Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145431.roa
File:                     AS145431.roa (raw, json)
Hash identifier:          /WeaIRhX3Gzd123/aNgnsuaXWO5OOw+mbIBH3actqHY=
Subject key identifier:   F0:E4:C6:01:BE:D1:C9:2D:AD:21:C8:7D:F1:50:2D:FF:C1:62:6D:D0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2458762F4C6171E56E66B151D7342C9DA556E7B9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145431.roa
Signing time:             Tue 26 May 2026 02:35:19 +0000
ROA not before:           Tue 26 May 2026 02:30:19 +0000
ROA not after:            Tue 25 May 2027 02:35:19 +0000
asID:                     145431
IP address blocks:        240a:aadd::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:58:76:2f:4c:61:71:e5:6e:66:b1:51:d7:34:2c:9d:a5:56:e7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:19 2026 GMT
            Not After : May 25 02:35:19 2027 GMT
        Subject: CN=F0E4C601BED1C92DAD21C87DF1502DFFC1626DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:fd:f3:82:6c:9e:5d:d2:2f:ba:a8:1c:1f:
                    a9:b8:1f:55:32:c2:eb:60:96:0e:d8:b4:b4:e2:f8:
                    1a:53:34:74:29:31:1c:6b:1e:5d:e0:bc:e7:24:d5:
                    3a:6c:83:4d:13:98:0e:c2:26:41:77:72:0a:e5:c6:
                    cb:ce:c4:e5:d5:59:0b:98:b4:8d:ad:1b:b2:5c:c7:
                    e8:60:aa:a4:44:eb:87:b4:ac:5d:a6:17:13:fe:17:
                    87:4f:2e:83:e0:f7:5c:fd:7e:31:e5:c5:bd:f1:47:
                    dd:3d:2d:1a:e9:5f:a2:ab:5a:8f:44:1f:62:38:c8:
                    8f:e9:04:d8:05:d9:8f:74:f3:d3:bf:b3:36:d0:70:
                    b8:26:a3:50:f5:41:7c:60:7e:ad:40:cc:61:bc:3b:
                    4f:fa:2f:39:a4:5b:d7:4f:db:d1:49:b7:c6:bc:9f:
                    92:70:23:fd:64:3b:ed:1a:a8:b9:64:cd:7b:1e:6a:
                    37:d6:76:5e:50:e4:63:df:78:65:ba:ba:34:64:07:
                    44:73:54:29:0b:dc:2c:a8:43:07:83:87:88:43:e6:
                    af:b0:83:98:1a:82:91:eb:96:39:4d:09:ef:d1:47:
                    bf:d7:86:65:c6:9f:aa:f0:1b:f2:af:df:14:ff:72:
                    10:e9:2b:ba:35:26:85:d8:6b:aa:7c:11:e0:d4:b5:
                    3d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E4:C6:01:BE:D1:C9:2D:AD:21:C8:7D:F1:50:2D:FF:C1:62:6D:D0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aadd::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:1a:ba:c0:b0:28:de:73:d7:d4:c6:35:01:9d:d3:99:65:20:
         fa:33:84:c8:c0:88:c6:75:03:59:a0:49:22:61:15:b3:a1:2f:
         08:80:06:cd:93:58:75:b4:79:41:8d:a6:2a:aa:86:8a:8c:ae:
         d2:d6:8b:3c:d7:24:39:65:ef:ba:2f:29:ae:93:b5:86:69:42:
         ac:7b:30:3b:ae:56:74:c6:f2:52:eb:a7:51:98:92:e8:6d:95:
         aa:20:32:d2:e8:14:6e:48:44:20:14:48:cd:6a:fd:9d:c5:79:
         82:55:2c:b4:c5:a9:57:89:64:84:eb:89:98:0d:a5:2d:bd:9f:
         aa:26:02:1d:4b:2c:9d:61:18:ef:72:1d:b2:fb:41:22:38:25:
         39:33:c6:bb:80:d6:e3:bb:f4:ea:24:7c:59:ee:e0:21:1b:65:
         7f:04:40:35:3a:a0:53:76:66:8c:31:2d:65:12:24:92:13:65:
         b6:52:5a:be:c5:a4:89:cf:cb:06:e4:68:e6:3a:75:7f:12:58:
         2a:ad:f1:91:24:27:eb:9b:fc:7d:31:2f:c0:d1:f7:d3:7f:62:
         27:72:79:51:a2:33:d4:b7:09:cb:45:70:fc:54:1f:e5:e6:95:
         ef:3b:48:0f:c6:2d:e1:dd:71:54:f4:4a:71:d5:df:78:3e:df:
         78:4a:03:dc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJFh2L0xhceVuZrFR1zQsnaVW57kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMTlaFw0yNzA1MjUwMjM1MTlaMDMxMTAvBgNV
BAMTKEYwRTRDNjAxQkVEMUM5MkRBRDIxQzg3REYxNTAyREZGQzE2MjZERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAP3zgmyeXdIvuqgcH6m4H1Uy
wutglg7YtLTi+BpTNHQpMRxrHl3gvOck1Tpsg00TmA7CJkF3cgrlxsvOxOXVWQuY
tI2tG7Jcx+hgqqRE64e0rF2mFxP+F4dPLoPg91z9fjHlxb3xR909LRrpX6KrWo9E
H2I4yI/pBNgF2Y9089O/szbQcLgmo1D1QXxgfq1AzGG8O0/6LzmkW9dP29FJt8a8
n5JwI/1kO+0aqLlkzXseajfWdl5Q5GPfeGW6ujRkB0RzVCkL3CyoQweDh4hD5q+w
g5gagpHrljlNCe/RR7/XhmXGn6rwG/Kv3xT/chDpK7o1JoXYa6p8EeDUtT0NAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU8OTGAb7RyS2tIch98VAt/8FibdAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqq3TANBgkqhkiG9w0BAQsFAAOCAQEAohq6
wLAo3nPX1MY1AZ3TmWUg+jOEyMCIxnUDWaBJImEVs6EvCIAGzZNYdbR5QY2mKqqG
ioyu0taLPNckOWXvui8prpO1hmlCrHswO65WdMbyUuunUZiS6G2VqiAy0ugUbkhE
IBRIzWr9ncV5glUstMWpV4lkhOuJmA2lLb2fqiYCHUssnWEY73IdsvtBIjglOTPG
u4DW47v06iR8We7gIRtlfwRANTqgU3ZmjDEtZRIkkhNltlJavsWkic/LBuRo5jp1
fxJYKq3xkSQn65v8fTEvwNH3039iJ3J5UaIz1LcJy0Vw/FQf5eaV7ztID8Yt4d1x
VPRKcdXfeD7feEoD3A==
-----END CERTIFICATE-----