Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145624.roa
File:                     AS145624.roa (raw, json)
Hash identifier:          EzbatXMbyj5PK/JXUpvKKI7HFGYxX+jpMtqM4RxHCeQ=
Subject key identifier:   7F:72:FA:6B:74:B7:1E:DC:82:80:AE:ED:A5:62:1C:77:61:60:CF:05
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5332FB59C11476BA8674B81BB6DB3E2C9DCD7E96
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145624.roa
Signing time:             Mon 25 May 2026 06:49:01 +0000
ROA not before:           Mon 25 May 2026 06:44:01 +0000
ROA not after:            Mon 24 May 2027 06:49:01 +0000
asID:                     145624
IP address blocks:        240a:ab9e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:32:fb:59:c1:14:76:ba:86:74:b8:1b:b6:db:3e:2c:9d:cd:7e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:01 2026 GMT
            Not After : May 24 06:49:01 2027 GMT
        Subject: CN=7F72FA6B74B71EDC8280AEEDA5621C776160CF05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2b:cd:22:e4:22:de:41:4f:3c:85:fc:19:bd:
                    dc:ba:60:76:ac:c0:9e:6d:76:6f:9d:e4:28:b2:14:
                    1c:bb:bf:0e:da:f1:1b:54:31:e1:9c:90:2b:0b:31:
                    54:fe:bb:98:79:4d:4e:36:f8:bc:ad:5d:91:01:86:
                    67:23:b6:c2:c5:c2:2c:c9:dc:2f:2b:42:af:16:bb:
                    5c:da:c6:99:7c:a3:55:66:80:1f:9c:6c:f1:b0:3c:
                    3b:b7:bc:7a:c9:06:6c:68:ea:06:9f:15:4c:9d:9d:
                    19:c4:03:4c:bf:fa:b9:56:c4:19:4d:fa:dd:63:78:
                    da:3f:4b:97:f7:32:8c:3b:b0:85:d8:bd:5b:63:ac:
                    94:f9:e8:94:88:73:23:77:2d:ad:9d:3b:4b:54:b3:
                    82:3e:9d:f8:d9:06:05:f2:a9:b5:47:e5:32:a4:3a:
                    99:40:3a:5d:da:1e:80:3b:29:9c:eb:82:25:8b:4d:
                    7b:54:c0:f3:01:65:25:2b:7f:27:a4:e7:1f:35:1a:
                    00:2f:7d:45:f0:74:9e:13:63:25:a3:f5:aa:05:44:
                    f6:78:b8:f7:11:79:84:6b:de:18:17:f4:99:db:32:
                    e9:af:18:c4:cb:35:a3:12:e0:cb:25:e5:46:19:37:
                    5d:41:66:f3:96:59:69:fb:9e:c8:66:37:cd:fc:08:
                    0b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:72:FA:6B:74:B7:1E:DC:82:80:AE:ED:A5:62:1C:77:61:60:CF:05
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145624.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab9e::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:e2:22:86:8e:d5:ea:ba:fd:3c:5f:2f:4e:69:ad:78:df:a1:
         b3:ff:14:26:25:5f:7a:27:d2:12:b2:e4:33:8d:c8:5f:82:c9:
         a0:48:41:18:61:8d:71:f2:20:ae:3c:5c:24:6b:d7:ba:de:6e:
         2d:2c:d5:4f:eb:69:13:8e:0d:49:86:04:5e:c4:2b:1e:b6:22:
         f5:fb:f5:e3:61:e0:72:eb:7f:7b:e8:86:e1:e9:64:fe:27:f0:
         39:2f:97:ea:bd:c5:f8:80:dd:c7:b7:01:84:36:c3:8b:22:7b:
         90:f8:4c:9f:70:8a:d9:48:9d:10:ce:99:2a:93:85:b0:2f:35:
         88:08:46:cb:88:1f:bb:af:13:0b:84:71:b3:14:db:dc:18:46:
         ac:5c:29:75:0e:00:4b:ab:8b:97:71:66:52:d3:7d:3f:9d:4d:
         64:64:10:40:1f:e5:d2:74:be:b2:04:90:56:bd:e1:42:96:87:
         23:b2:24:68:85:d1:6d:20:fb:42:a9:c5:85:bc:84:18:9e:02:
         e0:4d:04:02:66:47:dc:9d:8a:4f:41:14:41:df:b5:84:08:bc:
         a0:f3:b3:eb:23:e5:5e:25:54:67:a9:f5:a7:f0:3b:99:01:2b:
         be:69:78:eb:91:1c:d2:25:31:73:39:dc:00:1b:c7:45:f6:60:
         c5:b2:bf:9b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUUzL7WcEUdrqGdLgbtts+LJ3NfpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQ0MDFaFw0yNzA1MjQwNjQ5MDFaMDMxMTAvBgNV
BAMTKDdGNzJGQTZCNzRCNzFFREM4MjgwQUVFREE1NjIxQzc3NjE2MENGMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYK80i5CLeQU88hfwZvdy6YHas
wJ5tdm+d5CiyFBy7vw7a8RtUMeGckCsLMVT+u5h5TU42+LytXZEBhmcjtsLFwizJ
3C8rQq8Wu1zaxpl8o1VmgB+cbPGwPDu3vHrJBmxo6gafFUydnRnEA0y/+rlWxBlN
+t1jeNo/S5f3Mow7sIXYvVtjrJT56JSIcyN3La2dO0tUs4I+nfjZBgXyqbVH5TKk
OplAOl3aHoA7KZzrgiWLTXtUwPMBZSUrfyek5x81GgAvfUXwdJ4TYyWj9aoFRPZ4
uPcReYRr3hgX9JnbMumvGMTLNaMS4Msl5UYZN11BZvOWWWn7nshmN838CAtBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUf3L6a3S3HtyCgK7tpWIcd2FgzwUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrnjANBgkqhkiG9w0BAQsFAAOCAQEAKuIi
ho7V6rr9PF8vTmmteN+hs/8UJiVfeifSErLkM43IX4LJoEhBGGGNcfIgrjxcJGvX
ut5uLSzVT+tpE44NSYYEXsQrHrYi9fv142Hgcut/e+iG4elk/ifwOS+X6r3F+IDd
x7cBhDbDiyJ7kPhMn3CK2UidEM6ZKpOFsC81iAhGy4gfu68TC4RxsxTb3BhGrFwp
dQ4AS6uLl3FmUtN9P51NZGQQQB/l0nS+sgSQVr3hQpaHI7IkaIXRbSD7QqnFhbyE
GJ4C4E0EAmZH3J2KT0EUQd+1hAi8oPOz6yPlXiVUZ6n1p/A7mQErvml465Ec0iUx
czncABvHRfZgxbK/mw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:11 2026 by rpki-client