Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145272.roa
File:                     AS145272.roa (raw, json)
Hash identifier:          XBlNvgokWsz2/ioeOunpihak2JRfsQE53AJjZY3c0eQ=
Subject key identifier:   68:58:C1:C8:A0:50:C4:69:0E:80:E5:75:CF:7A:54:5A:13:51:66:B1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7D73DDE6CC17CF3A8899532046B4AF4E0745ECEB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145272.roa
Signing time:             Fri 22 May 2026 07:09:11 +0000
ROA not before:           Fri 22 May 2026 07:04:11 +0000
ROA not after:            Fri 21 May 2027 07:09:11 +0000
asID:                     145272
IP address blocks:        240a:aa3e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:73:dd:e6:cc:17:cf:3a:88:99:53:20:46:b4:af:4e:07:45:ec:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:11 2026 GMT
            Not After : May 21 07:09:11 2027 GMT
        Subject: CN=6858C1C8A050C4690E80E575CF7A545A135166B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:cd:eb:f8:ef:be:4c:20:e6:ea:9d:e5:54:
                    e6:f5:ec:67:11:63:af:b5:ff:8a:4f:aa:bd:36:18:
                    52:35:36:3a:e2:63:c8:5c:d7:92:c8:71:d2:fe:19:
                    ed:a9:43:1d:fb:29:a1:aa:02:96:af:06:e3:8f:a7:
                    75:7f:01:d4:e2:c8:c0:a9:d6:1f:41:f7:eb:55:2d:
                    6f:6e:66:7d:ac:d8:8e:bc:d9:56:c3:1f:84:05:a0:
                    58:59:b5:61:bf:8d:47:92:50:3a:dd:3f:17:fa:e7:
                    da:ba:c6:98:e9:84:24:be:5e:e6:dd:1c:af:7a:19:
                    eb:bf:76:33:b6:b3:2b:83:37:38:eb:3e:70:cc:37:
                    36:32:7d:21:04:35:27:9d:a4:1c:92:ca:52:dd:e1:
                    62:b1:2d:72:25:15:4f:f6:ec:75:b3:cc:61:fc:40:
                    e6:ab:67:92:e1:09:77:34:16:23:22:22:b4:33:bf:
                    03:6b:de:db:05:b2:83:80:96:6e:e8:c5:82:c5:14:
                    99:25:02:24:db:b8:1e:14:6c:8f:6e:fb:0b:91:ae:
                    18:13:80:3d:da:3a:a4:fd:ad:f4:39:dc:be:3a:5a:
                    b2:89:43:58:7c:6d:71:b6:19:f3:7c:7f:7d:b4:a3:
                    29:2c:b6:10:84:6b:8b:8a:da:61:26:1e:93:a1:23:
                    79:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:58:C1:C8:A0:50:C4:69:0E:80:E5:75:CF:7A:54:5A:13:51:66:B1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145272.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa3e::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:80:55:81:97:4d:1e:00:12:56:e4:aa:91:1a:cb:52:7a:8d:
         32:18:6a:1e:3c:d5:71:0e:09:58:fa:7c:87:4e:69:d1:55:3b:
         06:4e:f4:ff:8b:d9:df:39:79:cd:21:89:8f:f5:eb:93:7d:aa:
         33:f8:fd:7a:f2:44:d1:fc:2c:9b:6a:16:8a:33:5d:16:f2:13:
         5b:2e:5d:4f:02:d3:69:ea:a2:a5:0a:68:e3:2f:cd:b6:b9:09:
         44:e0:dc:f5:b1:02:ab:b7:ad:14:05:2a:7b:5b:da:9f:6c:27:
         9b:6d:1a:16:c0:fe:85:b9:a6:ab:69:55:91:04:cf:b5:ff:58:
         32:52:1d:66:15:87:76:92:7c:dd:9c:10:3b:ed:5a:ce:ed:73:
         44:09:ed:78:2a:2d:a4:62:df:3a:ce:dc:a2:db:6f:33:38:10:
         e7:93:dd:42:cc:3b:06:4a:44:ad:38:39:a5:d0:48:cc:c7:18:
         53:c5:60:3a:18:78:e3:76:e8:ff:59:f7:5b:b7:66:aa:9d:a3:
         e4:d6:f1:65:4c:25:7f:46:17:de:59:c7:30:29:2a:c0:f4:fd:
         71:b9:e2:20:42:0b:37:bc:b3:f0:3f:13:40:60:aa:cf:32:80:
         6f:90:b8:91:db:25:58:61:78:bd:0a:31:cc:2c:0e:12:b3:ad:
         43:73:89:bf
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfXPd5swXzzqImVMgRrSvTgdF7OswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MTFaFw0yNzA1MjEwNzA5MTFaMDMxMTAvBgNV
BAMTKDY4NThDMUM4QTA1MEM0NjkwRTgwRTU3NUNGN0E1NDVBMTM1MTY2QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0c3r+O++TCDm6p3lVOb17GcR
Y6+1/4pPqr02GFI1NjriY8hc15LIcdL+Ge2pQx37KaGqApavBuOPp3V/AdTiyMCp
1h9B9+tVLW9uZn2s2I682VbDH4QFoFhZtWG/jUeSUDrdPxf659q6xpjphCS+Xubd
HK96Geu/djO2syuDNzjrPnDMNzYyfSEENSedpBySylLd4WKxLXIlFU/27HWzzGH8
QOarZ5LhCXc0FiMiIrQzvwNr3tsFsoOAlm7oxYLFFJklAiTbuB4UbI9u+wuRrhgT
gD3aOqT9rfQ53L46WrKJQ1h8bXG2GfN8f320oyksthCEa4uK2mEmHpOhI3lrAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUaFjByKBQxGkOgOV1z3pUWhNRZrEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqPjANBgkqhkiG9w0BAQsFAAOCAQEAJIBV
gZdNHgASVuSqkRrLUnqNMhhqHjzVcQ4JWPp8h05p0VU7Bk70/4vZ3zl5zSGJj/Xr
k32qM/j9evJE0fwsm2oWijNdFvITWy5dTwLTaeqipQpo4y/NtrkJRODc9bECq7et
FAUqe1van2wnm20aFsD+hbmmq2lVkQTPtf9YMlIdZhWHdpJ83ZwQO+1azu1zRAnt
eCotpGLfOs7cottvMzgQ55PdQsw7BkpErTg5pdBIzMcYU8VgOhh443bo/1n3W7dm
qp2j5NbxZUwlf0YX3lnHMCkqwPT9cbniIEILN7yz8D8TQGCqzzKAb5C4kdslWGF4
vQoxzCwOErOtQ3OJvw==
-----END CERTIFICATE-----