Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145105.roa
File:                     AS145105.roa (raw, json)
Hash identifier:          iLYK2302fQuyF7ce5XFVa4yaWHLHT65hSFkCgnBwWS4=
Subject key identifier:   8F:5B:5E:D7:ED:DD:0B:FD:DC:2F:06:D9:C4:5D:34:55:0C:3D:31:DF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       47366B3E015ACDE1EBE0F200077C24CB5017CF33
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145105.roa
Signing time:             Tue 26 May 2026 08:52:53 +0000
ROA not before:           Tue 26 May 2026 08:47:53 +0000
ROA not after:            Tue 25 May 2027 08:52:53 +0000
asID:                     145105
IP address blocks:        240a:a997::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:36:6b:3e:01:5a:cd:e1:eb:e0:f2:00:07:7c:24:cb:50:17:cf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:53 2026 GMT
            Not After : May 25 08:52:53 2027 GMT
        Subject: CN=8F5B5ED7EDDD0BFDDC2F06D9C45D34550C3D31DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:cb:18:31:7e:97:8f:b7:d1:5e:ff:27:93:
                    95:95:51:97:42:6d:00:c9:b4:7c:06:8d:09:83:6e:
                    cc:84:86:10:29:a0:47:02:a2:92:80:f2:5a:2d:f5:
                    19:5d:17:30:8b:85:55:83:d4:35:b5:fb:ce:cb:a2:
                    7a:21:95:f5:9d:61:b4:50:8b:a2:63:e4:57:00:7a:
                    26:d2:e7:5b:18:66:4a:d6:d6:89:26:bf:e7:78:b4:
                    29:a1:31:23:28:68:76:e5:2c:09:ca:2a:c4:09:6e:
                    dd:15:91:4e:d0:76:63:99:0a:f9:9c:bd:4b:dc:7c:
                    c4:33:dc:0c:fb:d4:71:ab:6d:16:24:b7:09:05:2c:
                    b4:7a:94:9c:ff:69:97:c4:b3:ee:ea:21:9c:eb:7e:
                    2b:98:2e:cb:1e:0b:5c:63:a1:63:95:20:97:82:7a:
                    dd:71:97:cd:87:29:7a:4f:8a:ec:53:cd:1c:f8:3f:
                    82:91:5a:8b:0a:44:db:c9:d2:68:d5:ed:49:04:15:
                    30:01:00:4a:4f:d6:8b:9a:6d:ad:82:23:94:11:7e:
                    95:c3:a4:3d:06:0f:dd:31:69:74:13:a1:80:81:dd:
                    4b:fa:73:51:73:89:ed:a8:b3:99:bb:21:fc:35:31:
                    a3:41:08:b5:0b:42:69:91:91:4b:2e:fa:5f:fa:23:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5B:5E:D7:ED:DD:0B:FD:DC:2F:06:D9:C4:5D:34:55:0C:3D:31:DF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145105.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a997::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:54:e2:27:a4:be:13:ea:98:81:27:98:0d:58:6f:11:49:52:
         83:7f:54:9f:60:31:dd:21:a5:1b:45:1e:dd:93:25:df:e4:33:
         90:bb:8b:ae:a3:4d:22:20:72:61:7e:5d:bc:97:95:b9:6b:9d:
         31:4d:4c:86:9e:75:e7:e0:06:e7:85:63:0d:92:f5:24:76:e1:
         66:be:ca:da:89:39:73:ad:9e:ba:02:b1:0e:0f:12:a0:f7:df:
         60:ba:44:3b:f5:bb:2b:7d:2c:ac:ba:18:db:27:26:cb:89:ca:
         6c:d1:18:bd:b6:40:08:a7:18:70:c4:f2:91:05:2c:ae:31:73:
         e8:bf:db:07:5d:ee:f3:65:cd:b7:4a:d4:c0:6e:a8:5e:5d:fb:
         ea:24:b4:b8:7f:05:d0:c8:0c:f9:a6:3d:50:27:9a:ea:f8:d9:
         ba:13:31:14:d9:19:18:a0:51:c1:f9:38:4d:72:50:62:15:4c:
         19:88:33:e5:33:71:70:0a:1b:f7:ba:ac:e3:2b:35:9d:1d:34:
         36:37:ab:de:9b:3e:e7:6e:f8:21:5c:cc:3b:fa:b1:96:19:d5:
         a2:c3:27:ea:3c:05:02:88:a7:ce:9c:6b:ab:7c:d4:67:15:b7:
         9e:5f:f1:06:46:af:f0:c3:a4:a6:2b:78:f9:50:8f:96:db:e5:
         ed:a5:e1:10
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURzZrPgFazeHr4PIAB3wky1AXzzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwODQ3NTNaFw0yNzA1MjUwODUyNTNaMDMxMTAvBgNV
BAMTKDhGNUI1RUQ3RURERDBCRkREQzJGMDZEOUM0NUQzNDU1MEMzRDMxREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwAcsYMX6Xj7fRXv8nk5WVUZdC
bQDJtHwGjQmDbsyEhhApoEcCopKA8lot9RldFzCLhVWD1DW1+87LonohlfWdYbRQ
i6Jj5FcAeibS51sYZkrW1okmv+d4tCmhMSMoaHblLAnKKsQJbt0VkU7QdmOZCvmc
vUvcfMQz3Az71HGrbRYktwkFLLR6lJz/aZfEs+7qIZzrfiuYLsseC1xjoWOVIJeC
et1xl82HKXpPiuxTzRz4P4KRWosKRNvJ0mjV7UkEFTABAEpP1ouaba2CI5QRfpXD
pD0GD90xaXQToYCB3Uv6c1Fzie2os5m7Ifw1MaNBCLULQmmRkUsu+l/6IyQvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUj1te1+3dC/3cLwbZxF00VQw9Md8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqplzANBgkqhkiG9w0BAQsFAAOCAQEAn1Ti
J6S+E+qYgSeYDVhvEUlSg39Un2Ax3SGlG0Ue3ZMl3+QzkLuLrqNNIiByYX5dvJeV
uWudMU1Mhp515+AG54VjDZL1JHbhZr7K2ok5c62eugKxDg8SoPffYLpEO/W7K30s
rLoY2ycmy4nKbNEYvbZACKcYcMTykQUsrjFz6L/bB13u82XNt0rUwG6oXl376iS0
uH8F0MgM+aY9UCea6vjZuhMxFNkZGKBRwfk4TXJQYhVMGYgz5TNxcAob97qs4ys1
nR00Njer3ps+5274IVzMO/qxlhnVosMn6jwFAoinzpxrq3zUZxW3nl/xBkav8MOk
pit4+VCPltvl7aXhEA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:55 2026 by rpki-client