Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145227.roa
File:                     AS145227.roa (raw, json)
Hash identifier:          +alxWokBLHnleEgLCrc4OrpzCVx8M8Rs3s8mZ5tSC6k=
Subject key identifier:   C1:8B:63:09:A0:EB:1A:5E:30:2C:95:38:3F:27:1C:30:43:48:B3:B9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3FE57E424F00527ABC0A19E255CED11C36792AE2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145227.roa
Signing time:             Tue 26 May 2026 06:12:33 +0000
ROA not before:           Tue 26 May 2026 06:07:33 +0000
ROA not after:            Tue 25 May 2027 06:12:33 +0000
asID:                     145227
IP address blocks:        240a:aa11::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e5:7e:42:4f:00:52:7a:bc:0a:19:e2:55:ce:d1:1c:36:79:2a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:33 2026 GMT
            Not After : May 25 06:12:33 2027 GMT
        Subject: CN=C18B6309A0EB1A5E302C95383F271C304348B3B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:53:ad:9d:42:41:b1:af:4a:83:53:aa:eb:
                    ac:0b:6e:ba:57:84:80:b8:3c:df:b6:4b:b9:1d:dc:
                    e7:c1:06:4d:51:64:50:1a:b5:6e:f5:89:24:5d:fe:
                    2f:08:47:ac:d5:cd:6c:73:11:76:bd:92:e3:3d:f2:
                    e7:a3:5d:d3:e3:ce:00:4d:d2:66:52:08:40:38:a3:
                    9f:68:db:47:18:05:95:6f:09:de:29:38:a3:81:f6:
                    7e:b0:cb:52:6d:22:75:02:8c:58:6f:32:5d:1c:69:
                    31:d7:86:78:27:d2:5c:50:ec:18:52:ee:3f:89:fe:
                    bc:93:65:a8:26:cd:17:cc:0a:bc:1e:2e:a6:c4:df:
                    1b:0d:e0:e4:7a:4a:f2:57:5b:58:30:de:ac:77:9e:
                    fe:d2:75:23:20:1b:3a:79:e8:71:7a:36:ff:c2:c8:
                    e2:bd:5f:eb:cc:1d:07:e3:98:e7:d9:46:71:78:b8:
                    84:7f:d7:cb:1f:a9:7f:9d:41:dd:c4:8b:6f:d6:1a:
                    48:56:56:1a:3e:d5:61:04:fe:48:79:fd:22:e5:f0:
                    e9:4d:c5:08:93:2a:d0:b7:cd:cd:c7:1a:e5:81:c7:
                    65:90:f3:ff:91:2e:d8:97:a5:e4:95:35:2a:05:79:
                    54:a7:68:9d:50:0f:6b:73:3b:e2:08:bb:8e:0e:3c:
                    f1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8B:63:09:A0:EB:1A:5E:30:2C:95:38:3F:27:1C:30:43:48:B3:B9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145227.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa11::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:24:f2:24:07:d1:c4:c6:66:5d:fa:89:fa:13:ef:ce:d4:b3:
         f8:de:50:af:6e:3f:ea:b2:93:ae:7f:44:d9:09:96:23:3a:c8:
         09:1d:66:e4:1e:52:fb:24:32:7d:ee:9c:34:ec:d2:6b:3f:28:
         cf:dd:6e:98:63:da:da:dd:95:6f:10:1a:d0:a2:42:0e:00:90:
         9d:9a:ae:bc:35:af:97:2b:f8:89:4b:c2:91:4c:11:42:76:7e:
         7b:f7:34:fb:8e:42:7f:7a:b7:fa:3d:23:1a:4c:35:a6:7e:02:
         29:09:0d:2d:1e:e5:fc:70:ba:80:d8:75:fe:53:26:20:6f:af:
         5a:b6:63:84:5b:02:35:b4:e9:6d:c6:c6:f8:de:8d:b2:e6:19:
         10:3b:2e:df:a3:ba:53:b4:b3:b0:82:ef:e2:2c:44:1a:d8:4a:
         cd:52:89:fc:e3:f8:7a:a7:78:e5:d9:84:9f:a7:1d:94:b4:c0:
         45:27:84:99:02:3d:67:7b:eb:82:2f:87:a9:7e:b0:91:d7:cf:
         1b:ec:bd:df:38:6d:30:44:a7:7f:fc:f2:39:8b:20:a6:18:fb:
         af:1e:ec:4e:ff:8a:f5:85:6e:80:34:49:97:c4:9c:5d:da:b6:
         d7:d1:c7:32:91:f4:2e:7d:02:08:95:36:b7:ce:59:d6:3e:48:
         87:ac:4f:7e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUP+V+Qk8AUnq8ChniVc7RHDZ5KuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3MzNaFw0yNzA1MjUwNjEyMzNaMDMxMTAvBgNV
BAMTKEMxOEI2MzA5QTBFQjFBNUUzMDJDOTUzODNGMjcxQzMwNDM0OEIzQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPA1OtnUJBsa9Kg1Oq66wLbrpX
hIC4PN+2S7kd3OfBBk1RZFAatW71iSRd/i8IR6zVzWxzEXa9kuM98uejXdPjzgBN
0mZSCEA4o59o20cYBZVvCd4pOKOB9n6wy1JtInUCjFhvMl0caTHXhngn0lxQ7BhS
7j+J/ryTZagmzRfMCrweLqbE3xsN4OR6SvJXW1gw3qx3nv7SdSMgGzp56HF6Nv/C
yOK9X+vMHQfjmOfZRnF4uIR/18sfqX+dQd3Ei2/WGkhWVho+1WEE/kh5/SLl8OlN
xQiTKtC3zc3HGuWBx2WQ8/+RLtiXpeSVNSoFeVSnaJ1QD2tzO+IIu44OPPFxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUwYtjCaDrGl4wLJU4PyccMENIs7kwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqETANBgkqhkiG9w0BAQsFAAOCAQEAiyTy
JAfRxMZmXfqJ+hPvztSz+N5Qr24/6rKTrn9E2QmWIzrICR1m5B5S+yQyfe6cNOzS
az8oz91umGPa2t2VbxAa0KJCDgCQnZquvDWvlyv4iUvCkUwRQnZ+e/c0+45Cf3q3
+j0jGkw1pn4CKQkNLR7l/HC6gNh1/lMmIG+vWrZjhFsCNbTpbcbG+N6NsuYZEDsu
36O6U7SzsILv4ixEGthKzVKJ/OP4eqd45dmEn6cdlLTARSeEmQI9Z3vrgi+HqX6w
kdfPG+y93zhtMESnf/zyOYsgphj7rx7sTv+K9YVugDRJl8ScXdq219HHMpH0Ln0C
CJU2t85Z1j5Ih6xPfg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:27 2026 by rpki-client