Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145369.roa
File:                     AS145369.roa (raw, json)
Hash identifier:          Ov4x17LT4FyGsqTyl374BEOCNLMfVekr8zjaEw9Xnl0=
Subject key identifier:   E1:D2:39:80:C5:2F:5C:06:9F:C2:38:04:F5:C2:A9:06:87:46:15:85
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       31883405911E65036811A6FE006833EB49C49542
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145369.roa
Signing time:             Mon 25 May 2026 02:22:23 +0000
ROA not before:           Mon 25 May 2026 02:17:23 +0000
ROA not after:            Mon 24 May 2027 02:22:23 +0000
asID:                     145369
IP address blocks:        240a:aa9f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:88:34:05:91:1e:65:03:68:11:a6:fe:00:68:33:eb:49:c4:95:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:23 2026 GMT
            Not After : May 24 02:22:23 2027 GMT
        Subject: CN=E1D23980C52F5C069FC23804F5C2A90687461585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:15:22:13:55:1a:13:31:bb:05:bb:d5:71:
                    cc:48:88:4d:53:34:8d:31:6f:77:90:ab:b5:ac:6f:
                    38:62:ea:27:b1:e3:9c:90:41:fe:9e:59:87:b0:25:
                    df:a6:10:19:5e:a3:e4:05:a0:61:09:4e:53:56:3c:
                    90:0f:19:bd:3e:49:30:ef:a5:b0:68:6d:9b:fd:05:
                    49:d8:26:a6:0d:98:98:31:d4:01:b8:79:1e:d0:70:
                    13:d6:0f:ed:cd:d3:ce:cd:73:5c:4b:7d:e2:14:c4:
                    53:a3:30:c4:5d:c4:e8:50:e8:32:5a:a4:03:b6:9f:
                    dc:ec:d0:62:09:59:05:49:89:14:bf:ce:a2:9b:ce:
                    bb:5b:d0:85:42:5f:f7:20:82:e8:37:1d:9e:77:0d:
                    3a:22:3e:c7:b5:10:b3:55:0f:79:6b:9e:de:90:34:
                    3d:97:26:25:10:af:25:af:ab:c9:28:b3:09:ff:68:
                    fb:f0:8f:2c:41:ff:99:0f:0e:38:a2:39:8a:03:58:
                    c1:24:e1:dc:24:6e:ba:20:e7:e7:49:f0:99:82:d6:
                    44:b8:e5:a1:82:13:d1:e6:d4:e5:7f:43:0c:db:4e:
                    0c:06:67:be:26:07:fb:5e:4d:23:c3:f2:1e:4d:ba:
                    04:d1:bc:a0:f8:c3:53:ad:4d:63:27:9c:5d:8a:56:
                    3f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D2:39:80:C5:2F:5C:06:9F:C2:38:04:F5:C2:A9:06:87:46:15:85
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145369.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa9f::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:4e:e4:16:21:29:6c:ec:e7:cd:91:6c:4d:9f:a0:0b:fc:89:
         90:ff:0b:7d:1a:37:68:47:a3:ba:90:db:4d:06:2f:1f:c8:06:
         0a:8c:9a:68:03:bd:44:dd:64:57:9b:e2:88:0e:f4:47:7f:cd:
         d4:9f:4d:a3:5b:7b:6e:7c:20:73:3a:37:10:5c:73:99:20:c7:
         ed:4b:aa:ee:b8:45:62:3f:8b:ef:68:f8:61:6c:77:b3:cb:d1:
         45:c7:6f:4b:0e:7a:02:e6:d4:c2:75:12:c8:4c:bc:00:6f:10:
         37:25:fd:02:09:88:c7:ea:a8:fb:65:da:12:c4:6a:cf:49:68:
         dc:58:80:48:7c:8e:9a:10:81:7b:95:53:d7:fa:a7:92:57:be:
         4d:11:b7:26:47:d2:86:9c:bb:c0:3f:e3:93:09:2d:45:5a:35:
         6c:09:9e:2e:1c:c6:c3:db:e5:2a:5f:35:6f:1b:f7:e8:05:71:
         ca:e8:ff:52:41:c0:7b:16:6e:52:14:07:87:31:0f:c6:c4:25:
         d3:d4:11:d0:91:4f:2f:68:90:ab:8e:b0:90:35:d5:64:66:72:
         d1:1a:d8:b5:d3:2f:f1:c3:32:42:9b:75:4d:ab:22:13:e4:99:
         c1:60:a7:f9:1c:e9:4f:23:b3:df:ff:fc:75:14:88:14:14:62:
         36:ba:98:2a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMYg0BZEeZQNoEab+AGgz60nElUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MjNaFw0yNzA1MjQwMjIyMjNaMDMxMTAvBgNV
BAMTKEUxRDIzOTgwQzUyRjVDMDY5RkMyMzgwNEY1QzJBOTA2ODc0NjE1ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkyhUiE1UaEzG7BbvVccxIiE1T
NI0xb3eQq7Wsbzhi6iex45yQQf6eWYewJd+mEBleo+QFoGEJTlNWPJAPGb0+STDv
pbBobZv9BUnYJqYNmJgx1AG4eR7QcBPWD+3N087Nc1xLfeIUxFOjMMRdxOhQ6DJa
pAO2n9zs0GIJWQVJiRS/zqKbzrtb0IVCX/cggug3HZ53DToiPse1ELNVD3lrnt6Q
ND2XJiUQryWvq8koswn/aPvwjyxB/5kPDjiiOYoDWMEk4dwkbrog5+dJ8JmC1kS4
5aGCE9Hm1OV/QwzbTgwGZ74mB/teTSPD8h5NugTRvKD4w1OtTWMnnF2KVj9PAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU4dI5gMUvXAafwjgE9cKpBodGFYUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqnzANBgkqhkiG9w0BAQsFAAOCAQEADU7k
FiEpbOznzZFsTZ+gC/yJkP8LfRo3aEejupDbTQYvH8gGCoyaaAO9RN1kV5viiA70
R3/N1J9No1t7bnwgczo3EFxzmSDH7Uuq7rhFYj+L72j4YWx3s8vRRcdvSw56AubU
wnUSyEy8AG8QNyX9AgmIx+qo+2XaEsRqz0lo3FiASHyOmhCBe5VT1/qnkle+TRG3
JkfShpy7wD/jkwktRVo1bAmeLhzGw9vlKl81bxv36AVxyuj/UkHAexZuUhQHhzEP
xsQl09QR0JFPL2iQq46wkDXVZGZy0RrYtdMv8cMyQpt1TasiE+SZwWCn+RzpTyOz
3//8dRSIFBRiNrqYKg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:58 2026 by rpki-client