Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145167.roa
File:                     AS145167.roa (raw, json)
Hash identifier:          3GtRJkk8FvCkP3JiQlX/iSmkmimZXDwCftzJHmlGKp4=
Subject key identifier:   11:28:D1:CF:AC:35:D8:5E:6E:E4:A9:08:12:E6:5F:71:65:35:5C:2E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       78E760CD3290FE91ACF497F609BAD283C570E506
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145167.roa
Signing time:             Mon 25 May 2026 06:28:24 +0000
ROA not before:           Mon 25 May 2026 06:23:24 +0000
ROA not after:            Mon 24 May 2027 06:28:24 +0000
asID:                     145167
IP address blocks:        240a:a9d5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e7:60:cd:32:90:fe:91:ac:f4:97:f6:09:ba:d2:83:c5:70:e5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:24 2026 GMT
            Not After : May 24 06:28:24 2027 GMT
        Subject: CN=1128D1CFAC35D85E6EE4A90812E65F7165355C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:2c:f3:99:2f:ed:e8:f2:b1:f9:ec:e5:ac:
                    dc:36:b4:e2:4b:f3:39:e1:c2:30:6d:00:64:f8:b4:
                    92:74:86:43:b2:0c:eb:3e:ba:27:5c:ef:fb:af:1d:
                    7e:d1:be:3d:c5:d7:0a:74:57:08:48:2b:4e:c2:16:
                    2f:f5:f6:79:db:5b:84:90:8f:0b:7f:0e:51:50:8d:
                    29:ce:e9:63:5e:ff:be:c9:c0:92:4f:b6:0e:35:9c:
                    ea:ae:c9:21:41:3b:0c:3f:62:e7:fd:21:9c:92:5c:
                    cb:c2:b5:c6:7f:e1:18:14:75:de:84:48:ba:d4:20:
                    b2:64:20:bb:7e:56:43:cc:06:b1:e8:b7:98:77:6f:
                    de:ef:ce:e8:6e:97:fe:e0:ea:a6:58:ba:01:ad:db:
                    77:aa:39:d2:a1:fb:a5:bd:d7:12:c4:cb:68:54:87:
                    13:7d:43:ca:84:4d:09:cc:71:92:4f:52:4f:ed:3e:
                    44:b8:d0:d7:5a:e3:65:24:8e:ab:a3:96:51:39:d7:
                    28:59:2a:20:42:1c:55:a9:75:cd:86:0f:0a:e7:c8:
                    84:c7:c0:08:a8:df:df:36:69:22:2e:4b:d1:5c:20:
                    f6:18:ba:c1:ca:7e:dd:4a:bd:13:66:be:e1:c3:43:
                    0e:d5:60:99:cb:6b:a8:e4:62:22:a4:53:1a:8d:53:
                    41:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:28:D1:CF:AC:35:D8:5E:6E:E4:A9:08:12:E6:5F:71:65:35:5C:2E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145167.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9d5::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:2d:23:11:ef:fa:0a:a1:31:19:27:8a:38:ed:c4:3c:1a:a9:
         1f:9b:b6:69:d1:0b:04:56:8e:69:40:e3:b9:10:56:08:fa:59:
         92:28:92:2d:38:fa:40:45:29:74:31:0c:9d:cc:83:83:db:e2:
         33:4e:6f:a7:86:14:bd:ec:6c:53:d9:f4:fd:ab:20:aa:ce:38:
         a5:93:bb:cb:4e:9e:a4:ee:4a:c1:a9:5b:39:e9:d3:7c:ca:6c:
         87:06:cb:ba:25:9c:4e:73:35:1f:d8:0b:4d:f4:ac:b2:e6:40:
         d0:0b:e0:cd:79:66:2b:0d:28:8b:07:df:26:0b:71:0b:e7:75:
         ff:36:ff:82:54:22:53:22:b2:db:85:42:33:22:2d:36:33:b8:
         44:43:be:05:a5:5a:e4:f9:a5:ae:35:22:95:e3:7a:41:0d:b6:
         02:c8:c2:1b:3c:3d:c9:10:60:bc:c8:5b:a1:bd:a6:fc:f8:8f:
         ca:72:cc:25:d6:66:09:57:0e:6b:a4:3f:af:81:0e:70:fd:80:
         2e:76:f6:d0:e7:1a:79:73:73:f9:aa:08:69:f6:ac:fb:ac:0b:
         a7:05:8d:18:18:20:b0:7c:0c:26:17:11:78:b3:ab:38:dc:48:
         5a:a1:fa:08:bf:42:33:05:f2:22:79:b7:64:dd:ae:77:c6:1d:
         7e:d7:aa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----