Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145915.roa
File:                     AS145915.roa (raw, json)
Hash identifier:          jen4WAYTnaRuBbvdnh4vfYGfDoCKvizd+YGqGadL3Wo=
Subject key identifier:   20:07:E2:9B:D1:C2:7A:53:92:28:FB:A5:50:58:C0:58:07:03:2C:04
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       24F9742A4555EBC75019D0DCD4096914C46C9847
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145915.roa
Signing time:             Tue 26 May 2026 06:30:42 +0000
ROA not before:           Tue 26 May 2026 06:25:42 +0000
ROA not after:            Tue 25 May 2027 06:30:42 +0000
asID:                     145915
IP address blocks:        240a:acc1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f9:74:2a:45:55:eb:c7:50:19:d0:dc:d4:09:69:14:c4:6c:98:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:42 2026 GMT
            Not After : May 25 06:30:42 2027 GMT
        Subject: CN=2007E29BD1C27A539228FBA55058C05807032C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:4e:6f:f8:51:77:e6:3f:17:b5:49:b5:59:
                    b8:de:43:cf:66:62:9f:2f:32:92:f4:3b:02:39:ae:
                    9d:af:ed:70:4a:0b:e2:c0:d1:76:1a:98:07:36:52:
                    d3:b8:60:8b:74:96:20:d6:2e:16:cf:04:fd:30:33:
                    38:cb:b5:01:c4:17:8d:a3:9c:da:f1:f7:02:06:6c:
                    82:ad:40:10:6f:54:eb:3f:13:8b:ff:af:82:32:41:
                    58:55:fc:73:8c:f1:ae:c2:73:a1:79:83:5f:8c:38:
                    c4:f3:a5:82:24:99:c5:e0:b6:32:bf:7a:c2:33:13:
                    9f:aa:cf:b2:92:27:20:db:74:99:65:2a:e3:41:93:
                    a0:6a:d9:fa:d5:6a:be:02:d0:94:dc:23:22:4f:87:
                    b2:42:28:7c:8f:aa:eb:34:20:1e:79:ac:2d:e1:96:
                    46:d9:97:64:86:22:94:36:c3:af:8c:46:4d:5a:fd:
                    5f:78:6d:24:0e:f4:d6:4a:d5:93:53:ca:4f:59:27:
                    6c:e8:a5:0a:64:a5:32:b6:3f:1c:2d:5c:9a:15:ca:
                    1e:77:56:57:36:fe:f8:84:35:8e:1f:df:95:51:f6:
                    c1:2f:28:6b:0c:8a:c8:ad:4f:c6:20:55:57:d6:f2:
                    35:c3:b8:1a:c6:5e:8c:01:ee:1d:ac:89:66:4f:09:
                    09:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:07:E2:9B:D1:C2:7A:53:92:28:FB:A5:50:58:C0:58:07:03:2C:04
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145915.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acc1::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:36:c5:ce:16:46:50:53:23:21:20:c6:20:9c:e3:5a:13:3b:
         1f:7e:37:40:ce:5c:c1:b3:26:f3:71:7d:44:ab:c8:e9:8d:97:
         fc:90:cb:b3:ae:2b:65:fe:c0:bd:94:f0:d0:28:41:56:49:e5:
         69:ac:c2:f1:89:ab:0d:2b:5d:9c:5e:f5:40:b5:ca:96:1a:e4:
         92:65:fa:8e:dd:3f:79:18:ad:4c:73:65:ee:e1:45:ba:37:12:
         25:28:73:66:e8:22:76:2d:7f:79:28:e3:d4:dd:54:fe:41:5f:
         16:9b:90:5d:ab:4f:1e:f4:04:4f:4b:9f:d0:2c:99:ed:77:11:
         de:b6:fa:ec:db:c6:c4:5f:d4:a2:e4:c7:16:f3:de:80:a5:8d:
         1f:ab:28:90:91:b6:c2:70:1e:b9:26:c4:27:31:86:47:f0:3b:
         ef:e5:ba:27:db:5e:b6:8b:59:54:e3:de:36:76:49:1f:90:6b:
         ab:f8:1b:89:44:41:d7:e3:5b:ea:51:a8:f8:3e:a0:5d:23:2b:
         fe:01:da:ca:fe:72:96:00:b5:8f:ca:80:b7:96:85:1e:b7:fa:
         11:04:25:8c:60:81:fe:ad:c3:ac:fd:93:e3:7d:c8:9b:f6:49:
         13:97:ef:ba:5b:95:54:15:8d:f8:6e:a0:1e:c9:d7:3e:69:2c:
         ca:08:e5:cd
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJPl0KkVV68dQGdDc1AlpFMRsmEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NDJaFw0yNzA1MjUwNjMwNDJaMDMxMTAvBgNV
BAMTKDIwMDdFMjlCRDFDMjdBNTM5MjI4RkJBNTUwNThDMDU4MDcwMzJDMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrMU5v+FF35j8XtUm1WbjeQ89m
Yp8vMpL0OwI5rp2v7XBKC+LA0XYamAc2UtO4YIt0liDWLhbPBP0wMzjLtQHEF42j
nNrx9wIGbIKtQBBvVOs/E4v/r4IyQVhV/HOM8a7Cc6F5g1+MOMTzpYIkmcXgtjK/
esIzE5+qz7KSJyDbdJllKuNBk6Bq2frVar4C0JTcIyJPh7JCKHyPqus0IB55rC3h
lkbZl2SGIpQ2w6+MRk1a/V94bSQO9NZK1ZNTyk9ZJ2zopQpkpTK2PxwtXJoVyh53
Vlc2/viENY4f35VR9sEvKGsMisitT8YgVVfW8jXDuBrGXowB7h2siWZPCQlNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUIAfim9HCelOSKPulUFjAWAcDLAQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqswTANBgkqhkiG9w0BAQsFAAOCAQEANTbF
zhZGUFMjISDGIJzjWhM7H343QM5cwbMm83F9RKvI6Y2X/JDLs64rZf7AvZTw0ChB
VknlaazC8YmrDStdnF71QLXKlhrkkmX6jt0/eRitTHNl7uFFujcSJShzZugidi1/
eSjj1N1U/kFfFpuQXatPHvQET0uf0CyZ7XcR3rb67NvGxF/UouTHFvPegKWNH6so
kJG2wnAeuSbEJzGGR/A77+W6J9tetotZVOPeNnZJH5Brq/gbiURB1+Nb6lGo+D6g
XSMr/gHayv5ylgC1j8qAt5aFHrf6EQQljGCB/q3DrP2T433Im/ZJE5fvuluVVBWN
+G6gHsnXPmksygjlzQ==
-----END CERTIFICATE-----