Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145473.roa
File:                     AS145473.roa (raw, json)
Hash identifier:          GioyXUO6bs17J4hfhbXMUoNjAZGm1jT18VyZbgouR7w=
Subject key identifier:   6C:0E:BA:74:02:6D:BF:74:4E:60:01:47:00:45:40:29:56:1D:34:4A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3F81B295E8FC72F18318C737433A211322711F10
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145473.roa
Signing time:             Mon 25 May 2026 06:49:14 +0000
ROA not before:           Mon 25 May 2026 06:44:14 +0000
ROA not after:            Mon 24 May 2027 06:49:14 +0000
asID:                     145473
IP address blocks:        240a:ab07::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:81:b2:95:e8:fc:72:f1:83:18:c7:37:43:3a:21:13:22:71:1f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:14 2026 GMT
            Not After : May 24 06:49:14 2027 GMT
        Subject: CN=6C0EBA74026DBF744E60014700454029561D344A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:e0:4a:2a:63:52:c0:ea:3a:47:1d:5e:a9:
                    29:26:ae:94:4e:44:4b:db:74:51:fe:bb:f8:f9:df:
                    f6:03:ff:df:d6:d1:47:f6:3e:bf:ed:86:91:89:ed:
                    b4:33:99:8e:3a:b2:ca:d3:29:76:73:20:f5:91:1f:
                    74:15:2b:f4:7e:68:1d:21:6e:26:c5:87:7b:79:1a:
                    88:3b:0b:31:f2:57:17:1f:b0:14:c1:54:b7:a2:62:
                    8f:1c:7e:79:12:37:f1:d3:a5:4e:de:96:f4:41:b1:
                    cc:cc:de:ac:bf:0b:54:66:04:49:57:e1:1a:11:1e:
                    00:6c:b2:89:44:7a:fa:63:77:c9:66:37:ac:62:cd:
                    08:f2:27:f4:68:13:3c:1e:3a:6e:ca:82:92:1e:f0:
                    bf:5c:18:84:c7:45:7d:1e:e3:5b:bd:74:bc:30:14:
                    ba:c7:0a:af:61:4e:12:28:24:dc:91:4c:20:ba:f1:
                    e1:7c:98:65:46:fe:9e:d4:ec:53:a4:f5:2d:d5:31:
                    92:98:56:03:62:f6:68:11:c6:20:81:a2:d0:21:0a:
                    5e:70:56:f4:49:8f:43:73:fd:d3:d9:0d:05:7d:d4:
                    99:fe:10:c8:1a:fc:ff:43:9d:51:e6:2c:bb:df:71:
                    6f:4c:91:14:f8:49:cc:6b:a9:b4:56:35:9d:8b:07:
                    ba:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0E:BA:74:02:6D:BF:74:4E:60:01:47:00:45:40:29:56:1D:34:4A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab07::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:cb:ff:91:2f:bf:93:4d:32:52:5d:a7:64:94:40:ed:96:
         70:92:50:85:b1:b1:75:4f:73:ab:39:91:af:d1:8c:c0:3b:90:
         6f:89:fe:d0:3e:81:d2:29:eb:c7:86:e3:94:18:f7:f1:0f:de:
         cf:6c:3e:0e:bf:2e:ad:a8:99:16:3d:96:8b:a1:c7:d0:00:1a:
         40:34:34:4a:60:e1:5a:e9:eb:3e:17:b3:0e:ac:a6:60:66:a9:
         f9:ec:be:32:23:92:e3:2c:3e:4f:e6:86:ff:6d:6f:00:e2:85:
         4a:ac:d1:ef:3e:24:7e:6b:66:8d:e7:dc:97:0e:e1:5b:2b:f4:
         bb:d0:06:e1:d8:a1:71:a0:5b:5e:92:a4:97:e9:88:e0:33:16:
         10:bd:61:57:dd:c3:aa:72:3f:60:ea:41:07:ac:bf:53:81:42:
         23:92:a5:b3:c3:d7:5b:20:8a:a2:d2:ec:01:26:32:81:e3:8a:
         19:17:7a:7d:92:d1:34:0d:1e:22:3b:20:77:22:71:6a:ae:1d:
         73:f4:d4:58:4b:3e:13:62:9d:3c:b0:20:b8:aa:be:23:87:17:
         f5:fe:f3:65:3c:4e:ee:76:e5:2c:7f:e4:9b:e7:66:3f:72:79:
         57:55:4b:8e:83:63:fa:46:5b:2e:af:0c:09:62:1b:84:1a:ed:
         10:12:07:ae
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUP4Gylej8cvGDGMc3QzohEyJxHxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQ0MTRaFw0yNzA1MjQwNjQ5MTRaMDMxMTAvBgNV
BAMTKDZDMEVCQTc0MDI2REJGNzQ0RTYwMDE0NzAwNDU0MDI5NTYxRDM0NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtOBKKmNSwOo6Rx1eqSkmrpRO
REvbdFH+u/j53/YD/9/W0Uf2Pr/thpGJ7bQzmY46ssrTKXZzIPWRH3QVK/R+aB0h
bibFh3t5Gog7CzHyVxcfsBTBVLeiYo8cfnkSN/HTpU7elvRBsczM3qy/C1RmBElX
4RoRHgBssolEevpjd8lmN6xizQjyJ/RoEzweOm7KgpIe8L9cGITHRX0e41u9dLww
FLrHCq9hThIoJNyRTCC68eF8mGVG/p7U7FOk9S3VMZKYVgNi9mgRxiCBotAhCl5w
VvRJj0Nz/dPZDQV91Jn+EMga/P9DnVHmLLvfcW9MkRT4ScxrqbRWNZ2LB7rNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbA66dAJtv3ROYAFHAEVAKVYdNEowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrBzANBgkqhkiG9w0BAQsFAAOCAQEAKNzL
/5Evv5NNMlJdp2SUQO2WcJJQhbGxdU9zqzmRr9GMwDuQb4n+0D6B0inrx4bjlBj3
8Q/ez2w+Dr8uraiZFj2Wi6HH0AAaQDQ0SmDhWunrPhezDqymYGap+ey+MiOS4yw+
T+aG/21vAOKFSqzR7z4kfmtmjefclw7hWyv0u9AG4dihcaBbXpKkl+mI4DMWEL1h
V93DqnI/YOpBB6y/U4FCI5Kls8PXWyCKotLsASYygeOKGRd6fZLRNA0eIjsgdyJx
aq4dc/TUWEs+E2KdPLAguKq+I4cX9f7zZTxO7nblLH/km+dmP3J5V1VLjoNj+kZb
Lq8MCWIbhBrtEBIHrg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:06 2026 by rpki-client