Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145248.roa
File:                     AS145248.roa (raw, json)
Hash identifier:          1DLgMh9QSTqReJxpKGJ5IHLp/5jvzdKh0Fv/+1l9Jm8=
Subject key identifier:   7E:00:B6:27:42:90:55:8D:09:33:A6:49:36:24:BC:D4:49:E4:6D:CA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       10275DE4140CC7F15211A6003E1AE941200D3174
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145248.roa
Signing time:             Tue 26 May 2026 02:35:21 +0000
ROA not before:           Tue 26 May 2026 02:30:21 +0000
ROA not after:            Tue 25 May 2027 02:35:21 +0000
asID:                     145248
IP address blocks:        240a:aa26::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:27:5d:e4:14:0c:c7:f1:52:11:a6:00:3e:1a:e9:41:20:0d:31:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:21 2026 GMT
            Not After : May 25 02:35:21 2027 GMT
        Subject: CN=7E00B6274290558D0933A6493624BCD449E46DCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:70:7e:de:9a:e3:96:e0:39:0e:c0:2f:72:
                    0e:39:ef:be:13:98:59:8c:be:16:b8:44:d9:03:95:
                    59:14:2b:87:48:cf:43:fa:4e:ec:a1:2b:d1:0b:62:
                    c7:d0:2b:a2:32:6a:8e:0f:e4:33:a4:37:77:85:f0:
                    d2:8d:d0:e0:d3:c2:b1:d0:00:a9:34:c0:4d:e6:03:
                    70:9d:7e:e0:15:dd:8f:b9:55:8f:ba:c1:8a:93:87:
                    21:54:c3:46:e6:ad:9e:0d:77:8c:b9:7e:62:e7:9a:
                    b9:ad:45:bf:64:3a:93:98:1d:eb:77:00:15:64:c5:
                    95:80:dc:13:ff:76:ae:6e:a8:f2:44:c9:ff:23:8e:
                    98:39:d2:2d:1d:8e:84:27:59:df:b3:39:8c:63:8e:
                    ca:01:a0:0f:56:b1:70:47:29:f7:83:97:09:56:82:
                    cb:44:8d:0c:93:b9:79:97:88:e6:7a:3d:9c:bb:eb:
                    44:16:39:26:8a:c0:ab:67:b5:df:47:5b:05:b4:4f:
                    75:39:e3:cc:87:81:9e:c3:e7:95:2e:ef:67:f9:34:
                    3e:ae:ca:08:da:43:d3:e2:de:6d:44:8d:04:96:2e:
                    52:31:08:3d:20:7c:28:74:4a:44:d6:cc:16:c0:1c:
                    37:9b:09:b0:82:10:97:c3:13:b9:5a:e3:81:82:46:
                    f9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:00:B6:27:42:90:55:8D:09:33:A6:49:36:24:BC:D4:49:E4:6D:CA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145248.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa26::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:a7:3c:7d:14:d9:93:f9:c6:ce:c1:ea:79:87:65:9e:90:aa:
         2e:c5:5a:1e:9c:a6:de:63:4a:aa:fb:6d:40:91:84:d5:2e:4e:
         04:f3:e4:98:bd:c0:28:d1:ef:a0:9c:be:ac:50:f8:13:7e:17:
         78:de:3c:49:ff:21:27:dc:10:a8:ef:ec:24:2c:97:b4:b3:0f:
         80:bf:ad:20:0c:f3:44:48:ef:38:5a:6d:79:86:64:1f:5d:c7:
         82:3a:cc:93:8f:ea:f8:aa:5f:96:28:e3:a7:42:78:b2:56:5f:
         bb:bc:63:8c:ab:ab:69:67:c7:25:2a:24:39:be:e0:e4:61:eb:
         fd:06:20:86:ff:88:7e:bd:fe:12:e7:7a:c8:e0:99:42:2d:66:
         de:3b:ef:aa:b0:91:42:0f:6e:b6:f6:85:c2:fd:a4:f0:9d:3f:
         68:ac:b5:be:99:ce:0e:4a:d9:f1:81:a0:39:d2:1f:fc:01:a0:
         07:a3:c0:f5:07:4a:f4:0a:6a:28:4c:08:6d:8b:df:12:25:e4:
         2d:97:24:1b:0a:c1:81:66:00:ce:fd:15:9e:ef:4e:64:a5:f5:
         f9:c9:79:34:f2:75:8a:5e:56:d1:2c:1e:32:dd:6f:0c:e8:dc:
         5f:41:bf:d4:d8:c1:5f:80:3f:f4:8a:bd:a4:dd:e3:55:bd:a5:
         ba:74:79:9e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUECdd5BQMx/FSEaYAPhrpQSANMXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMjFaFw0yNzA1MjUwMjM1MjFaMDMxMTAvBgNV
BAMTKDdFMDBCNjI3NDI5MDU1OEQwOTMzQTY0OTM2MjRCQ0Q0NDlFNDZEQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXSHB+3prjluA5DsAvcg45774T
mFmMvha4RNkDlVkUK4dIz0P6TuyhK9ELYsfQK6Iyao4P5DOkN3eF8NKN0ODTwrHQ
AKk0wE3mA3CdfuAV3Y+5VY+6wYqThyFUw0bmrZ4Nd4y5fmLnmrmtRb9kOpOYHet3
ABVkxZWA3BP/dq5uqPJEyf8jjpg50i0djoQnWd+zOYxjjsoBoA9WsXBHKfeDlwlW
gstEjQyTuXmXiOZ6PZy760QWOSaKwKtntd9HWwW0T3U548yHgZ7D55Uu72f5ND6u
ygjaQ9Pi3m1EjQSWLlIxCD0gfCh0SkTWzBbAHDebCbCCEJfDE7la44GCRvkVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUfgC2J0KQVY0JM6ZJNiS81EnkbcowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqJjANBgkqhkiG9w0BAQsFAAOCAQEAmqc8
fRTZk/nGzsHqeYdlnpCqLsVaHpym3mNKqvttQJGE1S5OBPPkmL3AKNHvoJy+rFD4
E34XeN48Sf8hJ9wQqO/sJCyXtLMPgL+tIAzzREjvOFpteYZkH13HgjrMk4/q+Kpf
lijjp0J4slZfu7xjjKuraWfHJSokOb7g5GHr/QYghv+Ifr3+Eud6yOCZQi1m3jvv
qrCRQg9utvaFwv2k8J0/aKy1vpnODkrZ8YGgOdIf/AGgB6PA9QdK9ApqKEwIbYvf
EiXkLZckGwrBgWYAzv0Vnu9OZKX1+cl5NPJ1il5W0SweMt1vDOjcX0G/1NjBX4A/
9Iq9pN3jVb2lunR5ng==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:32 2026 by rpki-client