Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145875.roa
File:                     AS145875.roa (raw, json)
Hash identifier:          odP9+2yGQSS3m0wShSJxpoLkh5jMrmHtKH+JNGQzcOk=
Subject key identifier:   FE:4F:8F:49:1D:1B:EB:86:8C:4D:6C:1B:93:D4:80:9D:96:41:3B:DF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4DB117CDF8CB11DA2841FA4F69AAAE63EDC83CEF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145875.roa
Signing time:             Mon 25 May 2026 01:51:17 +0000
ROA not before:           Mon 25 May 2026 01:46:17 +0000
ROA not after:            Mon 24 May 2027 01:51:17 +0000
asID:                     145875
IP address blocks:        240a:ac99::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b1:17:cd:f8:cb:11:da:28:41:fa:4f:69:aa:ae:63:ed:c8:3c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:17 2026 GMT
            Not After : May 24 01:51:17 2027 GMT
        Subject: CN=FE4F8F491D1BEB868C4D6C1B93D4809D96413BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:d2:05:ab:a9:89:ab:01:ec:c7:92:3a:83:
                    dd:33:13:80:ac:a0:24:8c:fd:8a:37:55:20:78:d3:
                    e9:93:11:f9:cc:00:d2:06:c9:20:9f:bb:7a:65:89:
                    98:dc:bb:4d:cf:9a:81:83:22:e2:23:08:bb:9b:45:
                    c5:30:d9:c8:d6:9f:b0:6a:3d:bb:d4:4b:84:b6:1e:
                    93:95:6b:59:35:ef:28:ec:6e:f4:21:8a:f9:99:1c:
                    3f:33:b3:51:75:00:6e:8f:d5:8c:a5:69:d2:74:cd:
                    69:18:87:d9:fb:8b:c8:5d:1d:31:78:cd:cc:97:b6:
                    76:cb:e7:8e:45:b6:aa:75:2c:23:81:b6:ce:ca:a9:
                    26:eb:1f:06:b5:81:2d:65:64:b7:d6:a6:da:ab:45:
                    80:d9:c0:86:ae:df:3d:bd:28:fe:f2:2a:44:de:31:
                    a9:21:3a:e5:46:78:4b:b0:f1:20:2a:b1:32:81:34:
                    da:f3:1b:3b:17:f8:92:51:ab:94:54:c2:94:05:e4:
                    ef:50:7a:ee:bc:4d:b8:07:69:7d:21:f4:42:c1:a8:
                    39:f9:ac:e8:0d:ed:55:ec:05:65:40:cc:f4:e5:bc:
                    66:53:53:f0:49:f7:24:93:c8:96:47:10:b7:d8:0a:
                    d8:ad:ad:10:7c:d2:27:7e:6a:39:c5:72:2b:c1:48:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4F:8F:49:1D:1B:EB:86:8C:4D:6C:1B:93:D4:80:9D:96:41:3B:DF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145875.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac99::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:9b:0e:42:06:4a:99:7b:20:b4:96:3e:c7:cc:9f:cd:cc:75:
         59:52:a6:07:c8:06:9b:bb:89:31:2c:b8:33:93:24:a3:21:62:
         63:79:da:65:20:1f:af:a8:f7:30:1c:e4:37:4b:03:d6:d1:d0:
         23:1e:aa:ac:b2:c4:1d:f1:15:e3:b5:4a:ec:99:5c:a1:dd:48:
         5d:27:6a:82:88:dd:c1:5c:ac:34:d6:35:ef:5f:77:c0:ec:34:
         ec:27:81:fb:74:86:75:7b:5b:0d:bd:2a:00:62:50:a8:af:3f:
         5a:77:87:e6:18:29:0b:81:a3:1a:df:1a:f5:5b:8d:cb:6a:ae:
         ff:04:b3:44:10:94:cf:d3:59:c5:4d:53:c3:d2:01:ea:e7:5c:
         55:a5:ed:d5:05:a6:cb:8a:b7:af:83:c5:13:24:97:5a:71:5f:
         23:fd:df:8a:24:1f:6b:55:b7:e7:b2:f5:5a:e1:63:01:6a:fc:
         aa:fb:a2:b4:34:ae:ec:d0:df:34:8b:bd:4b:f5:84:d9:45:c3:
         32:95:c2:4f:47:6d:12:c2:b9:59:91:c4:ed:5c:af:c8:c8:a8:
         33:35:a3:2d:63:30:80:8e:99:81:1f:a8:5a:44:b3:7b:9c:cc:
         ae:00:79:a0:b4:9c:b4:e2:a6:0d:2f:57:8e:9d:a5:96:6c:8a:
         ec:b7:38:65
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTbEXzfjLEdooQfpPaaquY+3IPO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MTdaFw0yNzA1MjQwMTUxMTdaMDMxMTAvBgNV
BAMTKEZFNEY4RjQ5MUQxQkVCODY4QzRENkMxQjkzRDQ4MDlEOTY0MTNCREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7N9IFq6mJqwHsx5I6g90zE4Cs
oCSM/Yo3VSB40+mTEfnMANIGySCfu3pliZjcu03PmoGDIuIjCLubRcUw2cjWn7Bq
PbvUS4S2HpOVa1k17yjsbvQhivmZHD8zs1F1AG6P1YyladJ0zWkYh9n7i8hdHTF4
zcyXtnbL545Ftqp1LCOBts7KqSbrHwa1gS1lZLfWptqrRYDZwIau3z29KP7yKkTe
MakhOuVGeEuw8SAqsTKBNNrzGzsX+JJRq5RUwpQF5O9Qeu68TbgHaX0h9ELBqDn5
rOgN7VXsBWVAzPTlvGZTU/BJ9ySTyJZHELfYCtitrRB80id+ajnFcivBSFfLAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/k+PSR0b64aMTWwbk9SAnZZBO98wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsmTANBgkqhkiG9w0BAQsFAAOCAQEAWZsO
QgZKmXsgtJY+x8yfzcx1WVKmB8gGm7uJMSy4M5MkoyFiY3naZSAfr6j3MBzkN0sD
1tHQIx6qrLLEHfEV47VK7Jlcod1IXSdqgojdwVysNNY17193wOw07CeB+3SGdXtb
Db0qAGJQqK8/WneH5hgpC4GjGt8a9VuNy2qu/wSzRBCUz9NZxU1Tw9IB6udcVaXt
1QWmy4q3r4PFEySXWnFfI/3fiiQfa1W357L1WuFjAWr8qvuitDSu7NDfNIu9S/WE
2UXDMpXCT0dtEsK5WZHE7VyvyMioMzWjLWMwgI6ZgR+oWkSze5zMrgB5oLSctOKm
DS9Xjp2llmyK7Lc4ZQ==
-----END CERTIFICATE-----