Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145794.roa
File:                     AS145794.roa (raw, json)
Hash identifier:          m/rqX9ZwQwG0HNfS8k+4SXx+INupSslaZL/Fg6S3rvY=
Subject key identifier:   A3:8C:09:04:37:1A:E5:38:AA:8C:8A:BE:11:A0:F4:F0:B3:2E:03:72
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       75352CD6AEF530A533D4980BAFC662AB1697BAC2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145794.roa
Signing time:             Fri 22 May 2026 07:08:43 +0000
ROA not before:           Fri 22 May 2026 07:03:43 +0000
ROA not after:            Fri 21 May 2027 07:08:43 +0000
asID:                     145794
IP address blocks:        240a:ac48::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:35:2c:d6:ae:f5:30:a5:33:d4:98:0b:af:c6:62:ab:16:97:ba:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:43 2026 GMT
            Not After : May 21 07:08:43 2027 GMT
        Subject: CN=A38C0904371AE538AA8C8ABE11A0F4F0B32E0372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:e4:d2:64:dd:ed:aa:aa:0f:9b:86:6b:d1:
                    47:dc:a5:f9:3c:bc:ad:25:a0:83:e8:89:66:2d:98:
                    a9:e9:b3:c2:df:cf:65:4c:10:11:dc:a3:df:93:98:
                    70:ae:32:b1:74:42:c9:1a:20:90:07:51:2e:51:0a:
                    f9:a3:65:4b:1b:e3:b4:92:5a:3e:a6:66:6d:41:5c:
                    1d:db:16:c6:c5:be:f6:b2:fb:7a:e7:de:39:00:7e:
                    b0:bb:d9:8d:c3:0c:68:23:ef:47:d2:f6:cf:38:0b:
                    e7:da:db:20:4d:4e:a6:fb:02:a8:60:0c:a0:04:d6:
                    91:d3:6a:9a:67:7f:fd:eb:2e:be:22:e2:9c:f5:fc:
                    c5:36:a3:64:1d:71:c0:ea:f0:f0:43:0e:f5:6e:a3:
                    cc:00:ef:2e:d2:0b:2e:83:f0:4b:6c:37:8c:c9:04:
                    b2:4b:f0:8d:56:52:c9:fa:0a:ca:82:cd:71:07:20:
                    fa:dd:85:74:bf:20:31:e1:21:e7:60:46:f2:58:7a:
                    20:42:90:eb:83:4f:a2:a3:8d:39:1b:95:27:10:ca:
                    cb:d0:59:c5:54:ac:c7:78:aa:03:5c:7b:e1:ad:9b:
                    3a:16:3e:c2:f7:62:b6:f2:f5:be:a2:6a:46:d1:b7:
                    a6:ce:c2:96:da:65:db:9d:10:0d:75:e2:fa:15:3c:
                    34:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8C:09:04:37:1A:E5:38:AA:8C:8A:BE:11:A0:F4:F0:B3:2E:03:72
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145794.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac48::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:19:a7:ee:5c:69:cf:42:c0:17:91:0a:2a:c3:72:3b:a5:7e:
         8b:a0:a7:5f:97:9e:0a:f6:4f:44:ee:ee:1f:b2:ae:4e:db:3a:
         85:26:90:b3:ea:40:40:e5:dd:1e:8e:97:60:31:db:e6:2d:6f:
         91:9b:18:ee:47:d8:2e:d8:07:45:e0:42:95:19:08:c2:32:e1:
         e4:29:88:a7:7a:c3:2f:33:a2:b1:83:9f:95:c2:c8:e9:32:1d:
         3a:b9:5c:f3:3f:67:ca:25:83:8d:26:1a:7e:25:4f:10:8e:7c:
         76:01:82:b4:d1:b9:c6:31:4b:63:6b:0e:be:5e:79:5c:01:18:
         54:dd:a9:df:4f:c4:e4:56:fd:63:28:17:d1:72:3b:76:43:f5:
         3b:70:35:cf:6d:b7:d7:38:ea:6b:8b:5f:d1:c5:b0:1f:1e:c3:
         19:54:59:6a:3a:3c:b5:78:fe:ed:03:81:b4:e9:5a:22:a1:6b:
         e2:24:42:ac:ea:9e:a5:67:2c:66:b5:cb:1b:1a:be:a3:ee:c1:
         5a:d8:f6:a6:4f:f8:0e:79:f3:34:63:33:be:a6:85:71:99:04:
         66:1b:d1:9a:44:d2:c6:e8:54:bd:fa:ac:fd:c3:ea:e7:54:9e:
         57:a1:8a:8d:7e:6b:ca:fc:1d:e8:fc:7e:b5:bb:d3:33:e0:a4:
         23:e4:6c:0f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdTUs1q71MKUz1JgLr8ZiqxaXusIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNDNaFw0yNzA1MjEwNzA4NDNaMDMxMTAvBgNV
BAMTKEEzOEMwOTA0MzcxQUU1MzhBQThDOEFCRTExQTBGNEYwQjMyRTAzNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf1uTSZN3tqqoPm4Zr0Ufcpfk8
vK0loIPoiWYtmKnps8Lfz2VMEBHco9+TmHCuMrF0QskaIJAHUS5RCvmjZUsb47SS
Wj6mZm1BXB3bFsbFvvay+3rn3jkAfrC72Y3DDGgj70fS9s84C+fa2yBNTqb7Aqhg
DKAE1pHTappnf/3rLr4i4pz1/MU2o2QdccDq8PBDDvVuo8wA7y7SCy6D8EtsN4zJ
BLJL8I1WUsn6CsqCzXEHIPrdhXS/IDHhIedgRvJYeiBCkOuDT6KjjTkblScQysvQ
WcVUrMd4qgNce+GtmzoWPsL3Yrby9b6iakbRt6bOwpbaZdudEA114voVPDQfAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUo4wJBDca5TiqjIq+EaD08LMuA3IwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1Nzk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsSDANBgkqhkiG9w0BAQsFAAOCAQEAZhmn
7lxpz0LAF5EKKsNyO6V+i6CnX5eeCvZPRO7uH7KuTts6hSaQs+pAQOXdHo6XYDHb
5i1vkZsY7kfYLtgHReBClRkIwjLh5CmIp3rDLzOisYOflcLI6TIdOrlc8z9nyiWD
jSYafiVPEI58dgGCtNG5xjFLY2sOvl55XAEYVN2p30/E5Fb9YygX0XI7dkP1O3A1
z2231zjqa4tf0cWwHx7DGVRZajo8tXj+7QOBtOlaIqFr4iRCrOqepWcsZrXLGxq+
o+7BWtj2pk/4DnnzNGMzvqaFcZkEZhvRmkTSxuhUvfqs/cPq51SeV6GKjX5ryvwd
6Px+tbvTM+CkI+RsDw==
-----END CERTIFICATE-----