Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145922.roa
File:                     AS145922.roa (raw, json)
Hash identifier:          6WC+kml6zGjCVUlKcLEKV9Z44awvkiIF5Ftt0e4H6JY=
Subject key identifier:   F3:0C:2C:51:4C:BE:E5:4C:DB:B9:F9:E7:8E:29:76:61:3B:86:5E:6F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7BB58259460BAE50DE2A7A85552DFCABCFCFF097
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145922.roa
Signing time:             Tue 26 May 2026 01:13:34 +0000
ROA not before:           Tue 26 May 2026 01:08:34 +0000
ROA not after:            Tue 25 May 2027 01:13:34 +0000
asID:                     145922
IP address blocks:        240a:acc8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b5:82:59:46:0b:ae:50:de:2a:7a:85:55:2d:fc:ab:cf:cf:f0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:34 2026 GMT
            Not After : May 25 01:13:34 2027 GMT
        Subject: CN=F30C2C514CBEE54CDBB9F9E78E2976613B865E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:e6:8e:19:30:c5:53:8d:56:32:d6:5d:39:
                    1f:9e:db:34:b2:c1:5f:3f:5a:55:f7:4c:22:60:c1:
                    88:11:9d:0a:d3:87:b0:4a:96:27:71:5c:50:42:ba:
                    ee:43:60:86:76:41:f4:38:34:42:4c:22:6d:8d:9e:
                    16:6c:89:54:98:f8:f5:1d:3e:2f:08:5e:e9:56:e0:
                    de:6d:f0:ce:20:35:fa:5c:c8:10:e4:5d:c1:10:70:
                    fc:8c:ae:dc:93:4a:16:f6:fa:53:47:59:af:f5:1f:
                    d6:56:04:51:1c:5b:71:5d:4e:81:c9:a2:56:e6:1c:
                    be:86:14:83:00:a3:50:98:d4:49:e2:e7:d6:1d:74:
                    8e:a9:e5:24:f2:26:c8:50:78:e9:5e:78:06:62:a9:
                    a4:de:13:0a:af:ee:c6:b5:af:79:f4:3c:9d:aa:a8:
                    cb:87:b7:22:27:6a:1f:7a:61:c3:c5:bc:4c:28:74:
                    04:c7:c3:4e:56:15:e2:1b:d3:48:5a:60:3b:0e:86:
                    88:7b:39:b2:b4:3d:db:79:ef:e1:98:ee:56:86:e7:
                    33:82:79:d7:d8:de:3d:e7:e8:08:2f:d1:d9:e7:8a:
                    df:70:43:86:be:9d:69:23:60:88:ea:63:95:c9:2a:
                    fb:51:23:fe:38:1d:93:ca:42:cf:9a:d3:94:b2:91:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0C:2C:51:4C:BE:E5:4C:DB:B9:F9:E7:8E:29:76:61:3B:86:5E:6F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145922.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:3a:fd:c0:43:c9:03:12:3c:af:ab:23:00:b9:a0:03:db:d5:
         cd:ed:0c:b1:1d:dd:3c:d1:44:bd:78:a3:33:40:d8:73:8b:89:
         1c:50:13:4a:4f:d4:b3:22:26:b3:05:aa:8d:2b:be:d6:ab:d0:
         29:5c:c0:bd:4a:ff:25:3c:b2:b7:16:b2:40:9c:af:b2:fc:75:
         f2:af:20:2b:10:5c:75:e4:9f:10:f9:fe:09:97:07:6e:a0:6b:
         09:a3:48:7f:20:23:68:0b:03:4e:8b:e9:bf:20:65:0b:d1:88:
         21:e1:79:b9:0a:9d:9b:82:f5:d4:2f:2a:10:f5:94:0a:03:2f:
         aa:2f:c1:60:75:fd:97:ea:d3:90:d7:9b:e4:3a:1c:7c:81:5a:
         5b:34:88:9d:62:07:36:cc:75:2a:8a:27:4e:39:5c:6d:c9:59:
         8b:39:e6:18:bd:6c:6e:b7:7b:9b:1f:dd:2e:a7:cf:e5:bd:32:
         b3:ee:76:bc:c9:d2:6b:e3:0a:cc:07:24:36:4f:7f:20:18:0f:
         fa:2e:79:c0:14:c7:a2:8a:e1:af:43:7c:f4:d5:99:cf:88:0c:
         fa:27:7d:5d:dd:c9:a6:3c:42:88:17:5e:d9:53:1d:ea:93:42:
         88:20:a0:a6:1a:2b:f5:87:42:37:ca:49:35:e5:d0:41:e2:f2:
         24:b7:f5:b0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUe7WCWUYLrlDeKnqFVS38q8/P8JcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MzRaFw0yNzA1MjUwMTEzMzRaMDMxMTAvBgNV
BAMTKEYzMEMyQzUxNENCRUU1NENEQkI5RjlFNzhFMjk3NjYxM0I4NjVFNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6uaOGTDFU41WMtZdOR+e2zSy
wV8/WlX3TCJgwYgRnQrTh7BKlidxXFBCuu5DYIZ2QfQ4NEJMIm2NnhZsiVSY+PUd
Pi8IXulW4N5t8M4gNfpcyBDkXcEQcPyMrtyTShb2+lNHWa/1H9ZWBFEcW3FdToHJ
olbmHL6GFIMAo1CY1Eni59YddI6p5STyJshQeOleeAZiqaTeEwqv7sa1r3n0PJ2q
qMuHtyInah96YcPFvEwodATHw05WFeIb00haYDsOhoh7ObK0Pdt57+GY7laG5zOC
edfY3j3n6Agv0dnnit9wQ4a+nWkjYIjqY5XJKvtRI/44HZPKQs+a05SykQxnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU8wwsUUy+5Uzbufnnjil2YTuGXm8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTIyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsyDANBgkqhkiG9w0BAQsFAAOCAQEAEDr9
wEPJAxI8r6sjALmgA9vVze0MsR3dPNFEvXijM0DYc4uJHFATSk/UsyImswWqjSu+
1qvQKVzAvUr/JTyytxayQJyvsvx18q8gKxBcdeSfEPn+CZcHbqBrCaNIfyAjaAsD
TovpvyBlC9GIIeF5uQqdm4L11C8qEPWUCgMvqi/BYHX9l+rTkNeb5DocfIFaWzSI
nWIHNsx1KoonTjlcbclZiznmGL1sbrd7mx/dLqfP5b0ys+52vMnSa+MKzAckNk9/
IBgP+i55wBTHoorhr0N89NWZz4gM+id9Xd3JpjxCiBde2VMd6pNCiCCgphor9YdC
N8pJNeXQQeLyJLf1sA==
-----END CERTIFICATE-----