Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145058.roa
File:                     AS145058.roa (raw, json)
Hash identifier:          qr8K2aEC9d0rnOrzWkwC/yAni8FXEUAKa4Q+XDRJNFo=
Subject key identifier:   15:99:5E:54:7D:A7:8C:6C:C2:FF:58:6F:87:FB:F8:90:AE:4F:F4:80
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       02D2E48EB871368B875F23DF0DF5115FF86B587B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145058.roa
Signing time:             Tue 26 May 2026 02:35:03 +0000
ROA not before:           Tue 26 May 2026 02:30:03 +0000
ROA not after:            Tue 25 May 2027 02:35:03 +0000
asID:                     145058
IP address blocks:        240a:a968::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d2:e4:8e:b8:71:36:8b:87:5f:23:df:0d:f5:11:5f:f8:6b:58:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:03 2026 GMT
            Not After : May 25 02:35:03 2027 GMT
        Subject: CN=15995E547DA78C6CC2FF586F87FBF890AE4FF480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:48:97:54:2a:87:49:85:ac:d5:53:eb:e0:
                    4b:c1:a8:d5:b9:e1:bf:13:91:fb:ff:49:ad:7f:3b:
                    6a:df:ec:92:be:6c:75:e5:89:7d:08:c5:6c:39:11:
                    bd:eb:35:c8:29:8d:9c:74:c0:5c:4c:bd:05:88:54:
                    84:c0:c1:a5:cf:7c:5f:9e:57:b9:83:d7:ec:cb:b2:
                    78:5a:9e:28:58:44:d1:63:de:3d:92:bc:39:00:76:
                    36:91:21:a9:8d:cf:ee:88:54:8c:05:a7:1a:3a:bf:
                    38:b5:a3:0f:5d:b3:72:0e:12:74:78:1f:5b:7f:93:
                    f8:b9:a6:cb:01:3b:59:67:df:d8:e8:05:9b:03:45:
                    fb:69:bf:93:49:d9:3d:ee:1c:a6:9f:45:d3:e8:bc:
                    52:47:5c:c2:37:fb:ca:2b:41:72:39:e6:16:b6:c7:
                    2d:02:7a:bd:5f:42:12:9b:c5:af:eb:30:7a:09:fe:
                    64:6d:59:d5:13:48:c4:cd:43:0d:f7:0e:5f:9c:85:
                    c7:1a:04:43:00:ef:2d:c4:a8:93:1e:6f:5a:b0:55:
                    9d:09:94:a3:55:2f:e9:ef:ba:83:a0:dc:60:ce:92:
                    99:59:68:5c:5a:ed:f8:33:8c:04:aa:65:c1:dd:a1:
                    94:3a:a9:4e:01:c1:e4:ce:3d:3c:75:a0:b2:01:74:
                    e2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:99:5E:54:7D:A7:8C:6C:C2:FF:58:6F:87:FB:F8:90:AE:4F:F4:80
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a968::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:f1:ae:f9:b1:98:12:98:4b:5e:ff:ef:b6:f9:01:f0:20:b8:
         b1:a4:b6:a2:09:1c:b3:0a:4e:c3:83:42:a1:7c:e8:aa:84:a5:
         23:6d:d0:86:6f:72:c9:3b:40:96:fb:d3:71:8c:90:7a:3d:18:
         e3:d4:f1:ad:48:da:f3:c0:19:47:db:17:9a:73:90:56:de:82:
         57:d2:08:6f:6b:9e:5b:b7:2c:32:af:cb:53:fe:95:4a:0f:96:
         74:41:c6:6d:8d:b0:91:2f:5e:5d:5b:1c:9f:96:83:dc:1f:21:
         6b:20:e8:8e:bd:12:42:f6:91:fc:50:9d:f1:75:da:78:71:fc:
         1d:58:d8:fb:31:88:11:b0:03:7b:82:18:74:67:26:63:89:8d:
         f4:f7:03:26:ae:7d:d5:10:87:f7:24:47:4e:62:6a:77:bc:12:
         f7:27:4c:5f:94:01:a8:45:93:56:01:0c:be:61:a3:c4:59:1d:
         f1:7c:ea:e1:b3:25:38:50:31:c9:c6:16:45:46:ed:ef:3f:f4:
         b3:61:90:30:5d:72:ee:80:98:32:d3:67:c2:17:b7:d1:5a:b6:
         77:0a:23:2f:f5:89:ee:7a:d3:a6:13:3e:81:65:c8:cc:d4:31:
         39:83:1e:f7:4c:1b:b6:e5:a4:a2:a2:a2:11:f7:55:b2:fe:11:
         ee:b3:7c:15
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAtLkjrhxNouHXyPfDfURX/hrWHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMDNaFw0yNzA1MjUwMjM1MDNaMDMxMTAvBgNV
BAMTKDE1OTk1RTU0N0RBNzhDNkNDMkZGNTg2Rjg3RkJGODkwQUU0RkY0ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdEiXVCqHSYWs1VPr4EvBqNW5
4b8Tkfv/Sa1/O2rf7JK+bHXliX0IxWw5Eb3rNcgpjZx0wFxMvQWIVITAwaXPfF+e
V7mD1+zLsnhanihYRNFj3j2SvDkAdjaRIamNz+6IVIwFpxo6vzi1ow9ds3IOEnR4
H1t/k/i5pssBO1ln39joBZsDRftpv5NJ2T3uHKafRdPovFJHXMI3+8orQXI55ha2
xy0Cer1fQhKbxa/rMHoJ/mRtWdUTSMTNQw33Dl+chccaBEMA7y3EqJMeb1qwVZ0J
lKNVL+nvuoOg3GDOkplZaFxa7fgzjASqZcHdoZQ6qU4BweTOPTx1oLIBdOJbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUFZleVH2njGzC/1hvh/v4kK5P9IAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpaDANBgkqhkiG9w0BAQsFAAOCAQEAJfGu
+bGYEphLXv/vtvkB8CC4saS2ogkcswpOw4NCoXzoqoSlI23Qhm9yyTtAlvvTcYyQ
ej0Y49TxrUja88AZR9sXmnOQVt6CV9IIb2ueW7csMq/LU/6VSg+WdEHGbY2wkS9e
XVscn5aD3B8hayDojr0SQvaR/FCd8XXaeHH8HVjY+zGIEbADe4IYdGcmY4mN9PcD
Jq591RCH9yRHTmJqd7wS9ydMX5QBqEWTVgEMvmGjxFkd8Xzq4bMlOFAxycYWRUbt
7z/0s2GQMF1y7oCYMtNnwhe30Vq2dwojL/WJ7nrTphM+gWXIzNQxOYMe90wbtuWk
oqKiEfdVsv4R7rN8FQ==
-----END CERTIFICATE-----