Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145996.roa
File:                     AS145996.roa (raw, json)
Hash identifier:          FpURIPJOiLoVGAXS9aTFpj8CG65aT5N3PQlmkLomiGg=
Subject key identifier:   0D:E1:C3:EB:3B:64:D0:F4:95:9B:A1:71:70:CF:EF:6F:86:12:18:2A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2EC988B122A5AE568C523976D8101C27F939955A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145996.roa
Signing time:             Tue 26 May 2026 06:31:04 +0000
ROA not before:           Tue 26 May 2026 06:26:04 +0000
ROA not after:            Tue 25 May 2027 06:31:04 +0000
asID:                     145996
IP address blocks:        240a:ad12::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c9:88:b1:22:a5:ae:56:8c:52:39:76:d8:10:1c:27:f9:39:95:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:26:04 2026 GMT
            Not After : May 25 06:31:04 2027 GMT
        Subject: CN=0DE1C3EB3B64D0F4959BA17170CFEF6F8612182A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a5:bc:ea:59:fb:42:0c:94:f2:77:33:cf:a2:
                    bb:ea:9e:72:1d:5d:8f:c5:8e:d2:33:af:32:c9:1d:
                    b0:b2:7e:f2:18:50:54:fe:36:b8:4d:67:a2:c2:9e:
                    e5:90:47:a2:dc:b9:bc:30:38:d3:13:16:88:58:0f:
                    4d:c8:02:66:46:ef:f3:cd:2b:6d:e8:b1:75:c5:ff:
                    03:c0:ca:48:43:2f:13:17:76:76:03:b3:ec:6f:79:
                    e9:e7:2e:f1:b7:e7:dd:b7:b7:af:30:59:30:be:e3:
                    10:2c:2c:9a:5c:4d:f0:61:51:22:8b:b8:51:1f:23:
                    31:f0:07:3f:a2:e7:37:e6:ab:ab:66:9a:e4:8f:08:
                    65:ac:c1:00:fd:b0:5d:f4:f1:0e:be:a9:e2:46:fd:
                    fc:fe:48:c2:6c:9f:75:2d:f4:3f:30:79:93:11:79:
                    44:2e:8f:ae:c1:0f:c3:3e:1c:a5:fa:7a:2c:b9:7c:
                    6f:0f:05:34:a5:6a:0f:9e:7e:ef:29:0f:48:01:8b:
                    e7:8d:22:5c:a4:cb:50:ff:94:da:ac:49:12:fa:23:
                    77:24:f5:3b:a7:d5:d3:2d:18:20:89:6a:77:05:82:
                    6c:77:b9:34:af:f7:e1:e9:93:0b:bf:ee:45:10:94:
                    e5:46:62:f7:3b:1c:6c:7c:d5:09:28:a0:84:33:aa:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E1:C3:EB:3B:64:D0:F4:95:9B:A1:71:70:CF:EF:6F:86:12:18:2A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad12::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:10:92:a1:f0:c9:14:e3:33:16:8e:e9:cc:7c:4b:0c:d3:ab:
         ff:e3:e1:bf:23:39:b1:64:86:7f:27:09:e9:e0:95:bc:e8:f3:
         3c:ce:ef:3d:82:a3:da:cb:c8:78:1b:9f:2f:b8:b9:25:ac:a2:
         c3:5f:d7:06:8a:06:a5:64:e2:11:f5:83:8c:91:80:d4:70:42:
         20:6f:79:a6:a7:eb:7b:8a:b1:2e:c8:fe:f2:e8:87:63:ae:a1:
         c0:77:73:e0:13:a9:95:ca:e3:18:0a:b9:3c:b4:98:cf:d6:7a:
         cd:5d:6c:5f:23:cb:94:aa:25:d1:f7:47:68:fc:aa:c7:04:0b:
         be:59:f8:23:c8:f0:38:73:1f:63:75:51:5e:23:c7:1f:eb:94:
         e8:5c:52:fe:af:13:a3:60:11:48:ee:01:87:0e:b4:34:f2:0e:
         b5:bf:82:2a:5b:08:6f:f4:76:0a:e1:d0:64:f5:57:fb:71:ba:
         62:b2:fb:0a:d1:45:6b:7a:26:9a:bb:5a:9b:39:ca:a5:ca:da:
         31:d2:a1:98:ad:b7:44:95:95:ff:e7:b8:74:9e:e7:6e:2b:70:
         93:fc:88:c8:b9:27:4e:64:c9:e4:c2:9d:f2:f7:0a:53:02:9e:
         fd:bf:0d:e2:f5:5c:a4:bc:90:6f:5f:ae:0b:3d:5d:0e:e3:87:
         26:f2:8a:ae
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULsmIsSKlrlaMUjl22BAcJ/k5lVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI2MDRaFw0yNzA1MjUwNjMxMDRaMDMxMTAvBgNV
BAMTKDBERTFDM0VCM0I2NEQwRjQ5NTlCQTE3MTcwQ0ZFRjZGODYxMjE4MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVpbzqWftCDJTydzPPorvqnnId
XY/FjtIzrzLJHbCyfvIYUFT+NrhNZ6LCnuWQR6LcubwwONMTFohYD03IAmZG7/PN
K23osXXF/wPAykhDLxMXdnYDs+xveennLvG35923t68wWTC+4xAsLJpcTfBhUSKL
uFEfIzHwBz+i5zfmq6tmmuSPCGWswQD9sF308Q6+qeJG/fz+SMJsn3Ut9D8weZMR
eUQuj67BD8M+HKX6eiy5fG8PBTSlag+efu8pD0gBi+eNIlyky1D/lNqsSRL6I3ck
9Tun1dMtGCCJancFgmx3uTSv9+Hpkwu/7kUQlOVGYvc7HGx81QkooIQzql8zAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUDeHD6ztk0PSVm6FxcM/vb4YSGCowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtEjANBgkqhkiG9w0BAQsFAAOCAQEAiRCS
ofDJFOMzFo7pzHxLDNOr/+PhvyM5sWSGfycJ6eCVvOjzPM7vPYKj2svIeBufL7i5
Jayiw1/XBooGpWTiEfWDjJGA1HBCIG95pqfre4qxLsj+8uiHY66hwHdz4BOplcrj
GAq5PLSYz9Z6zV1sXyPLlKol0fdHaPyqxwQLvln4I8jwOHMfY3VRXiPHH+uU6FxS
/q8To2ARSO4Bhw60NPIOtb+CKlsIb/R2CuHQZPVX+3G6YrL7CtFFa3ommrtamznK
pcraMdKhmK23RJWV/+e4dJ7nbitwk/yIyLknTmTJ5MKd8vcKUwKe/b8N4vVcpLyQ
b1+uCz1dDuOHJvKKrg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:04 2026 by rpki-client