Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145808.roa
File:                     AS145808.roa (raw, json)
Hash identifier:          LiLi/ePrIbjbY+TyDHVglX0WZT8LuxhFl3lXz6Ldg04=
Subject key identifier:   E5:32:8D:26:AD:14:B3:C8:D6:9E:08:AA:36:C1:9A:64:23:30:BC:3D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0F5AA046FFC935148698BF23FD80BCAF446ABE91
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145808.roa
Signing time:             Tue 26 May 2026 06:31:05 +0000
ROA not before:           Tue 26 May 2026 06:26:05 +0000
ROA not after:            Tue 25 May 2027 06:31:05 +0000
asID:                     145808
IP address blocks:        240a:ac56::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5a:a0:46:ff:c9:35:14:86:98:bf:23:fd:80:bc:af:44:6a:be:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:26:05 2026 GMT
            Not After : May 25 06:31:05 2027 GMT
        Subject: CN=E5328D26AD14B3C8D69E08AA36C19A642330BC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:14:f1:be:43:cd:e6:50:e0:4a:fd:0c:49:
                    90:ce:d2:95:3a:c1:e0:62:e4:1c:3c:0e:79:cd:19:
                    a9:50:da:55:61:4c:fb:4c:0c:dd:46:c7:d9:b1:71:
                    1e:14:3b:bd:5e:f8:da:93:3e:b1:e0:33:7e:a8:70:
                    b2:62:f8:4b:5c:0b:d1:2b:ab:b5:3c:ff:42:7d:6a:
                    99:1b:21:66:22:66:9b:25:e7:5d:2c:fd:fa:98:ef:
                    9f:ca:6c:df:8a:4d:5b:91:32:4a:cc:98:b5:ab:b2:
                    c3:49:f5:0a:43:4e:02:77:37:4f:2b:9b:82:50:84:
                    5d:25:10:e6:6c:ef:26:c2:eb:ab:59:8a:9c:52:87:
                    3d:90:e5:da:63:25:d7:dc:1e:49:83:2d:83:e8:f7:
                    91:3e:02:0e:9e:c7:63:c9:53:cb:e6:6c:3d:6e:a9:
                    8b:e8:88:02:1c:a6:cc:f5:ec:80:62:9a:73:05:12:
                    77:18:1b:10:0f:1f:15:c0:7c:18:71:26:cc:90:a5:
                    fa:21:dc:a6:0c:7b:5b:a3:01:82:d1:56:86:68:45:
                    d9:a3:96:95:99:de:16:84:0b:aa:10:f7:63:d0:c6:
                    6a:89:96:eb:66:b3:c6:e6:73:8b:af:1b:fe:48:40:
                    1b:5f:bd:c9:54:88:34:c0:c8:ab:c6:75:8e:cb:86:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:32:8D:26:AD:14:B3:C8:D6:9E:08:AA:36:C1:9A:64:23:30:BC:3D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac56::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:a0:c7:82:52:d4:ce:27:a1:78:69:5d:5b:4e:d0:b1:18:27:
         9a:ce:bc:55:d3:3d:39:14:ea:ff:c8:20:90:28:f7:cb:b7:f8:
         a6:30:8a:8a:68:4b:6c:ab:f0:c8:87:dd:db:e3:90:a1:4c:19:
         88:e4:36:d6:89:bd:2a:90:93:18:bf:8c:b7:7d:63:40:ae:ff:
         f2:9a:f5:3b:de:d3:31:3b:e9:67:cc:d2:d7:ec:90:39:33:36:
         e8:06:4e:fd:5e:8d:00:2a:f2:c6:5d:e5:4b:7f:62:d5:c2:08:
         a2:0b:52:4f:eb:6c:cc:04:ab:67:e0:f7:7e:f0:25:8c:f2:1e:
         97:1c:58:8b:51:64:e3:d9:12:17:80:53:d3:ee:15:dd:26:c8:
         53:12:91:86:f0:27:f0:19:8f:a1:9e:fe:c3:c5:10:db:c3:bb:
         37:5e:fc:ef:9c:dd:af:e0:93:08:ac:32:a1:3f:3f:6d:3c:6d:
         f8:74:13:d2:ad:97:da:e4:93:b5:9e:e4:07:8c:24:94:14:f3:
         02:b3:b2:65:c5:10:14:95:6a:71:b5:ac:b3:51:22:ac:4e:d8:
         9c:01:f7:1a:5a:63:db:b0:46:90:62:5a:35:de:ad:aa:33:f2:
         0c:4a:63:bb:d9:6c:31:84:08:b7:11:c2:39:e6:36:5f:b6:1d:
         7d:a5:f2:e3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUD1qgRv/JNRSGmL8j/YC8r0RqvpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI2MDVaFw0yNzA1MjUwNjMxMDVaMDMxMTAvBgNV
BAMTKEU1MzI4RDI2QUQxNEIzQzhENjlFMDhBQTM2QzE5QTY0MjMzMEJDM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJhTxvkPN5lDgSv0MSZDO0pU6
weBi5Bw8DnnNGalQ2lVhTPtMDN1Gx9mxcR4UO71e+NqTPrHgM36ocLJi+EtcC9Er
q7U8/0J9apkbIWYiZpsl510s/fqY75/KbN+KTVuRMkrMmLWrssNJ9QpDTgJ3N08r
m4JQhF0lEOZs7ybC66tZipxShz2Q5dpjJdfcHkmDLYPo95E+Ag6ex2PJU8vmbD1u
qYvoiAIcpsz17IBimnMFEncYGxAPHxXAfBhxJsyQpfoh3KYMe1ujAYLRVoZoRdmj
lpWZ3haEC6oQ92PQxmqJlutms8bmc4uvG/5IQBtfvclUiDTAyKvGdY7LhvWnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU5TKNJq0Us8jWngiqNsGaZCMwvD0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODA4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsVjANBgkqhkiG9w0BAQsFAAOCAQEAbqDH
glLUzieheGldW07QsRgnms68VdM9ORTq/8ggkCj3y7f4pjCKimhLbKvwyIfd2+OQ
oUwZiOQ21om9KpCTGL+Mt31jQK7/8pr1O97TMTvpZ8zS1+yQOTM26AZO/V6NACry
xl3lS39i1cIIogtST+tszASrZ+D3fvAljPIelxxYi1Fk49kSF4BT0+4V3SbIUxKR
hvAn8BmPoZ7+w8UQ28O7N17875zdr+CTCKwyoT8/bTxt+HQT0q2X2uSTtZ7kB4wk
lBTzArOyZcUQFJVqcbWss1EirE7YnAH3Glpj27BGkGJaNd6tqjPyDEpju9lsMYQI
txHCOeY2X7YdfaXy4w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:31 2026 by rpki-client