Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145583.roa
File:                     AS145583.roa (raw, json)
Hash identifier:          FM07Bpv4pVhHSmPE9DmLfZcyzI4RaTVaBLhHn7NN7To=
Subject key identifier:   7D:F2:FD:10:5E:6A:BD:00:83:FA:B7:85:D8:1A:60:14:62:D3:6E:2F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       25C92D964336199EAB693C76B75F63A6D5173D28
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145583.roa
Signing time:             Fri 22 May 2026 07:32:25 +0000
ROA not before:           Fri 22 May 2026 07:27:25 +0000
ROA not after:            Fri 21 May 2027 07:32:25 +0000
asID:                     145583
IP address blocks:        240a:ab75::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c9:2d:96:43:36:19:9e:ab:69:3c:76:b7:5f:63:a6:d5:17:3d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:25 2026 GMT
            Not After : May 21 07:32:25 2027 GMT
        Subject: CN=7DF2FD105E6ABD0083FAB785D81A601462D36E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d7:eb:de:eb:1f:1a:fa:fd:82:80:36:99:d2:
                    a3:69:08:d6:fe:3f:bc:5e:7d:b1:10:ad:04:f3:25:
                    a6:92:22:99:21:5d:45:04:96:9e:f1:23:e8:90:68:
                    18:54:a5:f3:21:25:e0:75:b9:3d:47:52:ea:e9:cd:
                    ff:fc:5d:5c:ad:6e:3d:c7:87:44:d8:41:66:cf:25:
                    a6:65:89:71:66:ff:aa:a4:b9:4f:af:eb:e4:4c:83:
                    48:68:06:dc:d0:37:bd:92:04:02:02:b3:9a:6c:81:
                    b5:01:84:59:f9:07:e3:26:a6:77:3c:fe:f7:b6:a9:
                    0e:28:2a:a9:39:f6:44:89:99:af:8b:63:81:20:17:
                    97:18:cb:77:53:42:80:69:f8:e4:f7:22:f2:33:12:
                    25:eb:5f:47:82:66:46:2c:f1:53:77:d5:2f:ed:a2:
                    d1:ce:32:75:96:9d:61:e3:f7:16:96:32:a2:61:5d:
                    8a:32:61:9b:84:a6:ad:84:16:db:c4:8d:e8:84:8e:
                    44:90:da:c8:75:9a:b4:ec:78:10:2b:5b:1a:0a:31:
                    02:95:58:bc:11:b6:fd:b7:52:00:58:71:0e:39:6f:
                    cd:80:bf:65:d4:e7:b8:68:61:01:2a:69:92:60:ff:
                    75:eb:3f:c5:61:4a:fc:30:9e:dc:c9:d3:a4:3f:f0:
                    3d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F2:FD:10:5E:6A:BD:00:83:FA:B7:85:D8:1A:60:14:62:D3:6E:2F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145583.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab75::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:e1:64:c1:bc:f7:50:9c:8f:13:79:86:69:60:29:c2:15:be:
         61:53:20:68:85:fe:15:91:fb:56:2b:55:f8:f5:18:d4:ef:0e:
         46:30:77:1b:25:0d:c8:21:4f:d8:55:26:2c:e8:01:89:7f:41:
         1a:5f:be:f3:ef:9c:30:e6:d0:67:1f:58:4a:58:fd:0f:5c:e1:
         94:1f:1a:9d:c7:68:2c:78:84:13:8a:e6:1a:04:8f:23:72:ef:
         4f:a1:fc:a7:ce:4e:bf:34:26:e6:48:fa:ca:a0:76:b2:fc:75:
         92:27:96:a2:cb:f4:4b:40:13:e6:9a:e6:a8:a4:be:52:24:57:
         23:a2:d8:a1:fc:f3:8c:c7:1c:c1:63:4d:e7:3c:3c:66:1a:46:
         c7:94:63:b7:da:2d:48:08:fd:45:46:29:6f:45:59:fa:08:db:
         8a:3d:c7:d0:50:75:75:fd:a2:80:34:4d:81:d4:4d:55:a1:71:
         27:0e:a5:ab:c5:19:2b:cb:61:a9:0e:1d:bb:be:3f:2c:c7:aa:
         8e:90:65:9c:b2:76:42:e4:fe:9f:d1:ff:d8:37:d1:bc:ea:02:
         dc:10:18:63:5b:a4:a0:bd:3c:39:89:c1:fa:9f:63:4b:4e:a7:
         a5:f2:2a:90:c3:a1:b3:de:0d:e1:89:8b:25:18:20:34:f5:f8:
         f1:39:bf:38
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJcktlkM2GZ6raTx2t19jptUXPSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MjVaFw0yNzA1MjEwNzMyMjVaMDMxMTAvBgNV
BAMTKDdERjJGRDEwNUU2QUJEMDA4M0ZBQjc4NUQ4MUE2MDE0NjJEMzZFMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1+ve6x8a+v2CgDaZ0qNpCNb+
P7xefbEQrQTzJaaSIpkhXUUElp7xI+iQaBhUpfMhJeB1uT1HUurpzf/8XVytbj3H
h0TYQWbPJaZliXFm/6qkuU+v6+RMg0hoBtzQN72SBAICs5psgbUBhFn5B+Mmpnc8
/ve2qQ4oKqk59kSJma+LY4EgF5cYy3dTQoBp+OT3IvIzEiXrX0eCZkYs8VN31S/t
otHOMnWWnWHj9xaWMqJhXYoyYZuEpq2EFtvEjeiEjkSQ2sh1mrTseBArWxoKMQKV
WLwRtv23UgBYcQ45b82Av2XU57hoYQEqaZJg/3XrP8VhSvwwntzJ06Q/8D3JAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUffL9EF5qvQCD+reF2BpgFGLTbi8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NTgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrdTANBgkqhkiG9w0BAQsFAAOCAQEAJeFk
wbz3UJyPE3mGaWApwhW+YVMgaIX+FZH7VitV+PUY1O8ORjB3GyUNyCFP2FUmLOgB
iX9BGl++8++cMObQZx9YSlj9D1zhlB8ancdoLHiEE4rmGgSPI3LvT6H8p85OvzQm
5kj6yqB2svx1kieWosv0S0AT5prmqKS+UiRXI6LYofzzjMccwWNN5zw8ZhpGx5Rj
t9otSAj9RUYpb0VZ+gjbij3H0FB1df2igDRNgdRNVaFxJw6lq8UZK8thqQ4du74/
LMeqjpBlnLJ2QuT+n9H/2DfRvOoC3BAYY1ukoL08OYnB+p9jS06npfIqkMOhs94N
4YmLJRggNPX48Tm/OA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:05 2026 by rpki-client