Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145414.roa
File:                     AS145414.roa (raw, json)
Hash identifier:          2RBshIykNaGncIe3ADYDxKG6pF5nV9MVNuZta+qpRTo=
Subject key identifier:   2B:B8:1A:03:08:FB:3A:B3:6C:93:C5:52:72:EB:DE:0C:6F:1D:31:AE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       402CA67B3094664031A3E12A6296E8C8DFF06C16
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145414.roa
Signing time:             Mon 25 May 2026 03:19:42 +0000
ROA not before:           Mon 25 May 2026 03:14:42 +0000
ROA not after:            Mon 24 May 2027 03:19:42 +0000
asID:                     145414
IP address blocks:        240a:aacc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2c:a6:7b:30:94:66:40:31:a3:e1:2a:62:96:e8:c8:df:f0:6c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:42 2026 GMT
            Not After : May 24 03:19:42 2027 GMT
        Subject: CN=2BB81A0308FB3AB36C93C55272EBDE0C6F1D31AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:b9:81:a1:0e:c9:79:8a:ef:2c:ba:c8:d9:
                    26:ef:44:6c:f7:0e:c7:8e:8d:a1:94:cd:91:72:7b:
                    b3:88:ac:2b:94:cb:ba:7a:5e:90:d9:ed:20:58:cc:
                    46:ce:54:60:ad:70:72:53:e1:12:15:b5:92:38:3b:
                    76:9b:a1:2b:e1:11:97:c9:12:a4:ae:4f:8a:17:5e:
                    1f:70:e3:46:dd:eb:0f:08:9d:42:7c:10:7f:e4:79:
                    da:de:5c:c7:c8:70:68:56:c4:dd:63:39:b1:28:a6:
                    e5:f7:9d:dc:5d:89:6e:48:3a:fd:5f:cd:f3:83:0d:
                    19:ba:52:3e:b1:e9:bb:cf:63:f7:6d:49:08:6d:af:
                    b5:45:1d:3e:41:f1:03:2f:a9:0b:2c:66:60:df:ee:
                    d3:70:04:91:2e:4a:5f:a4:b0:0e:bb:ff:de:bd:91:
                    9c:99:c0:ae:e8:06:8c:a8:04:09:98:2e:d7:ac:bc:
                    fe:3c:17:0a:90:a3:5a:8f:de:35:41:8e:22:ea:d0:
                    c3:21:63:05:96:99:95:2d:16:1d:7d:3c:72:68:1b:
                    ec:d0:2d:50:b7:bd:dd:40:0a:c9:ea:7c:c3:12:53:
                    52:a1:de:06:00:0d:02:2e:17:f2:f0:39:2c:36:29:
                    c1:fe:f9:b3:44:03:4c:76:87:1c:05:ed:3e:10:27:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B8:1A:03:08:FB:3A:B3:6C:93:C5:52:72:EB:DE:0C:6F:1D:31:AE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145414.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aacc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:01:bb:56:0d:08:39:f6:99:b6:a9:1b:96:b8:6a:91:0e:7b:
         b8:f0:52:51:70:c1:81:30:6b:22:46:90:f1:5d:de:15:0f:9d:
         77:f7:79:a0:ff:7f:a8:e4:9c:0f:86:f1:3b:93:c7:d8:06:d1:
         2a:68:1f:e7:6b:ac:f6:88:5c:d8:19:41:6e:cb:5c:14:85:7f:
         fe:4c:a5:9f:60:ee:66:71:04:f1:8d:f8:3b:c7:98:71:9d:5f:
         52:3b:59:b0:5b:5c:f3:cc:98:9d:0c:d2:29:a4:00:3f:be:12:
         9b:63:df:38:43:c5:07:94:4f:75:cc:71:f9:fd:c5:55:92:d6:
         b3:03:00:3e:df:91:a5:ee:ed:9c:6a:1c:aa:52:df:58:43:7f:
         b4:ca:9d:7d:a7:fe:ee:87:c0:2f:4f:9b:94:80:af:07:a8:45:
         c1:72:ab:ce:aa:35:1c:9a:39:e2:cf:17:09:ff:57:45:01:df:
         87:a3:30:80:dd:80:fb:df:4f:9e:ce:56:cf:0c:d3:77:18:62:
         cc:69:07:83:c6:7c:90:a6:8d:53:da:f5:d3:da:57:96:9b:63:
         2d:02:37:86:07:3d:57:9a:bd:ba:d8:ec:5e:76:3f:12:74:4e:
         9c:df:0c:48:ea:cf:8f:79:39:f5:e3:13:f8:c1:51:20:0f:d0:
         a0:61:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----