Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145903.roa
File:                     AS145903.roa (raw, json)
Hash identifier:          2MEe/LQ9C9GdAtcpNqbspSN3YZoozHwC0AsvRjMEpRo=
Subject key identifier:   96:AA:88:FA:D7:72:2E:49:0C:EE:BB:BE:50:7D:C6:8C:5D:94:05:71
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       758B907C4263DF61B11D42AFF6A6CE0638E41993
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145903.roa
Signing time:             Fri 22 May 2026 04:27:18 +0000
ROA not before:           Fri 22 May 2026 04:22:18 +0000
ROA not after:            Fri 21 May 2027 04:27:18 +0000
asID:                     145903
IP address blocks:        240a:acb5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8b:90:7c:42:63:df:61:b1:1d:42:af:f6:a6:ce:06:38:e4:19:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:18 2026 GMT
            Not After : May 21 04:27:18 2027 GMT
        Subject: CN=96AA88FAD7722E490CEEBBBE507DC68C5D940571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:89:58:ff:52:ca:ab:5f:22:ad:43:2f:99:
                    57:83:79:77:35:be:1b:db:a9:de:02:5c:0b:b8:47:
                    f0:2f:84:2a:4b:e4:ea:1b:56:93:83:fe:83:26:ca:
                    c0:30:ca:e1:58:12:c1:e5:79:99:1f:69:ab:e7:ce:
                    34:52:78:a9:f9:d2:48:31:bd:7f:ce:c2:0f:dc:43:
                    b7:12:09:04:b8:f9:a0:44:10:bb:09:99:02:8a:e3:
                    92:0d:eb:ce:6e:91:72:fc:f2:99:5f:3b:51:c7:87:
                    22:13:0a:be:05:6a:a5:5a:5f:e8:a5:5a:47:94:fe:
                    30:b1:be:df:87:c9:5c:36:cf:c9:e6:93:62:11:50:
                    35:73:1f:35:40:27:de:7a:01:62:c5:dd:cc:97:bd:
                    b8:19:72:f4:da:79:03:ea:f1:df:9d:58:68:03:4b:
                    3a:41:2e:27:01:89:15:7b:f5:52:f8:6a:45:0d:51:
                    31:2c:1f:76:de:1f:1a:86:1d:90:db:8c:53:d4:5a:
                    5f:2d:ea:a9:45:78:b4:6c:b5:28:32:9c:ba:42:7e:
                    c5:98:40:41:af:37:df:70:1f:fc:61:fe:1f:1f:a3:
                    56:fb:15:2c:88:1f:15:1c:1c:a3:1d:a1:29:1e:54:
                    55:5a:17:c1:0f:f6:82:22:66:31:2b:81:93:af:d2:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AA:88:FA:D7:72:2E:49:0C:EE:BB:BE:50:7D:C6:8C:5D:94:05:71
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145903.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acb5::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:23:9c:25:e3:f1:d2:82:0e:28:ab:0f:e9:b5:15:64:b0:4a:
         98:32:e1:44:c6:5d:14:f2:b0:67:5e:41:64:a1:01:43:03:1b:
         e1:8c:8d:dc:9b:9d:c0:81:8c:44:c9:06:06:e4:55:64:ec:4d:
         cb:ec:15:55:35:a0:94:d8:ad:ac:38:58:30:15:d9:7e:b8:e5:
         62:97:b7:e8:36:f6:bd:ff:e2:6a:e5:a2:17:15:54:e3:cb:ec:
         c3:9e:f4:01:94:ec:24:bf:f9:69:e3:ec:df:97:8e:32:8f:e4:
         90:6a:d1:61:81:bc:c0:78:84:09:c3:15:52:ee:d9:c3:43:ec:
         6a:0a:26:f5:15:69:5f:6b:6e:5d:a3:f0:9c:dd:7c:83:7b:8b:
         9d:96:20:f8:1d:a8:be:96:0b:32:d4:cd:8a:be:3d:93:dc:7f:
         a7:74:46:86:c2:ba:25:35:10:62:46:ba:0e:2e:0f:3c:48:80:
         c4:37:a4:97:19:1a:19:5e:b3:c8:28:8b:a4:ff:90:b5:4d:84:
         e3:3f:1a:f6:33:80:ed:70:08:9e:1b:be:58:cb:f8:6f:3a:94:
         4f:ba:7b:7c:b8:79:33:d3:3b:fa:46:0f:98:ac:74:53:c7:33:
         66:66:1d:c7:15:16:c4:a3:13:52:1c:a8:72:18:94:d2:3a:31:
         12:63:3d:ca
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdYuQfEJj32GxHUKv9qbOBjjkGZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMThaFw0yNzA1MjEwNDI3MThaMDMxMTAvBgNV
BAMTKDk2QUE4OEZBRDc3MjJFNDkwQ0VFQkJCRTUwN0RDNjhDNUQ5NDA1NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTw4lY/1LKq18irUMvmVeDeXc1
vhvbqd4CXAu4R/AvhCpL5OobVpOD/oMmysAwyuFYEsHleZkfaavnzjRSeKn50kgx
vX/Owg/cQ7cSCQS4+aBEELsJmQKK45IN685ukXL88plfO1HHhyITCr4FaqVaX+il
WkeU/jCxvt+HyVw2z8nmk2IRUDVzHzVAJ956AWLF3cyXvbgZcvTaeQPq8d+dWGgD
SzpBLicBiRV79VL4akUNUTEsH3beHxqGHZDbjFPUWl8t6qlFeLRstSgynLpCfsWY
QEGvN99wH/xh/h8fo1b7FSyIHxUcHKMdoSkeVFVaF8EP9oIiZjErgZOv0silAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUlqqI+tdyLkkM7ru+UH3GjF2UBXEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTAzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqstTANBgkqhkiG9w0BAQsFAAOCAQEAOCOc
JePx0oIOKKsP6bUVZLBKmDLhRMZdFPKwZ15BZKEBQwMb4YyN3JudwIGMRMkGBuRV
ZOxNy+wVVTWglNitrDhYMBXZfrjlYpe36Db2vf/iauWiFxVU48vsw570AZTsJL/5
aePs35eOMo/kkGrRYYG8wHiECcMVUu7Zw0Psagom9RVpX2tuXaPwnN18g3uLnZYg
+B2ovpYLMtTNir49k9x/p3RGhsK6JTUQYka6Di4PPEiAxDeklxkaGV6zyCiLpP+Q
tU2E4z8a9jOA7XAInhu+WMv4bzqUT7p7fLh5M9M7+kYPmKx0U8czZmYdxxUWxKMT
UhyochiU0joxEmM9yg==
-----END CERTIFICATE-----