Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145992.roa
File:                     AS145992.roa (raw, json)
Hash identifier:          GKUU6iCupZvd2PhfzEB7gQKe+FLtXk44lULfFw+Awyg=
Subject key identifier:   FA:AF:0E:D6:53:64:81:E8:02:25:4B:59:46:DD:5D:87:AF:11:8C:58
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7AEA40CF7CF86614232B498FDEF785F3615A4A61
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145992.roa
Signing time:             Mon 25 May 2026 06:28:15 +0000
ROA not before:           Mon 25 May 2026 06:23:15 +0000
ROA not after:            Mon 24 May 2027 06:28:15 +0000
asID:                     145992
IP address blocks:        240a:ad0e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ea:40:cf:7c:f8:66:14:23:2b:49:8f:de:f7:85:f3:61:5a:4a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:15 2026 GMT
            Not After : May 24 06:28:15 2027 GMT
        Subject: CN=FAAF0ED6536481E802254B5946DD5D87AF118C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:e3:77:21:64:81:51:39:d0:83:d3:cf:b2:
                    dd:12:6a:86:e8:b8:18:81:62:b2:3b:aa:bc:3a:28:
                    d3:d1:54:84:6e:f3:0f:95:b0:00:8d:56:32:a6:cf:
                    93:22:de:7d:bc:5e:68:cc:9b:6e:ea:9d:73:c1:98:
                    06:87:3a:30:72:40:99:7e:be:e9:ab:ae:f0:67:86:
                    41:84:4e:18:f3:35:5d:6a:30:04:c5:47:4d:69:3d:
                    3f:58:a4:55:0f:3f:97:cb:51:5b:ec:c8:b2:42:90:
                    c9:5b:d7:58:41:e5:a3:d2:41:8b:e5:2c:9b:4c:0c:
                    b3:20:cc:c4:52:08:d6:f1:f4:64:4a:b0:94:e5:f6:
                    1c:88:df:c9:c4:80:d9:7c:7e:a7:0d:ff:19:6f:b4:
                    d0:7a:9f:b0:36:e4:8a:b6:3d:60:27:bc:2e:f2:33:
                    ae:dd:6c:39:22:ff:a8:6c:30:8c:02:21:4f:a4:72:
                    09:90:0f:83:57:79:5d:c8:7b:dc:19:80:56:59:8e:
                    51:10:1e:ec:b1:43:2d:3a:15:72:d2:0c:8c:d5:7d:
                    ae:8d:b8:5e:8a:83:4c:76:74:46:86:d0:65:41:01:
                    ca:05:f4:2c:c7:30:cf:3c:b8:89:ff:fa:24:69:48:
                    d0:e3:df:a1:8d:f6:ff:fd:0a:74:35:36:1c:18:f0:
                    a8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AF:0E:D6:53:64:81:E8:02:25:4B:59:46:DD:5D:87:AF:11:8C:58
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145992.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad0e::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:27:9a:9b:69:3a:10:3b:80:b8:f4:9e:b2:92:7f:7e:93:c6:
         b9:76:7a:98:54:90:09:4e:c4:2a:55:ca:ad:ce:db:17:1d:51:
         e3:84:05:33:ea:52:84:1a:14:e9:e8:6c:29:af:c4:9e:da:c7:
         41:2e:d6:fb:ac:66:0f:97:67:6b:68:90:99:1d:3b:09:ed:02:
         30:44:0b:03:bf:6d:bd:fc:bf:f4:5b:95:c8:ea:68:57:a1:cd:
         25:34:e1:7e:2d:15:0f:39:30:50:bf:af:55:3f:0e:26:a5:9e:
         e1:5f:f0:23:f0:59:72:d2:b0:fe:f7:6e:a4:95:fe:7a:ff:2c:
         f2:e0:51:22:92:c4:00:6a:1f:6f:fd:8d:7c:42:34:65:50:7c:
         38:e5:f7:f7:e2:58:c9:32:ea:7c:e8:25:0f:1d:ca:8c:2b:92:
         d4:95:f0:fa:2e:d1:a1:7e:c4:4b:65:89:3e:6f:15:8d:6f:90:
         25:45:f6:ce:70:66:c0:f1:0b:4b:de:e2:35:f0:d8:2d:28:f6:
         a6:25:a7:ed:32:00:98:10:ef:63:c9:91:11:c7:25:7f:5b:ab:
         32:52:4b:da:95:8c:11:9e:2a:15:af:63:68:0d:76:54:10:3c:
         a6:b1:46:b5:b3:76:b3:d9:53:3b:36:84:91:12:ed:d1:81:af:
         67:20:2d:f0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUeupAz3z4ZhQjK0mP3veF82FaSmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMTVaFw0yNzA1MjQwNjI4MTVaMDMxMTAvBgNV
BAMTKEZBQUYwRUQ2NTM2NDgxRTgwMjI1NEI1OTQ2REQ1RDg3QUYxMThDNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeON3IWSBUTnQg9PPst0Saobo
uBiBYrI7qrw6KNPRVIRu8w+VsACNVjKmz5Mi3n28XmjMm27qnXPBmAaHOjByQJl+
vumrrvBnhkGEThjzNV1qMATFR01pPT9YpFUPP5fLUVvsyLJCkMlb11hB5aPSQYvl
LJtMDLMgzMRSCNbx9GRKsJTl9hyI38nEgNl8fqcN/xlvtNB6n7A25Iq2PWAnvC7y
M67dbDki/6hsMIwCIU+kcgmQD4NXeV3Ie9wZgFZZjlEQHuyxQy06FXLSDIzVfa6N
uF6Kg0x2dEaG0GVBAcoF9CzHMM88uIn/+iRpSNDj36GN9v/9CnQ1NhwY8KjfAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU+q8O1lNkgegCJUtZRt1dh68RjFgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtDjANBgkqhkiG9w0BAQsFAAOCAQEAsyea
m2k6EDuAuPSespJ/fpPGuXZ6mFSQCU7EKlXKrc7bFx1R44QFM+pShBoU6ehsKa/E
ntrHQS7W+6xmD5dna2iQmR07Ce0CMEQLA79tvfy/9FuVyOpoV6HNJTThfi0VDzkw
UL+vVT8OJqWe4V/wI/BZctKw/vdupJX+ev8s8uBRIpLEAGofb/2NfEI0ZVB8OOX3
9+JYyTLqfOglDx3KjCuS1JXw+i7RoX7ES2WJPm8VjW+QJUX2znBmwPELS97iNfDY
LSj2piWn7TIAmBDvY8mREcclf1urMlJL2pWMEZ4qFa9jaA12VBA8prFGtbN2s9lT
OzaEkRLt0YGvZyAt8A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:00 2026 by rpki-client