Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145543.roa
File:                     AS145543.roa (raw, json)
Hash identifier:          jAEtfZlLIH0ElxQuxzPdT0tAqTDeCuwwN/Woj0pckCU=
Subject key identifier:   2C:E5:53:05:D4:12:79:5C:80:43:DF:86:D0:0F:FF:3C:D8:46:E5:9A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5EE961F5D71E819840949CF2498C06518523D312
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145543.roa
Signing time:             Fri 22 May 2026 06:28:03 +0000
ROA not before:           Fri 22 May 2026 06:23:03 +0000
ROA not after:            Fri 21 May 2027 06:28:03 +0000
asID:                     145543
IP address blocks:        240a:ab4d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e9:61:f5:d7:1e:81:98:40:94:9c:f2:49:8c:06:51:85:23:d3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:23:03 2026 GMT
            Not After : May 21 06:28:03 2027 GMT
        Subject: CN=2CE55305D412795C8043DF86D00FFF3CD846E59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:bb:48:c4:de:56:e1:c1:7d:d0:b6:1c:2f:
                    34:eb:ab:78:dc:b7:04:9b:3c:6e:c4:7a:90:02:03:
                    31:e1:b5:16:cf:a2:2b:44:51:5b:4c:6e:18:64:65:
                    dd:36:94:b9:3c:28:68:57:70:04:47:fa:59:93:3d:
                    46:54:95:10:5c:0a:bb:f6:9e:3c:d0:9e:ab:86:10:
                    53:a8:ed:6e:f1:6f:83:2b:e7:2c:10:bc:96:29:15:
                    9f:c5:87:0a:0f:f3:60:af:ed:63:a5:7b:f8:1e:48:
                    2b:23:4a:aa:cf:2d:4f:91:be:a1:d3:56:17:5f:cb:
                    14:dc:5c:e0:81:d2:c8:71:d4:bc:f2:ae:45:1e:ed:
                    9c:d5:31:44:02:85:30:19:78:05:9b:b1:d4:32:b9:
                    a4:c2:5b:78:38:d8:f2:e0:fc:19:68:de:78:81:c0:
                    47:6e:0a:58:51:71:c5:67:a5:15:af:21:93:89:bb:
                    29:e8:66:c8:b4:2e:20:fd:7c:4f:98:5f:02:f5:42:
                    55:64:ad:54:13:4f:11:f3:8e:76:22:2b:8a:6b:fc:
                    55:60:61:59:72:cf:52:ff:ec:02:1b:86:34:bd:09:
                    7e:b0:fa:7b:96:06:7e:51:0f:a3:61:52:22:4b:67:
                    cc:2a:f2:e0:3b:9a:88:62:06:a8:3e:26:a6:d4:17:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E5:53:05:D4:12:79:5C:80:43:DF:86:D0:0F:FF:3C:D8:46:E5:9A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145543.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab4d::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:a3:63:6f:76:2e:53:1a:b4:3f:9f:b5:63:dd:74:f0:83:a7:
         cd:12:20:1a:0b:23:9b:33:18:83:fc:6c:28:38:98:3f:b7:52:
         89:df:c5:32:8d:84:24:02:ce:89:cc:8d:8d:62:93:cc:b1:7e:
         5e:7b:ce:0a:cb:6a:b9:3f:d6:bf:a3:12:01:9a:96:28:14:db:
         4e:35:e9:6e:85:78:61:ec:59:fd:2d:39:f8:34:01:4c:39:0f:
         a7:ef:d4:ab:23:cc:e4:02:e2:51:50:23:2a:95:a5:56:2f:a0:
         4b:0c:7d:0d:74:86:b9:66:2a:35:72:7e:63:4a:d0:b1:d3:cb:
         0d:21:3c:c9:a6:61:7c:9a:9e:24:e7:a4:94:fe:44:b5:d2:eb:
         a3:44:06:32:d1:d4:cb:88:00:da:b6:22:65:af:32:5d:34:58:
         26:4c:7b:c9:70:6e:f0:b4:85:d2:2d:79:cb:d6:75:82:9c:22:
         a4:b3:f9:9f:7d:fa:52:b7:f4:19:02:37:af:0c:1d:82:d2:8d:
         16:99:b2:57:c1:59:b3:27:d2:22:56:48:1b:fc:20:49:68:32:
         c9:cf:72:9f:b4:b8:d3:c4:40:80:69:41:bb:3d:28:c2:2d:e1:
         fb:6f:a2:a9:c7:37:bb:cc:ea:79:c1:0a:50:c5:73:91:f5:7a:
         e8:8e:3b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----