Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145558.roa
File:                     AS145558.roa (raw, json)
Hash identifier:          /j6E6uKv3scomrjTJ5dT0z/VogcrwG02lvEx/H+cAkw=
Subject key identifier:   47:91:8C:67:CF:E3:1E:01:9E:63:BD:19:E0:3E:6D:D4:AB:A4:D9:80
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1B7951202C02660EC2865A2BB276259CFCEA4C74
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145558.roa
Signing time:             Tue 26 May 2026 02:35:30 +0000
ROA not before:           Tue 26 May 2026 02:30:30 +0000
ROA not after:            Tue 25 May 2027 02:35:30 +0000
asID:                     145558
IP address blocks:        240a:ab5c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:79:51:20:2c:02:66:0e:c2:86:5a:2b:b2:76:25:9c:fc:ea:4c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:30 2026 GMT
            Not After : May 25 02:35:30 2027 GMT
        Subject: CN=47918C67CFE31E019E63BD19E03E6DD4ABA4D980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7f:a8:8e:a5:bc:cb:56:4b:f2:5a:2c:05:37:
                    a6:81:99:bc:68:07:2a:e0:35:2a:b3:93:65:35:77:
                    a1:cb:00:49:0c:fb:35:a1:f7:16:aa:08:2d:e3:31:
                    8e:14:c1:e4:a4:e7:f6:74:0c:28:40:9e:8d:03:85:
                    e1:cd:c8:1f:ee:5c:4f:62:dd:ad:b7:8e:43:d9:0d:
                    9a:65:25:81:68:80:5f:40:de:86:a1:1c:3f:93:a3:
                    95:4d:a1:f8:39:da:49:d1:61:37:87:65:8c:f3:9b:
                    4f:54:6b:c6:9a:81:ce:fb:e8:21:4f:34:f0:76:c0:
                    3f:db:69:a9:af:69:92:4c:46:5b:a9:7c:32:52:a3:
                    51:21:a5:b5:30:07:86:d4:db:85:79:05:bd:94:e5:
                    32:ba:71:f7:c3:2e:f1:0e:21:e1:d7:cd:9f:de:f2:
                    c5:9d:b6:4e:e6:93:6f:23:69:3b:a7:1a:e9:0c:35:
                    8c:ae:c2:6c:ce:6b:3a:4a:b8:97:4a:0a:e3:28:ba:
                    19:7c:4e:5c:a5:e7:20:5a:cb:06:0d:16:e1:51:9c:
                    60:de:90:a7:57:91:13:63:e3:d9:f2:d6:8f:a3:6b:
                    60:85:a1:be:87:31:ca:cc:db:b6:82:36:0e:5e:d5:
                    cf:8a:e8:c5:3f:63:3a:8a:9f:90:8e:e7:fb:4a:86:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:91:8C:67:CF:E3:1E:01:9E:63:BD:19:E0:3E:6D:D4:AB:A4:D9:80
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145558.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:9c:2f:2a:44:28:e6:b1:fe:4f:74:05:a0:af:6c:6c:1b:b2:
         97:79:22:19:22:08:85:bf:ae:24:a1:f7:c8:6f:df:ce:45:dd:
         09:55:57:09:18:49:3e:58:ff:e9:ed:05:92:ae:68:61:c6:fe:
         8e:99:ab:1a:2c:a7:e1:9f:f7:ef:52:7c:10:c3:da:d9:d0:5e:
         6d:52:0c:a4:b5:78:0d:da:26:b8:24:71:9c:c7:d2:d8:d9:8c:
         9b:8a:f1:a5:6e:cc:fc:27:54:db:60:80:ab:ac:e7:6e:a8:e2:
         e1:93:c4:d4:df:d1:4c:d2:ea:82:df:24:8f:92:39:89:ff:91:
         6e:25:37:26:1e:e5:2d:81:ea:b2:69:8a:5f:d4:1b:21:91:01:
         32:7f:e9:11:7e:7f:0b:dc:3d:ac:31:98:c8:ab:f3:04:b3:9e:
         7b:c2:bc:f4:ce:d6:01:76:e9:37:0f:60:b7:d2:0e:05:11:bd:
         44:e4:ab:33:62:d4:d6:85:1c:c9:d1:35:8e:39:8b:f8:92:f0:
         ff:6c:40:6e:f8:c1:e0:b3:03:1f:12:49:33:2d:c1:57:fa:3c:
         41:d8:ea:13:da:ad:62:ce:e5:56:7a:fa:96:46:35:ba:96:ff:
         7a:6d:b3:ef:c9:4b:42:b4:ab:f7:a2:fb:e3:a4:02:d8:d5:ff:
         4c:84:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----