Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145354.roa
File:                     AS145354.roa (raw, json)
Hash identifier:          ezarxq+cS49LmfXHE8sAERQDr4K6pl+djDzBYmNMO04=
Subject key identifier:   A9:53:76:FF:F1:4C:BC:5B:80:D5:FC:CD:15:91:37:F6:D8:49:64:17
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1DAD9BF633110249017D00F1A81374A40BDF4DFB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145354.roa
Signing time:             Fri 22 May 2026 04:27:14 +0000
ROA not before:           Fri 22 May 2026 04:22:14 +0000
ROA not after:            Fri 21 May 2027 04:27:14 +0000
asID:                     145354
IP address blocks:        240a:aa90::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ad:9b:f6:33:11:02:49:01:7d:00:f1:a8:13:74:a4:0b:df:4d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:14 2026 GMT
            Not After : May 21 04:27:14 2027 GMT
        Subject: CN=A95376FFF14CBC5B80D5FCCD159137F6D8496417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:9e:fd:05:7e:20:04:b5:ac:b1:37:3b:84:
                    b0:3b:20:64:53:b3:0a:99:e0:04:70:7c:75:cf:8c:
                    18:13:71:70:a1:e2:24:a0:b8:58:c6:15:91:88:e8:
                    43:bd:53:ce:68:ff:29:ac:fa:a2:e2:22:09:f3:e1:
                    a3:8e:ee:76:0f:a7:3d:91:af:71:55:67:4a:10:95:
                    ce:69:1c:45:81:bc:be:64:5d:39:42:3a:57:5c:49:
                    65:89:ae:90:5b:b2:fc:18:d8:9e:c4:c4:bb:05:b8:
                    10:3a:b1:25:f3:00:69:96:01:92:7e:b4:3c:99:c9:
                    4a:64:ee:52:c2:58:bd:3e:5c:38:68:16:2e:fb:c4:
                    e0:ed:44:e2:60:aa:2a:a2:a9:51:ed:aa:08:3d:74:
                    36:4b:f6:af:66:cc:0d:3f:ec:11:cd:83:91:57:15:
                    be:88:47:94:bf:88:c6:b1:91:65:fa:89:e4:45:75:
                    08:f4:b1:91:e1:99:dc:53:98:99:a1:fd:96:88:fc:
                    e3:c1:84:79:9a:ba:52:a2:33:fc:4f:e9:44:18:07:
                    09:68:7c:cd:ec:ae:01:a3:3b:31:31:e4:f5:06:78:
                    ad:14:0a:ac:f0:51:27:36:d1:57:8f:21:80:a2:4f:
                    39:57:4e:69:16:23:74:fc:e2:05:7a:81:f1:98:8c:
                    93:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:53:76:FF:F1:4C:BC:5B:80:D5:FC:CD:15:91:37:F6:D8:49:64:17
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145354.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa90::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:84:ce:ea:c1:40:d7:5a:f0:ff:b7:98:53:07:78:63:39:70:
         5b:d3:95:ca:ac:18:6d:ea:17:cb:04:ea:1d:5f:fd:7e:bd:39:
         07:f9:f5:4f:02:0f:13:69:e2:58:e4:9e:45:40:e4:fb:05:7a:
         62:c4:24:fe:01:9d:3c:27:e4:c3:78:b1:a1:4c:08:f6:2b:96:
         2b:60:6e:06:31:98:ff:ac:f4:cf:4a:45:c0:22:bd:27:11:42:
         65:84:64:cd:52:6a:40:f1:91:61:30:86:62:cc:c4:2e:2f:cf:
         36:3b:76:30:f0:91:a0:d9:da:a6:10:29:5f:ef:0f:f9:27:30:
         38:30:0a:01:26:c2:38:19:56:a6:4e:88:c5:ce:d3:f8:e8:ee:
         4f:14:43:36:b5:18:e7:1e:17:40:02:52:64:ea:59:12:cc:72:
         a0:23:cb:1d:28:07:a9:56:bb:78:70:8a:06:e5:ec:95:4d:cc:
         a5:7b:a5:f7:ac:5c:ca:c9:60:f5:ce:77:da:93:4e:32:ab:9e:
         5f:f0:b0:33:19:26:52:b4:2d:bb:e8:e0:15:7a:93:9f:fc:1b:
         85:cb:e3:94:0d:1f:b1:dc:05:4a:01:01:54:69:a1:8a:08:ee:
         03:fc:d5:3a:17:5f:42:e9:dc:7c:7e:f1:40:cc:33:b8:75:d9:
         2a:d3:f7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----