Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145725.roa
File:                     AS145725.roa (raw, json)
Hash identifier:          C6hDygQXb8W6Q18dPB4gbQnareOn6UejB+B09mofpbE=
Subject key identifier:   5A:22:17:09:A5:D9:82:7A:A1:2A:8A:F5:55:F7:4C:EC:7B:6E:60:29
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       09C6AA75F034B9B1380BFA713B2B5EB2387BA7FE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145725.roa
Signing time:             Fri 22 May 2026 06:58:48 +0000
ROA not before:           Fri 22 May 2026 06:53:48 +0000
ROA not after:            Fri 21 May 2027 06:58:48 +0000
asID:                     145725
IP address blocks:        240a:ac03::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c6:aa:75:f0:34:b9:b1:38:0b:fa:71:3b:2b:5e:b2:38:7b:a7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:48 2026 GMT
            Not After : May 21 06:58:48 2027 GMT
        Subject: CN=5A221709A5D9827AA12A8AF555F74CEC7B6E6029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:77:8f:35:32:f5:9c:08:bc:d8:19:42:4f:
                    25:82:97:05:64:0d:2b:b2:6c:82:be:c1:33:8d:09:
                    d9:a1:d5:c9:10:95:a7:c0:83:32:a5:fc:75:04:55:
                    7c:f7:fa:80:98:ba:d7:82:8c:e1:0e:79:f6:4b:98:
                    3a:8d:98:75:d7:fb:c3:8b:07:7f:a4:9a:fc:73:a6:
                    27:a1:30:c8:d1:78:12:d6:55:59:43:de:61:56:68:
                    68:76:ca:ae:86:69:78:af:c3:8e:10:74:04:e5:9a:
                    8c:53:a0:ca:fb:58:52:72:56:d4:b8:07:e2:62:9f:
                    64:79:d4:3a:77:99:ab:9e:48:74:6f:89:08:fe:fc:
                    99:03:44:80:12:c5:d7:7b:e4:14:ad:4b:f7:76:ce:
                    5b:2a:49:34:ee:b6:da:31:1a:9f:b4:15:2f:f9:03:
                    8f:d6:40:ad:fb:f2:67:6a:46:79:bb:92:d2:ca:70:
                    66:d6:a7:5d:66:b9:a0:cc:de:3b:86:e1:7d:23:e6:
                    cb:0c:22:a5:43:09:8d:ae:0e:68:97:e6:db:b4:0a:
                    a5:7f:29:cb:f9:07:c9:58:40:95:9e:60:59:a0:f7:
                    2d:e7:7f:ff:f0:e5:4e:0e:82:ef:c4:96:86:ee:6e:
                    a5:98:0c:8e:e7:69:82:58:71:fc:5e:bb:f0:d5:dd:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:22:17:09:A5:D9:82:7A:A1:2A:8A:F5:55:F7:4C:EC:7B:6E:60:29
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145725.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac03::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:1d:40:77:89:30:73:8d:4e:5c:a8:75:77:5c:15:8b:97:bf:
         47:79:4b:be:01:e5:88:7a:1c:ed:37:24:3c:74:63:16:c1:69:
         0e:91:6f:1b:a7:51:d5:28:9d:0d:66:47:dc:ac:62:44:c9:4c:
         fc:86:da:37:1e:ab:14:63:52:a8:f8:3c:bc:45:10:b5:ea:96:
         f7:19:3a:2a:6d:0f:da:d0:02:93:a4:5f:30:71:c9:6a:00:1d:
         b9:b3:d0:0a:5c:36:1c:df:8d:49:d0:1c:e9:32:ec:21:57:65:
         52:54:42:37:8b:73:05:ca:67:66:20:fd:6e:b7:53:e4:db:77:
         7d:91:b4:a5:25:43:2e:d7:ee:80:24:bd:3e:d1:8d:2b:b3:96:
         d8:2f:9c:e7:4d:9c:31:89:b3:f0:fe:30:bb:72:77:c5:0c:f6:
         c5:42:dc:7d:91:dd:78:92:d2:08:5e:0d:69:78:0f:8f:a5:62:
         e9:c5:40:d0:9e:7c:13:fa:4b:90:f9:77:6e:1b:1f:01:66:53:
         11:fe:47:bb:21:95:98:03:39:18:db:3d:4e:2c:45:79:da:a8:
         43:df:06:fb:a3:ca:fc:50:7b:44:91:58:c7:9f:2a:fd:60:d4:
         5f:e1:04:dc:0e:04:72:a0:6a:7e:d8:14:c6:11:b6:4d:41:1f:
         e7:ea:17:4f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUCcaqdfA0ubE4C/pxOytesjh7p/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzNDhaFw0yNzA1MjEwNjU4NDhaMDMxMTAvBgNV
BAMTKDVBMjIxNzA5QTVEOTgyN0FBMTJBOEFGNTU1Rjc0Q0VDN0I2RTYwMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybHePNTL1nAi82BlCTyWClwVk
DSuybIK+wTONCdmh1ckQlafAgzKl/HUEVXz3+oCYuteCjOEOefZLmDqNmHXX+8OL
B3+kmvxzpiehMMjReBLWVVlD3mFWaGh2yq6GaXivw44QdATlmoxToMr7WFJyVtS4
B+Jin2R51Dp3maueSHRviQj+/JkDRIASxdd75BStS/d2zlsqSTTuttoxGp+0FS/5
A4/WQK378mdqRnm7ktLKcGbWp11muaDM3juG4X0j5ssMIqVDCY2uDmiX5tu0CqV/
Kcv5B8lYQJWeYFmg9y3nf//w5U4Ogu/ElobubqWYDI7naYJYcfxeu/DV3QjPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUWiIXCaXZgnqhKor1VfdM7HtuYCkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsAzANBgkqhkiG9w0BAQsFAAOCAQEANx1A
d4kwc41OXKh1d1wVi5e/R3lLvgHliHoc7TckPHRjFsFpDpFvG6dR1SidDWZH3Kxi
RMlM/IbaNx6rFGNSqPg8vEUQteqW9xk6Km0P2tACk6RfMHHJagAdubPQClw2HN+N
SdAc6TLsIVdlUlRCN4tzBcpnZiD9brdT5Nt3fZG0pSVDLtfugCS9PtGNK7OW2C+c
502cMYmz8P4wu3J3xQz2xULcfZHdeJLSCF4NaXgPj6Vi6cVA0J58E/pLkPl3bhsf
AWZTEf5HuyGVmAM5GNs9TixFedqoQ98G+6PK/FB7RJFYx58q/WDUX+EE3A4EcqBq
ftgUxhG2TUEf5+oXTw==
-----END CERTIFICATE-----