6a:59:60:2b:cf:e0:ab:
                    95:b2:f4:a1:cc:15:d3:08:be:ff:f1:75:ad:db:2a:
                    75:6b:71:d6:e5:67:9e:09:54:3a:d6:eb:a6:c0:f4:
                    83:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:31:7C:38:9B:89:A4:60:31:69:91:02:9C:2A:C8:6E:5F:C7:21:8A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac0e::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:6a:34:7a:6f:af:9b:5f:99:9a:83:95:4e:fa:78:1e:69:08:
         35:d2:65:35:a8:bc:32:ae:40:f8:79:16:12:d8:e9:c0:e7:6b:
         cf:96:54:a8:59:56:90:21:d4:16:6e:64:95:df:bf:af:e2:ae:
         c3:5c:7e:3e:af:b5:dc:4d:72:4c:0e:98:b5:c3:76:5c:bf:cd:
         26:65:08:d6:46:d5:0a:58:d5:fd:4c:38:87:51:c6:24:ef:e9:
         e8:19:c6:ce:ae:35:90:16:ec:19:f8:39:f1:16:90:8b:c2:e5:
         7f:94:ad:ff:39:8d:86:4a:c3:7e:1c:9f:3f:25:f2:ae:5f:80:
         7b:a2:d1:3d:d3:20:46:75:41:a5:3e:57:38:1b:45:b0:ba:19:
         17:5b:1c:47:c7:59:2b:8a:98:35:ec:5f:93:db:53:9b:08:44:
         33:98:48:ab:c8:e4:4b:2c:25:ff:6b:54:e8:ad:37:f5:61:ec:
         5b:95:64:11:04:be:11:de:a4:98:ae:34:3b:12:33:5d:c6:cb:
         dc:f3:6b:82:f8:da:36:ff:11:a4:ba:fb:80:4e:3a:5b:c6:a6:
         2f:4f:4a:5c:64:f6:3e:47:a7:d9:98:a5:e4:c0:b0:ed:48:5f:
         ce:c8:a6:5d:1b:58:b2:2b:06:65:b3:f3:cb:0c:f3:83:6d:dd:
         7c:92:e6:d4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNwrlLswVGtSni25v7HrYhA7rMwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MzFaFw0yNzA1MjQwMTUxMzFaMDMxMTAvBgNV
BAMTKEY4MzE3QzM4OUI4OUE0NjAzMTY5OTEwMjlDMkFDODZFNUZDNzIxOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKDNfnn8kXryFW38SDjoAfUfpv
keLT/7H7Z6OObewd1DvFSd02dzF0e5MECTf1UZgIwEDhG5q9k3RodYXQHDPaLfx1
z91VL+520cTHW10CVfcX55mGEcTCKW8y39+IXXlly+m1zldN4MXUFQ0PVOZ1fg/W
CTFQ9X5H5adMlpkMG31X8FNYFoBQZTj8zwp5kdhJD/gvBM2IubmBjGWAF0vdK9Gx
xI9d7uTfANn3+rtYPPkn8E9baPNbSITv/WeaPeVfboOnacwzbP4hrCrFApw9lYWF
S6E6ZVmlallgK8/gq5Wy9KHMFdMIvv/xda3bKnVrcdblZ54JVDrW66bA9IMPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU+DF8OJuJpGAxaZECnCrIbl/HIYowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsDjANBgkqhkiG9w0BAQsFAAOCAQEAAGo0
em+vm1+ZmoOVTvp4HmkINdJlNai8Mq5A+HkWEtjpwOdrz5ZUqFlWkCHUFm5kld+/
r+Kuw1x+Pq+13E1yTA6YtcN2XL/NJmUI1kbVCljV/Uw4h1HGJO/p6BnGzq41kBbs
Gfg58RaQi8Llf5St/zmNhkrDfhyfPyXyrl+Ae6LRPdMgRnVBpT5XOBtFsLoZF1sc
R8dZK4qYNexfk9tTmwhEM5hIq8jkSywl/2tU6K039WHsW5VkEQS+Ed6kmK40OxIz
XcbL3PNrgvjaNv8RpLr7gE46W8amL09KXGT2Pken2Zil5MCw7UhfzsimXRtYsisG
ZbPzywzzg23dfJLm1A==
-----END CERTIFICATE-----