Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145166.roa
File:                     AS145166.roa (raw, json)
Hash identifier:          9rvH+bAgsNAbnKCiUDZZfzy70D0y9wmv2D7MEFAeDss=
Subject key identifier:   3A:90:E0:A9:46:D5:D1:0F:0C:12:CA:72:62:CE:B8:7D:6B:B1:D5:B3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3FA9066FA428374F55D96F19DDB99F38750289E4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145166.roa
Signing time:             Tue 26 May 2026 06:30:45 +0000
ROA not before:           Tue 26 May 2026 06:25:45 +0000
ROA not after:            Tue 25 May 2027 06:30:45 +0000
asID:                     145166
IP address blocks:        240a:a9d4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a9:06:6f:a4:28:37:4f:55:d9:6f:19:dd:b9:9f:38:75:02:89:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:45 2026 GMT
            Not After : May 25 06:30:45 2027 GMT
        Subject: CN=3A90E0A946D5D10F0C12CA7262CEB87D6BB1D5B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:26:70:8d:0c:2c:78:b2:ea:e0:00:a8:b4:
                    9e:7a:b7:a2:ed:c5:a3:b3:37:7b:6a:75:86:ad:ac:
                    6c:84:cd:d0:9c:e8:dc:f0:fd:09:9a:a1:82:9e:06:
                    05:f6:27:ba:d9:f9:b4:6d:33:29:01:77:c1:82:99:
                    fd:c1:ae:91:ca:34:32:ea:64:d4:6d:9f:19:2c:06:
                    54:84:cc:5f:f7:b9:1d:f3:c3:c7:f8:3c:a6:cd:f4:
                    18:48:3f:f5:b7:16:8e:dd:9a:44:44:d2:1a:8d:2f:
                    5b:2b:c1:f3:6a:fe:9c:02:71:15:85:ab:b1:da:2a:
                    15:d8:b9:82:2c:83:cd:55:68:a5:c9:3c:45:9c:75:
                    05:ba:cb:59:1d:78:ac:e8:8b:5a:41:ad:91:1f:47:
                    e6:64:fd:5c:77:48:4c:37:c2:d7:1f:f3:af:78:bd:
                    62:bf:57:8b:6d:26:ce:01:4a:de:5d:aa:97:56:e8:
                    fe:1b:a7:de:81:ef:93:7c:38:02:ed:34:54:e8:c5:
                    a1:9c:13:bf:7e:f7:76:ab:f3:61:93:7c:5c:2f:3b:
                    c6:54:91:4d:a0:05:04:3a:af:fc:15:48:da:47:91:
                    bd:ef:14:c8:1a:00:c2:17:38:54:d9:c4:b3:54:80:
                    1e:79:7a:ab:14:ab:59:2f:3e:fd:eb:d9:59:3a:da:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:90:E0:A9:46:D5:D1:0F:0C:12:CA:72:62:CE:B8:7D:6B:B1:D5:B3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145166.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:62:ea:e2:32:85:81:76:e5:1f:73:ad:8f:75:d1:9a:7c:10:
         74:da:97:b0:04:ea:5e:35:79:f8:83:82:ba:6b:38:0a:3f:28:
         56:a5:4a:97:6e:f6:d8:e3:12:18:31:4b:8a:42:1d:eb:34:6e:
         1e:81:19:ac:3e:a7:ac:2e:3a:31:b7:2d:06:09:cf:96:1a:ab:
         b6:87:22:2b:b0:69:5c:43:b7:3b:85:ba:42:e6:20:3b:6e:18:
         4a:67:c0:a2:c6:19:49:b5:1f:ac:3d:60:ee:1a:ab:6b:03:46:
         4a:a3:19:83:95:bf:b3:29:ef:94:3d:d5:32:bd:81:06:81:3d:
         26:25:91:68:db:26:79:76:b7:95:09:d6:6b:bb:d6:c3:df:dd:
         13:bc:1b:4d:bd:04:8a:c2:ee:71:e5:20:15:93:c3:01:6a:ce:
         63:c3:b9:0d:03:f7:45:ea:5c:2e:2f:0a:0b:f5:65:89:0a:c2:
         81:8e:b9:57:9f:5e:8b:8c:fa:81:9e:66:1d:80:9d:61:25:90:
         41:40:2d:06:32:32:e7:99:bf:18:15:7c:9e:eb:5a:07:ee:5f:
         09:fe:cf:41:51:09:e6:fa:05:93:95:90:0f:d3:71:17:04:87:
         55:bd:c4:10:1c:48:9a:74:6a:26:c4:4f:9d:70:a0:fb:28:f0:
         77:5d:73:c5
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUP6kGb6QoN09V2W8Z3bmfOHUCieQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NDVaFw0yNzA1MjUwNjMwNDVaMDMxMTAvBgNV
BAMTKDNBOTBFMEE5NDZENUQxMEYwQzEyQ0E3MjYyQ0VCODdENkJCMUQ1QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xCZwjQwseLLq4ACotJ56t6Lt
xaOzN3tqdYatrGyEzdCc6Nzw/QmaoYKeBgX2J7rZ+bRtMykBd8GCmf3BrpHKNDLq
ZNRtnxksBlSEzF/3uR3zw8f4PKbN9BhIP/W3Fo7dmkRE0hqNL1srwfNq/pwCcRWF
q7HaKhXYuYIsg81VaKXJPEWcdQW6y1kdeKzoi1pBrZEfR+Zk/Vx3SEw3wtcf8694
vWK/V4ttJs4BSt5dqpdW6P4bp96B75N8OALtNFToxaGcE79+93ar82GTfFwvO8ZU
kU2gBQQ6r/wVSNpHkb3vFMgaAMIXOFTZxLNUgB55eqsUq1kvPv3r2Vk62lNjAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOpDgqUbV0Q8MEspyYs64fWux1bMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqp1DANBgkqhkiG9w0BAQsFAAOCAQEAk2Lq
4jKFgXblH3Otj3XRmnwQdNqXsATqXjV5+IOCums4Cj8oVqVKl2722OMSGDFLikId
6zRuHoEZrD6nrC46MbctBgnPlhqrtociK7BpXEO3O4W6QuYgO24YSmfAosYZSbUf
rD1g7hqrawNGSqMZg5W/synvlD3VMr2BBoE9JiWRaNsmeXa3lQnWa7vWw9/dE7wb
Tb0EisLuceUgFZPDAWrOY8O5DQP3RepcLi8KC/VliQrCgY65V59ei4z6gZ5mHYCd
YSWQQUAtBjIy55m/GBV8nutaB+5fCf7PQVEJ5voFk5WQD9NxFwSHVb3EEBxImnRq
JsRPnXCg+yjwd11zxQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:57 2026 by rpki-client