Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145131.roa
File:                     AS145131.roa (raw, json)
Hash identifier:          NURhX+L7esMZj2xzgmXaXbVLZv1ckAuxY4xG9p7Ff04=
Subject key identifier:   C7:6B:3E:E0:4F:B9:28:8A:05:28:CA:8E:3C:BC:E4:61:6E:63:BD:B9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2EBA9F2AFDC941FFEF653BCB8B5268889C41FB38
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145131.roa
Signing time:             Mon 25 May 2026 06:28:31 +0000
ROA not before:           Mon 25 May 2026 06:23:31 +0000
ROA not after:            Mon 24 May 2027 06:28:31 +0000
asID:                     145131
IP address blocks:        240a:a9b1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ba:9f:2a:fd:c9:41:ff:ef:65:3b:cb:8b:52:68:88:9c:41:fb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:31 2026 GMT
            Not After : May 24 06:28:31 2027 GMT
        Subject: CN=C76B3EE04FB9288A0528CA8E3CBCE4616E63BDB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:c2:a0:36:11:0f:a6:eb:25:c9:a7:26:ef:
                    1f:d3:93:99:3a:ab:b0:52:d9:0e:3e:26:05:df:77:
                    77:be:05:5d:13:c7:68:64:ee:42:d1:ae:03:cb:61:
                    f9:75:f3:f2:e2:b5:c3:c8:97:f5:1e:67:f0:ec:cc:
                    3e:b3:07:13:74:b2:dd:58:ee:a9:75:32:0b:9e:f7:
                    b5:76:4b:ca:60:21:bf:7e:4b:bc:04:b6:7d:db:b2:
                    7e:4f:81:fa:45:6a:d9:30:ba:b3:1a:41:33:1c:7a:
                    45:3a:ec:d8:bb:0a:5a:83:3e:bf:5f:e8:7c:ce:c2:
                    19:f3:b6:38:58:aa:6c:b6:f2:c3:2c:10:17:d6:ab:
                    ca:92:e2:7d:98:6c:68:f8:ef:13:da:4c:5d:7d:2e:
                    ce:82:8d:74:61:4e:9b:58:36:14:71:91:96:e8:1a:
                    44:bb:ca:45:66:ab:fb:20:f9:49:57:5b:67:fa:9c:
                    c7:c7:8b:97:99:cf:84:16:19:82:48:15:e3:b4:d6:
                    46:92:13:97:30:89:5c:3a:1c:ec:e9:84:08:99:97:
                    61:e2:ce:27:62:cd:6b:5e:eb:06:fe:be:ea:7d:43:
                    c9:2e:ce:be:f7:95:75:30:7b:59:ad:d2:4e:2a:c3:
                    bf:55:fa:56:00:26:94:84:f5:8a:af:b9:f6:f5:4b:
                    2f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6B:3E:E0:4F:B9:28:8A:05:28:CA:8E:3C:BC:E4:61:6E:63:BD:B9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9b1::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:12:f8:da:28:34:a6:04:bb:f2:b4:82:18:38:78:f2:e5:
         26:e2:cd:da:ad:a0:0a:c5:df:03:d6:3e:3e:b5:3b:b9:d9:a1:
         ae:0f:2f:a5:31:22:c1:56:1c:05:b2:03:cf:fe:4f:46:3b:7a:
         95:e8:e2:e2:86:95:d8:5b:42:40:cd:7d:70:f1:5c:a8:03:a1:
         d1:89:70:bb:c2:57:69:6c:50:58:92:f1:2a:ab:ba:85:ad:53:
         32:62:a3:27:8e:99:88:bd:9e:34:f8:c9:09:38:12:fb:5a:33:
         51:c3:53:d5:26:e6:cc:1b:69:14:4e:bf:ee:c2:df:2f:04:8a:
         56:e0:1f:62:c6:83:b4:7e:c8:2a:b7:dd:5d:9a:97:3b:d3:42:
         a4:9e:52:2a:0b:4a:f7:5b:08:88:a7:e7:b3:70:b5:b3:a5:59:
         e2:33:d0:3e:a4:cb:e0:37:18:92:3b:e0:4a:cf:15:d5:47:ff:
         0a:d6:60:27:c7:25:db:cd:37:53:eb:61:e7:40:f8:cf:ea:c6:
         3e:48:04:13:7d:9a:d5:44:1f:72:95:bb:4b:b6:fa:ea:d4:93:
         a5:a5:33:a9:b4:72:8b:1e:ee:36:fc:2a:96:3b:ca:a2:6e:83:
         bb:b6:8c:e0:36:33:79:4e:01:ef:43:c2:a2:81:7b:f9:3b:52:
         88:6b:ce:7f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULrqfKv3JQf/vZTvLi1JoiJxB+zgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMzFaFw0yNzA1MjQwNjI4MzFaMDMxMTAvBgNV
BAMTKEM3NkIzRUUwNEZCOTI4OEEwNTI4Q0E4RTNDQkNFNDYxNkU2M0JEQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzcKgNhEPpuslyacm7x/Tk5k6
q7BS2Q4+JgXfd3e+BV0Tx2hk7kLRrgPLYfl18/LitcPIl/UeZ/DszD6zBxN0st1Y
7ql1Mgue97V2S8pgIb9+S7wEtn3bsn5PgfpFatkwurMaQTMcekU67Ni7ClqDPr9f
6HzOwhnztjhYqmy28sMsEBfWq8qS4n2YbGj47xPaTF19Ls6CjXRhTptYNhRxkZbo
GkS7ykVmq/sg+UlXW2f6nMfHi5eZz4QWGYJIFeO01kaSE5cwiVw6HOzphAiZl2Hi
zidizWte6wb+vup9Q8kuzr73lXUwe1mt0k4qw79V+lYAJpSE9Yqvufb1Sy+BAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUx2s+4E+5KIoFKMqOPLzkYW5jvbkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpsTANBgkqhkiG9w0BAQsFAAOCAQEAO84S
+NooNKYEu/K0ghg4ePLlJuLN2q2gCsXfA9Y+PrU7udmhrg8vpTEiwVYcBbIDz/5P
Rjt6leji4oaV2FtCQM19cPFcqAOh0Ylwu8JXaWxQWJLxKqu6ha1TMmKjJ46ZiL2e
NPjJCTgS+1ozUcNT1SbmzBtpFE6/7sLfLwSKVuAfYsaDtH7IKrfdXZqXO9NCpJ5S
KgtK91sIiKfns3C1s6VZ4jPQPqTL4DcYkjvgSs8V1Uf/CtZgJ8cl2803U+th50D4
z+rGPkgEE32a1UQfcpW7S7b66tSTpaUzqbRyix7uNvwqljvKom6Du7aM4DYzeU4B
70PCooF7+TtSiGvOfw==
-----END CERTIFICATE-----