Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145966.roa
File:                     AS145966.roa (raw, json)
Hash identifier:          LLYcTcrq74fhkqS0L15SlMCbmjx7cBmDM4VYKCbNXes=
Subject key identifier:   A9:06:37:BD:4B:F5:95:03:23:D4:D1:F0:DC:E0:EB:70:DC:AC:B7:48
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       314E61C2402EFFA3E4D460C74280063E6103281C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145966.roa
Signing time:             Tue 26 May 2026 03:16:49 +0000
ROA not before:           Tue 26 May 2026 03:11:49 +0000
ROA not after:            Tue 25 May 2027 03:16:49 +0000
asID:                     145966
IP address blocks:        240a:acf4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4e:61:c2:40:2e:ff:a3:e4:d4:60:c7:42:80:06:3e:61:03:28:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:49 2026 GMT
            Not After : May 25 03:16:49 2027 GMT
        Subject: CN=A90637BD4BF5950323D4D1F0DCE0EB70DCACB748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:98:c4:bf:31:1a:17:cf:10:9d:77:d9:bd:27:
                    05:d8:22:37:d5:ff:20:2f:75:2d:7e:14:3f:3e:c4:
                    d2:2b:3a:ca:f3:9e:69:f4:45:cc:44:6a:36:29:68:
                    f5:be:76:a1:f4:83:6e:c8:26:d6:cd:60:91:3a:c6:
                    b8:42:07:af:72:8e:68:83:ea:71:06:9f:bf:7c:3e:
                    46:53:ca:04:0f:5d:e6:f4:36:6c:0c:15:60:ab:9d:
                    84:0c:3e:a6:eb:c3:69:5d:7d:5d:59:e7:ab:66:3e:
                    dd:1f:9a:f5:3f:02:bc:55:6e:8a:f0:8c:6b:a6:d0:
                    74:21:66:ae:4d:e4:c0:42:60:c6:e7:23:55:f3:16:
                    d9:9c:6e:d7:03:b5:b0:ad:df:f0:28:5f:92:c9:09:
                    90:bf:ba:eb:0d:93:36:8f:37:0d:0a:2a:70:be:4a:
                    30:9e:23:72:48:48:13:78:f4:3a:9c:39:46:b2:9c:
                    bc:e8:52:85:86:36:ab:c9:a3:09:df:8d:bb:63:4c:
                    fc:53:5c:24:c7:97:2e:5d:19:18:b3:0f:31:fa:b2:
                    19:01:b7:ff:67:48:f7:8b:aa:ed:87:2e:fd:e9:ee:
                    5b:6f:40:f4:c9:23:52:c0:76:6a:ee:93:3d:42:ba:
                    1b:c9:eb:80:7f:16:28:66:cd:2d:b1:44:73:64:80:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:06:37:BD:4B:F5:95:03:23:D4:D1:F0:DC:E0:EB:70:DC:AC:B7:48
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145966.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acf4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:c3:6c:12:90:b5:cc:ec:fa:10:8a:ff:74:42:2f:ac:39:a0:
         89:3e:cb:68:66:2f:b6:1a:32:9e:54:df:f2:da:3b:a8:c7:3f:
         99:0c:88:b5:a9:ae:d5:34:24:2d:a2:9d:4a:aa:e9:f5:b0:1c:
         90:65:dc:0a:9c:ed:c3:24:e2:b6:58:42:92:63:ff:b3:32:e2:
         7d:95:7d:52:02:7c:ad:e2:87:6e:ce:3c:a3:82:2d:e7:49:3d:
         9f:0c:29:ab:59:63:ca:01:4b:ab:43:3f:a6:fd:f5:ac:47:6d:
         5a:85:9d:ef:0f:0b:a6:9c:48:d3:0c:d3:3a:3f:15:4c:4d:4d:
         73:02:2f:db:d0:2f:e4:a6:5c:dc:cc:20:26:1f:ba:14:28:cb:
         9d:c2:50:b7:32:b1:31:4c:e4:90:9f:03:fe:19:4c:db:4a:39:
         12:ce:4d:ef:e0:ea:3e:ad:ed:e1:80:3c:7a:4a:e5:f7:22:1b:
         1b:c9:b5:cd:b1:79:80:60:f8:51:48:5e:af:a0:cf:fa:a2:c7:
         4a:8c:37:76:83:43:1d:db:48:ce:0f:35:77:21:01:2b:2c:44:
         87:e6:8e:88:df:bb:b8:80:32:48:09:76:2f:67:66:e9:99:a9:
         57:1c:47:84:63:8a:98:05:cd:e1:4d:f9:70:21:06:78:77:0d:
         4f:5b:24:c1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMU5hwkAu/6Pk1GDHQoAGPmEDKBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNDlaFw0yNzA1MjUwMzE2NDlaMDMxMTAvBgNV
BAMTKEE5MDYzN0JENEJGNTk1MDMyM0Q0RDFGMERDRTBFQjcwRENBQ0I3NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNmMS/MRoXzxCdd9m9JwXYIjfV
/yAvdS1+FD8+xNIrOsrznmn0RcxEajYpaPW+dqH0g27IJtbNYJE6xrhCB69yjmiD
6nEGn798PkZTygQPXeb0NmwMFWCrnYQMPqbrw2ldfV1Z56tmPt0fmvU/ArxVborw
jGum0HQhZq5N5MBCYMbnI1XzFtmcbtcDtbCt3/AoX5LJCZC/uusNkzaPNw0KKnC+
SjCeI3JISBN49DqcOUaynLzoUoWGNqvJownfjbtjTPxTXCTHly5dGRizDzH6shkB
t/9nSPeLqu2HLv3p7ltvQPTJI1LAdmrukz1CuhvJ64B/FihmzS2xRHNkgHArAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUqQY3vUv1lQMj1NHw3ODrcNyst0gwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqs9DANBgkqhkiG9w0BAQsFAAOCAQEACsNs
EpC1zOz6EIr/dEIvrDmgiT7LaGYvthoynlTf8to7qMc/mQyItamu1TQkLaKdSqrp
9bAckGXcCpztwyTitlhCkmP/szLifZV9UgJ8reKHbs48o4It50k9nwwpq1ljygFL
q0M/pv31rEdtWoWd7w8LppxI0wzTOj8VTE1NcwIv29Av5KZc3MwgJh+6FCjLncJQ
tzKxMUzkkJ8D/hlM20o5Es5N7+DqPq3t4YA8ekrl9yIbG8m1zbF5gGD4UUher6DP
+qLHSow3doNDHdtIzg81dyEBKyxEh+aOiN+7uIAySAl2L2dm6ZmpVxxHhGOKmAXN
4U35cCEGeHcNT1skwQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:14 2026 by rpki-client