Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145892.roa
File:                     AS145892.roa (raw, json)
Hash identifier:          0AlUWT6vQp4+U/twCeo9yDjA48gPFL4jd/dR00TkmaA=
Subject key identifier:   21:CD:88:B6:D0:5A:6F:A5:0F:80:97:93:FF:08:5D:A5:F3:E1:67:43
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       78A4AA339F45EF8CD79EB0F70BBD80430C1013BF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145892.roa
Signing time:             Fri 22 May 2026 02:47:37 +0000
ROA not before:           Fri 22 May 2026 02:42:37 +0000
ROA not after:            Fri 21 May 2027 02:47:37 +0000
asID:                     145892
IP address blocks:        240a:acaa::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a4:aa:33:9f:45:ef:8c:d7:9e:b0:f7:0b:bd:80:43:0c:10:13:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:37 2026 GMT
            Not After : May 21 02:47:37 2027 GMT
        Subject: CN=21CD88B6D05A6FA50F809793FF085DA5F3E16743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:f8:25:3c:6c:63:52:73:b8:c1:6b:fd:5a:
                    fa:5c:65:ac:b7:11:72:47:df:28:6f:90:a0:67:da:
                    32:5d:17:56:bb:7f:b8:40:c2:98:bc:15:d5:36:eb:
                    e8:37:4e:70:76:53:f7:67:f0:f0:6c:e0:d4:6b:c2:
                    e9:bd:84:d4:ca:e1:14:0f:48:7d:d9:68:e3:0a:17:
                    65:94:63:51:ec:fb:89:68:f9:f9:82:03:d9:cd:d8:
                    7b:c4:99:bd:25:87:ae:20:d2:c5:23:f1:6c:e7:b7:
                    09:63:ae:98:ad:f5:6c:92:0f:b6:f1:0e:14:0b:7d:
                    31:72:57:ed:1d:6f:c0:f0:26:6a:9f:32:b4:cd:37:
                    a9:c6:0e:ed:67:47:1f:56:47:a9:6c:71:e1:a9:fd:
                    ef:5f:00:77:8c:f1:6e:c4:69:a7:9e:33:d3:9d:a7:
                    ff:f0:e3:f3:0c:b4:d1:b7:41:2a:0e:b2:c8:c6:6c:
                    6a:66:8b:50:b4:2c:1a:08:43:03:77:78:0c:7b:6a:
                    05:39:8c:f3:39:3c:6b:ac:da:7a:0e:b2:61:9d:68:
                    4a:a0:5a:c1:79:ff:fd:ac:7f:6f:1e:87:28:ad:a6:
                    5f:22:bd:3d:70:f7:d2:bf:4b:bf:e1:46:3f:09:a4:
                    98:0a:0b:f6:7a:4a:37:44:a2:f5:9b:19:7e:82:c2:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CD:88:B6:D0:5A:6F:A5:0F:80:97:93:FF:08:5D:A5:F3:E1:67:43
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145892.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acaa::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:74:e7:49:20:f7:7d:25:e7:d5:19:aa:6a:0c:b0:39:a1:83:
         0a:13:d0:2b:19:9b:5b:71:8b:50:0e:f4:0c:a2:be:e7:ea:95:
         27:f3:b6:eb:a9:91:09:50:c5:e0:73:31:05:45:19:05:3a:1c:
         a9:cb:d2:27:3a:57:a8:9c:61:cf:d7:de:3d:4a:93:03:4c:e4:
         a9:34:aa:48:aa:fc:9b:6b:ac:c0:48:55:b7:36:5d:80:46:48:
         4a:c2:10:46:8f:e3:a0:b8:27:9d:28:c4:89:12:0e:88:1f:fc:
         29:c6:d4:1e:55:2e:ac:ea:8f:eb:13:d8:9e:b4:e7:b8:30:3e:
         09:25:c4:e3:15:7a:44:cb:77:ec:57:2a:f0:10:3c:f4:8a:12:
         c5:d6:c6:1a:56:52:2b:22:e8:d8:4c:49:a9:0c:de:29:3d:f0:
         fd:85:f7:11:7a:30:eb:d5:59:ac:af:24:33:55:84:0c:89:84:
         bc:de:92:86:0f:3e:5e:85:de:36:06:6f:62:16:03:0a:1b:39:
         d7:57:2e:13:87:32:cc:d6:36:61:e9:af:2f:f2:a7:38:17:fb:
         91:89:68:40:f3:28:f0:cb:4d:69:aa:fe:74:7d:19:18:c8:15:
         d7:4e:7c:7a:47:ab:2a:8f:2e:ba:f2:af:89:4c:ab:eb:08:52:
         2d:78:5f:cd
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUeKSqM59F74zXnrD3C72AQwwQE78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzdaFw0yNzA1MjEwMjQ3MzdaMDMxMTAvBgNV
BAMTKDIxQ0Q4OEI2RDA1QTZGQTUwRjgwOTc5M0ZGMDg1REE1RjNFMTY3NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuPglPGxjUnO4wWv9WvpcZay3
EXJH3yhvkKBn2jJdF1a7f7hAwpi8FdU26+g3TnB2U/dn8PBs4NRrwum9hNTK4RQP
SH3ZaOMKF2WUY1Hs+4lo+fmCA9nN2HvEmb0lh64g0sUj8Wzntwljrpit9WySD7bx
DhQLfTFyV+0db8DwJmqfMrTNN6nGDu1nRx9WR6lsceGp/e9fAHeM8W7EaaeeM9Od
p//w4/MMtNG3QSoOssjGbGpmi1C0LBoIQwN3eAx7agU5jPM5PGus2noOsmGdaEqg
WsF5//2sf28ehyitpl8ivT1w99K/S7/hRj8JpJgKC/Z6SjdEovWbGX6CwvA9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUIc2IttBab6UPgJeT/whdpfPhZ0MwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsqjANBgkqhkiG9w0BAQsFAAOCAQEAAXTn
SSD3fSXn1RmqagywOaGDChPQKxmbW3GLUA70DKK+5+qVJ/O266mRCVDF4HMxBUUZ
BTocqcvSJzpXqJxhz9fePUqTA0zkqTSqSKr8m2uswEhVtzZdgEZISsIQRo/joLgn
nSjEiRIOiB/8KcbUHlUurOqP6xPYnrTnuDA+CSXE4xV6RMt37Fcq8BA89IoSxdbG
GlZSKyLo2ExJqQzeKT3w/YX3EXow69VZrK8kM1WEDImEvN6Shg8+XoXeNgZvYhYD
Chs511cuE4cyzNY2YemvL/KnOBf7kYloQPMo8MtNaar+dH0ZGMgV1058ekerKo8u
uvKviUyr6whSLXhfzQ==
-----END CERTIFICATE-----