Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145953.roa
File:                     AS145953.roa (raw, json)
Hash identifier:          mwM84Y/z1n7bKE0CWVfHAVzoE7GY6WJRAnkwpQm5g5o=
Subject key identifier:   7E:9F:BD:29:CA:12:36:C6:6B:D2:CE:8D:BB:25:90:E5:E2:D7:DA:D9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       20A3D9595B59577423B1A7E3D1613159D92BE4D3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145953.roa
Signing time:             Tue 26 May 2026 01:12:58 +0000
ROA not before:           Tue 26 May 2026 01:07:58 +0000
ROA not after:            Tue 25 May 2027 01:12:58 +0000
asID:                     145953
IP address blocks:        240a:ace7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a3:d9:59:5b:59:57:74:23:b1:a7:e3:d1:61:31:59:d9:2b:e4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:07:58 2026 GMT
            Not After : May 25 01:12:58 2027 GMT
        Subject: CN=7E9FBD29CA1236C66BD2CE8DBB2590E5E2D7DAD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:94:fc:c8:3e:57:cc:f2:00:00:88:83:14:
                    4c:63:c7:99:de:96:65:55:6e:b9:9d:89:7d:c2:a3:
                    66:c8:7c:77:dc:0b:9c:d9:88:ef:f8:d0:05:45:dc:
                    3c:e9:8e:82:d2:bf:69:f5:e9:50:a7:42:2a:45:be:
                    07:7a:62:11:50:50:06:39:d4:6a:13:3c:60:30:a6:
                    dd:1c:f8:75:1d:65:82:81:99:1c:02:ad:50:65:41:
                    ac:36:8a:7a:1a:a0:91:bf:b2:d0:3c:1e:ed:02:fd:
                    47:30:79:65:b9:75:06:fc:93:25:d0:e3:0a:94:00:
                    b3:16:80:89:df:3a:ee:13:04:3b:12:44:41:e7:b0:
                    ec:f6:3c:8f:4f:d1:c5:10:b1:31:4e:ef:ae:01:76:
                    f9:ae:f0:21:78:da:7f:7f:6b:17:f6:43:6e:2b:cf:
                    fd:c0:4a:b2:6c:e4:4a:87:ba:5b:53:4a:e8:9c:b2:
                    a5:e3:0f:24:43:8e:5e:50:55:58:fa:0d:58:52:fa:
                    ac:35:c1:e3:04:ab:8e:16:cd:73:0d:96:70:34:ef:
                    c1:20:0d:5d:c9:54:92:31:cc:d7:aa:29:31:e5:98:
                    c5:18:72:5c:ef:59:5e:3d:0d:f3:ea:ac:9a:7c:de:
                    2d:8f:cf:be:fc:0a:17:cc:d9:20:70:61:19:95:a4:
                    a2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9F:BD:29:CA:12:36:C6:6B:D2:CE:8D:BB:25:90:E5:E2:D7:DA:D9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145953.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ace7::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:16:b2:37:6a:2c:b5:63:c9:1d:69:11:88:56:a2:6b:51:f1:
         7d:75:55:73:f6:94:15:6e:62:d5:a1:4b:73:d2:97:05:08:5a:
         ff:ef:12:2f:a4:15:13:7b:3e:fb:91:24:89:38:71:d0:3a:d9:
         8d:7f:dd:bf:a4:9d:dc:ce:0f:36:99:d8:64:07:35:be:85:57:
         40:95:c3:ee:36:26:c1:60:94:97:a8:44:92:cf:d4:d2:73:7e:
         91:dc:e8:cc:92:f4:40:0f:99:40:35:aa:75:54:8e:bb:00:20:
         fd:6b:86:17:39:b2:6f:0d:a9:13:b0:04:ba:2d:63:15:3b:dc:
         03:04:41:81:de:1d:bf:4a:57:7d:d2:cd:e3:b6:b2:fb:d1:67:
         6f:e7:1e:09:02:57:cd:98:4d:8f:af:b7:bb:9b:09:a2:95:fc:
         bd:2b:77:02:df:26:6d:aa:39:91:63:a2:89:30:ca:1d:5b:c6:
         b3:a7:a3:85:46:7f:ec:4c:16:b6:3d:b2:26:b5:1b:9f:ec:b6:
         db:09:01:7f:28:85:e3:e6:ed:58:83:70:35:90:9b:53:e5:0f:
         d8:4b:b8:65:1a:fd:5c:c4:47:b0:65:10:84:97:3a:78:7e:a8:
         db:58:25:29:c7:da:56:63:e2:b9:e1:ff:15:6d:a7:a5:f1:6a:
         45:20:62:b1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUIKPZWVtZV3Qjsafj0WExWdkr5NMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA3NThaFw0yNzA1MjUwMTEyNThaMDMxMTAvBgNV
BAMTKDdFOUZCRDI5Q0ExMjM2QzY2QkQyQ0U4REJCMjU5MEU1RTJEN0RBRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyV5T8yD5XzPIAAIiDFExjx5ne
lmVVbrmdiX3Co2bIfHfcC5zZiO/40AVF3DzpjoLSv2n16VCnQipFvgd6YhFQUAY5
1GoTPGAwpt0c+HUdZYKBmRwCrVBlQaw2inoaoJG/stA8Hu0C/UcweWW5dQb8kyXQ
4wqUALMWgInfOu4TBDsSREHnsOz2PI9P0cUQsTFO764Bdvmu8CF42n9/axf2Q24r
z/3ASrJs5EqHultTSuicsqXjDyRDjl5QVVj6DVhS+qw1weMEq44WzXMNlnA078Eg
DV3JVJIxzNeqKTHlmMUYclzvWV49DfPqrJp83i2Pz778ChfM2SBwYRmVpKIvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUfp+9KcoSNsZr0s6NuyWQ5eLX2tkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqs5zANBgkqhkiG9w0BAQsFAAOCAQEAlRay
N2ostWPJHWkRiFaia1HxfXVVc/aUFW5i1aFLc9KXBQha/+8SL6QVE3s++5EkiThx
0DrZjX/dv6Sd3M4PNpnYZAc1voVXQJXD7jYmwWCUl6hEks/U0nN+kdzozJL0QA+Z
QDWqdVSOuwAg/WuGFzmybw2pE7AEui1jFTvcAwRBgd4dv0pXfdLN47ay+9Fnb+ce
CQJXzZhNj6+3u5sJopX8vSt3At8mbao5kWOiiTDKHVvGs6ejhUZ/7EwWtj2yJrUb
n+y22wkBfyiF4+btWINwNZCbU+UP2Eu4ZRr9XMRHsGUQhJc6eH6o21glKcfaVmPi
ueH/FW2npfFqRSBisQ==
-----END CERTIFICATE-----