Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145190.roa
File:                     AS145190.roa (raw, json)
Hash identifier:          dgE5dzP0HQH7oAvf9nA0GwJL78CBXJUO5UF0fgAKqzI=
Subject key identifier:   B0:78:F2:95:0B:FD:F8:14:41:BC:A4:50:37:24:AB:75:E8:F9:58:9A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       09FD99A0F611EA280F283263B7EE51A470C71DE5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145190.roa
Signing time:             Fri 22 May 2026 02:47:56 +0000
ROA not before:           Fri 22 May 2026 02:42:56 +0000
ROA not after:            Fri 21 May 2027 02:47:56 +0000
asID:                     145190
IP address blocks:        240a:a9ec::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fd:99:a0:f6:11:ea:28:0f:28:32:63:b7:ee:51:a4:70:c7:1d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:56 2026 GMT
            Not After : May 21 02:47:56 2027 GMT
        Subject: CN=B078F2950BFDF81441BCA4503724AB75E8F9589A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:b8:dc:3e:70:c0:43:b0:67:f3:b0:c0:eb:
                    07:f6:d5:82:f1:93:dc:ca:24:f5:9f:c6:a3:6b:c7:
                    b7:7e:db:c1:69:f3:01:fe:8d:ae:3c:a1:cb:27:4c:
                    5e:f3:8e:32:f3:b7:03:99:a2:dc:f7:fc:bb:fc:12:
                    9d:fe:91:1f:f5:81:48:d9:92:79:8e:67:f6:d8:80:
                    e3:7c:ac:73:ea:1e:c4:82:3e:7c:a9:fd:cb:17:af:
                    d8:c6:01:ff:4b:45:a1:d2:d2:27:e2:ed:84:0d:21:
                    6b:1f:81:e5:a0:16:73:fd:e9:a3:2c:01:aa:5f:2f:
                    8b:e6:cf:36:8d:b4:ad:e6:3a:0a:0c:ea:f2:6d:dc:
                    56:1a:3e:54:df:77:ec:5b:8c:c3:d1:0c:2a:08:da:
                    b9:62:ea:3f:9d:1c:07:f0:13:d6:0f:b3:5c:29:8d:
                    df:5f:26:ab:c4:6a:c2:e5:23:78:92:d9:f0:d3:d3:
                    0e:03:2f:f3:65:d4:92:17:50:64:49:ec:99:18:82:
                    87:bd:c0:8c:2b:77:ec:9f:b7:98:f2:47:9f:e2:7c:
                    40:db:94:95:20:5c:3c:2c:be:a2:f9:ce:c5:1f:a7:
                    81:15:32:b9:32:33:e8:ce:45:10:60:8a:7d:41:ac:
                    6d:d4:c2:e1:74:ec:e8:e8:0f:7b:04:40:8b:d0:1d:
                    bb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:78:F2:95:0B:FD:F8:14:41:BC:A4:50:37:24:AB:75:E8:F9:58:9A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145190.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:38:2b:3c:d1:84:cb:e2:f9:a9:c9:59:14:1f:40:6b:d2:da:
         60:87:11:78:a3:1f:ab:ce:1d:8f:66:27:af:f2:32:fd:8f:61:
         7d:11:0e:c4:a4:4f:42:52:a2:bd:9b:3f:5b:c8:64:18:49:c2:
         49:7b:02:50:1f:78:cb:01:8b:bd:91:f3:04:f8:23:60:3f:cb:
         f0:0b:d4:28:5b:01:3e:4c:14:f1:05:d6:48:c6:70:09:fd:a9:
         44:2b:cb:69:5f:d2:a5:ac:ee:42:b9:d7:84:e6:9a:6b:48:34:
         c4:53:92:93:1e:fa:91:96:f1:90:47:5b:28:f2:1a:72:f0:40:
         d2:08:38:2d:ce:72:a7:66:66:19:c0:1c:0a:4b:aa:6f:6e:29:
         83:8c:ce:bc:35:6d:af:a5:c4:e7:c9:ce:86:df:fe:5f:dc:c0:
         69:ec:71:21:93:87:df:55:34:13:99:50:b5:b1:da:ed:a8:8c:
         c5:f0:fc:af:1b:74:09:5b:c3:0b:73:b4:9f:39:66:62:90:03:
         18:bf:ea:35:59:c0:8a:fd:6a:45:50:3f:90:de:81:2f:e2:a6:
         6e:ce:64:da:c6:63:67:aa:c8:78:7b:f4:2d:1c:59:df:ac:cb:
         fe:d1:93:f5:74:0a:f9:0d:43:a8:ac:cd:f1:28:df:cf:d2:42:
         5f:be:a2:80
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUCf2ZoPYR6igPKDJjt+5RpHDHHeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyNTZaFw0yNzA1MjEwMjQ3NTZaMDMxMTAvBgNV
BAMTKEIwNzhGMjk1MEJGREY4MTQ0MUJDQTQ1MDM3MjRBQjc1RThGOTU4OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy27jcPnDAQ7Bn87DA6wf21YLx
k9zKJPWfxqNrx7d+28Fp8wH+ja48ocsnTF7zjjLztwOZotz3/Lv8Ep3+kR/1gUjZ
knmOZ/bYgON8rHPqHsSCPnyp/csXr9jGAf9LRaHS0ifi7YQNIWsfgeWgFnP96aMs
AapfL4vmzzaNtK3mOgoM6vJt3FYaPlTfd+xbjMPRDCoI2rli6j+dHAfwE9YPs1wp
jd9fJqvEasLlI3iS2fDT0w4DL/Nl1JIXUGRJ7JkYgoe9wIwrd+yft5jyR5/ifEDb
lJUgXDwsvqL5zsUfp4EVMrkyM+jORRBgin1BrG3UwuF07OjoD3sEQIvQHbslAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUsHjylQv9+BRBvKRQNySrdej5WJowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTkwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqp7DANBgkqhkiG9w0BAQsFAAOCAQEABTgr
PNGEy+L5qclZFB9Aa9LaYIcReKMfq84dj2Ynr/Iy/Y9hfREOxKRPQlKivZs/W8hk
GEnCSXsCUB94ywGLvZHzBPgjYD/L8AvUKFsBPkwU8QXWSMZwCf2pRCvLaV/Spazu
QrnXhOaaa0g0xFOSkx76kZbxkEdbKPIacvBA0gg4Lc5yp2ZmGcAcCkuqb24pg4zO
vDVtr6XE58nOht/+X9zAaexxIZOH31U0E5lQtbHa7aiMxfD8rxt0CVvDC3O0nzlm
YpADGL/qNVnAiv1qRVA/kN6BL+Kmbs5k2sZjZ6rIeHv0LRxZ36zL/tGT9XQK+Q1D
qKzN8Sjfz9JCX76igA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:50 2026 by rpki-client