Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145498.roa
File:                     AS145498.roa (raw, json)
Hash identifier:          cyeOtw22V0ZPR6LnG0ohWJ4M7bxrzlk+3Ev4IJEKpJk=
Subject key identifier:   D5:90:CE:91:B4:8F:62:F7:7E:5A:71:FE:8B:DF:0F:5A:E7:C3:BD:6E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3EDB33B0978AA7D9125C01CBD43D9F5F589A4E27
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145498.roa
Signing time:             Fri 22 May 2026 06:46:04 +0000
ROA not before:           Fri 22 May 2026 06:41:04 +0000
ROA not after:            Fri 21 May 2027 06:46:04 +0000
asID:                     145498
IP address blocks:        240a:ab20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:db:33:b0:97:8a:a7:d9:12:5c:01:cb:d4:3d:9f:5f:58:9a:4e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:04 2026 GMT
            Not After : May 21 06:46:04 2027 GMT
        Subject: CN=D590CE91B48F62F77E5A71FE8BDF0F5AE7C3BD6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:60:ea:16:87:53:29:6c:ef:74:a7:b1:63:
                    b1:80:a9:50:07:57:41:57:35:7e:5d:8b:a8:87:67:
                    38:a2:8d:a6:90:52:a2:0e:a0:7e:a1:3f:1c:7b:a2:
                    29:55:f5:d8:bc:7f:59:53:d8:f6:c3:21:f9:cd:ae:
                    4d:e3:45:e6:6b:17:b1:01:03:f5:a0:ad:4f:63:d9:
                    14:b6:28:a9:bf:a8:5d:68:00:53:2e:de:9a:a6:64:
                    39:5d:23:07:e5:d5:43:dd:0d:87:c7:e1:3e:71:0f:
                    10:21:df:0e:be:17:77:00:63:79:c0:e9:43:c5:77:
                    c0:c0:06:56:4b:75:00:ca:9d:8a:0d:b0:79:74:c3:
                    c9:8a:a0:44:6a:2d:c0:5b:95:30:1e:cd:aa:36:49:
                    c5:95:f2:47:81:3e:cd:db:d7:bf:8c:33:d6:c6:04:
                    8d:98:9b:f2:1a:50:db:4c:5c:6b:8e:29:4d:1e:87:
                    aa:ee:23:07:a1:54:ac:11:1c:6e:4b:07:79:3c:28:
                    ce:77:ea:16:3d:c3:5c:31:56:13:58:61:d2:94:9a:
                    f5:35:78:72:31:0a:d5:4d:26:3f:94:61:33:7c:a5:
                    c8:06:fd:76:31:17:ef:a2:8b:d1:66:2a:02:06:8c:
                    ce:78:70:f8:8a:f4:25:72:ad:d8:01:91:cb:61:e9:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:90:CE:91:B4:8F:62:F7:7E:5A:71:FE:8B:DF:0F:5A:E7:C3:BD:6E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145498.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab20::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:05:90:ad:72:57:df:f6:2d:ba:2b:b6:47:90:e3:6b:92:2d:
         3e:4f:9c:7b:bd:2c:ff:1b:88:39:6b:83:23:2f:ad:79:84:05:
         10:95:75:e7:35:15:5f:02:ad:83:3d:72:88:ef:23:8f:91:a2:
         82:e6:82:ca:8a:80:ca:4c:4d:10:89:5d:c0:0a:03:61:ae:ba:
         53:f6:bd:3d:fb:db:4b:9e:59:74:b4:f7:2f:7b:6d:50:80:fc:
         9e:22:25:e0:ad:95:7c:22:cb:d2:85:35:e6:e8:35:d9:8b:da:
         2f:c1:d5:19:fd:de:7a:1f:66:c7:ea:de:14:9b:3c:30:94:03:
         12:f4:5c:7b:54:dd:e5:a5:c9:eb:b8:24:aa:8c:e9:d2:a1:c2:
         31:2a:88:17:f4:d2:49:d6:d3:ca:5e:60:0f:49:c8:40:39:96:
         89:ab:64:0e:4a:96:2e:64:62:1d:0b:c9:2d:f8:0b:ca:84:3e:
         b3:ea:bb:26:8c:cf:2d:ac:fb:a2:9b:61:6d:bf:1a:3c:d3:61:
         13:db:6f:13:b5:c9:3e:1a:80:92:75:29:49:6b:be:b9:ce:bf:
         4a:22:28:25:cc:c7:27:92:90:00:fc:bd:39:4f:52:77:e7:e8:
         5c:74:af:4a:21:a8:95:6b:68:b4:43:91:5f:50:ce:14:d8:0c:
         fb:df:8f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----