Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145006.roa
File:                     AS145006.roa (raw, json)
Hash identifier:          IvkWMRlsBbYiNh9PCPJrjdG8vB9QXDXKQPT78AjY4GU=
Subject key identifier:   FD:C3:99:3C:22:54:DD:CB:65:F8:A6:BF:B9:4A:3A:AD:20:10:02:E0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6154E43756CB68E186740AE6E2033707C2C385AF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145006.roa
Signing time:             Tue 26 May 2026 03:16:38 +0000
ROA not before:           Tue 26 May 2026 03:11:38 +0000
ROA not after:            Tue 25 May 2027 03:16:38 +0000
asID:                     145006
IP address blocks:        240a:a934::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:54:e4:37:56:cb:68:e1:86:74:0a:e6:e2:03:37:07:c2:c3:85:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:38 2026 GMT
            Not After : May 25 03:16:38 2027 GMT
        Subject: CN=FDC3993C2254DDCB65F8A6BFB94A3AAD201002E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:08:9e:7c:88:18:18:aa:b6:8f:a3:57:9c:
                    e3:d2:6c:ba:67:f9:f8:7b:c0:0e:42:b6:2e:cf:14:
                    57:db:6d:c3:53:ab:af:0b:3a:fd:6c:ae:25:60:28:
                    65:95:11:c3:12:ab:e7:00:a9:f5:dd:4e:d9:6b:67:
                    8c:04:49:1c:9f:f7:17:51:4d:ec:f7:c3:c9:25:d6:
                    80:aa:19:75:5e:e0:13:57:4f:be:ee:fe:39:c3:1a:
                    a7:2d:bb:ff:77:7f:ac:8f:61:c1:e2:f3:37:51:33:
                    51:d4:f0:a8:84:f2:f4:86:21:0e:b0:1b:97:a9:60:
                    80:ff:07:39:c9:16:30:a7:b4:26:25:1b:34:b2:bf:
                    49:ef:9d:1e:83:f9:52:cb:39:f2:f4:e7:00:ac:e8:
                    e5:31:6d:04:94:50:1c:3b:3b:1d:08:99:61:1e:52:
                    c0:59:77:d0:b6:a2:34:0f:d1:95:28:49:32:61:a4:
                    cd:e0:69:b3:0d:a6:04:6a:19:b9:ae:81:21:a6:c8:
                    30:f7:74:6d:5d:79:bb:9c:4a:c0:ab:5a:9e:25:0b:
                    67:07:34:84:d5:25:b4:ea:d7:8b:9a:82:60:1b:84:
                    19:d0:f5:ee:a5:61:24:e7:0f:6d:c0:53:a5:87:2e:
                    cc:95:bd:42:70:16:15:41:60:f8:a7:2b:f9:7b:e0:
                    cd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C3:99:3C:22:54:DD:CB:65:F8:A6:BF:B9:4A:3A:AD:20:10:02:E0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145006.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a934::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:77:f9:d8:00:6b:eb:24:84:70:dc:53:cf:2d:24:78:b7:11:
         01:7d:b5:9b:74:75:a5:bd:bb:d8:1f:bb:d3:a1:ec:7f:8f:3b:
         e9:e8:c9:19:d0:e4:be:8e:57:65:61:40:72:1d:9e:e0:fe:10:
         82:79:67:f6:7a:f5:9c:70:54:37:d0:90:1c:5a:80:d4:90:30:
         1b:0f:b8:e5:6c:b6:b0:aa:93:b8:be:cd:10:76:fa:24:d5:8d:
         55:74:27:df:4c:e8:c9:f9:c6:ca:55:03:14:1e:e4:f7:cb:b7:
         26:e1:5a:c7:2e:d7:03:9c:a0:25:8f:05:bc:4f:20:82:1a:70:
         bc:5f:62:17:1c:01:3c:a8:32:8f:82:9f:9a:43:96:b8:b0:4b:
         65:a6:54:cc:0e:f6:b1:1a:a5:f5:b2:3b:80:4b:67:68:65:e3:
         54:ee:a5:e9:f3:b1:10:6a:2c:b2:41:d5:75:0e:a0:72:21:74:
         42:21:9c:20:f3:5a:af:38:83:f3:f8:e6:8d:ac:74:e0:26:6a:
         ec:cb:b3:ae:e5:4b:5c:8d:d3:74:0c:29:29:03:f6:c0:3e:25:
         84:c6:ea:96:18:74:47:ce:53:2b:f6:bb:49:0e:2a:64:9c:fd:
         f6:39:43:4d:c8:43:db:47:fc:ab:57:b4:3f:26:2c:e9:33:11:
         7b:ff:7c:67
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYVTkN1bLaOGGdArm4gM3B8LDha8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExMzhaFw0yNzA1MjUwMzE2MzhaMDMxMTAvBgNV
BAMTKEZEQzM5OTNDMjI1NEREQ0I2NUY4QTZCRkI5NEEzQUFEMjAxMDAyRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxEAiefIgYGKq2j6NXnOPSbLpn
+fh7wA5Cti7PFFfbbcNTq68LOv1sriVgKGWVEcMSq+cAqfXdTtlrZ4wESRyf9xdR
Tez3w8kl1oCqGXVe4BNXT77u/jnDGqctu/93f6yPYcHi8zdRM1HU8KiE8vSGIQ6w
G5epYID/BznJFjCntCYlGzSyv0nvnR6D+VLLOfL05wCs6OUxbQSUUBw7Ox0ImWEe
UsBZd9C2ojQP0ZUoSTJhpM3gabMNpgRqGbmugSGmyDD3dG1debucSsCrWp4lC2cH
NITVJbTq14uagmAbhBnQ9e6lYSTnD23AU6WHLsyVvUJwFhVBYPinK/l74M01AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/cOZPCJU3ctl+Ka/uUo6rSAQAuAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDA2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpNDANBgkqhkiG9w0BAQsFAAOCAQEAmHf5
2ABr6ySEcNxTzy0keLcRAX21m3R1pb272B+706Hsf4876ejJGdDkvo5XZWFAch2e
4P4Qgnln9nr1nHBUN9CQHFqA1JAwGw+45Wy2sKqTuL7NEHb6JNWNVXQn30zoyfnG
ylUDFB7k98u3JuFaxy7XA5ygJY8FvE8gghpwvF9iFxwBPKgyj4KfmkOWuLBLZaZU
zA72sRql9bI7gEtnaGXjVO6l6fOxEGosskHVdQ6gciF0QiGcIPNarziD8/jmjax0
4CZq7MuzruVLXI3TdAwpKQP2wD4lhMbqlhh0R85TK/a7SQ4qZJz99jlDTchD20f8
q1e0PyYs6TMRe/98Zw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:26 2026 by rpki-client