Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145562.roa
File:                     AS145562.roa (raw, json)
Hash identifier:          4z3D37WhM++jIpxFOuHZdEgOiyZQXkdg7dP5vnLGDIU=
Subject key identifier:   25:CD:45:E0:19:67:94:97:2E:98:15:80:A3:BA:4D:B3:76:4B:8F:55
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7F30FF4C617D5542524F69E46AAA7CA7DBD43D72
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145562.roa
Signing time:             Fri 22 May 2026 06:27:55 +0000
ROA not before:           Fri 22 May 2026 06:22:55 +0000
ROA not after:            Fri 21 May 2027 06:27:55 +0000
asID:                     145562
IP address blocks:        240a:ab60::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:30:ff:4c:61:7d:55:42:52:4f:69:e4:6a:aa:7c:a7:db:d4:3d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:55 2026 GMT
            Not After : May 21 06:27:55 2027 GMT
        Subject: CN=25CD45E0196794972E981580A3BA4DB3764B8F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:f1:97:dc:a2:c4:0f:f2:a3:ae:a7:b4:67:
                    20:a1:46:01:26:e6:b9:2f:8f:d4:a2:77:5d:4e:0b:
                    d6:ac:e8:23:8d:3f:26:d6:0f:8a:bd:b0:df:10:cf:
                    54:c2:c8:92:fd:c1:0e:91:c4:ed:d9:d8:5b:84:9f:
                    cf:90:40:7d:00:5f:37:58:3e:c3:11:94:0f:d9:9d:
                    56:0e:e4:d3:cd:68:a9:43:7f:a7:ae:c2:26:65:c2:
                    7f:2f:b7:52:5d:ad:bf:1e:30:ab:1f:10:d3:15:d2:
                    0d:4e:6d:96:41:a3:c4:66:c0:28:33:88:16:45:84:
                    a4:4a:bc:29:40:2c:5f:55:04:92:a7:b8:84:c0:b0:
                    c2:d9:5c:b9:e5:e1:0f:e9:de:f3:5d:ed:e1:c6:51:
                    27:90:1f:d6:7a:55:2e:85:07:e3:c4:c1:f2:6b:8c:
                    65:0f:81:2d:cd:6d:2b:de:c9:ee:f1:58:90:cc:a1:
                    10:6c:bd:6a:24:fe:c8:5f:00:d9:07:1c:b2:bc:0d:
                    a9:0f:40:ef:a9:a4:a0:f8:03:26:99:17:9d:c1:40:
                    55:a0:c2:a7:6b:b6:be:37:a3:16:51:bb:77:2c:0f:
                    d8:5f:77:2a:8e:c4:61:52:15:d7:11:45:ac:ae:60:
                    53:a8:ff:0a:72:eb:fe:c5:31:e4:d8:3b:d8:10:ac:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CD:45:E0:19:67:94:97:2E:98:15:80:A3:BA:4D:B3:76:4B:8F:55
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145562.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab60::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:a7:e6:f0:8e:59:be:b0:36:bd:a9:da:19:9d:01:ed:ee:d2:
         aa:ef:f7:d3:75:23:2a:e9:f9:9f:d2:b0:ab:89:eb:27:03:e3:
         be:6f:83:7b:44:72:08:87:c3:48:04:e4:32:01:b0:bf:81:80:
         f8:11:f6:b6:3d:aa:a1:df:f8:af:f6:3f:47:1e:ff:6e:40:65:
         4c:e1:66:b2:f5:f9:0d:17:1c:b6:62:f5:82:7e:b9:73:9f:dd:
         35:0c:01:c1:b6:4f:c8:2d:f9:c3:1d:05:a5:55:a5:26:4c:c0:
         1a:d8:c4:5a:9a:03:22:b4:e3:29:d4:75:ed:e1:d8:49:e2:c6:
         47:88:19:f3:e9:57:da:a6:9d:25:00:fb:31:be:06:75:62:99:
         4b:19:16:b2:4e:c2:d7:c0:47:32:be:0b:17:df:91:4f:5a:c8:
         50:fe:e9:9e:8b:aa:d4:f4:c3:77:08:2f:59:12:9e:8d:b9:ff:
         cf:22:31:79:b3:0e:6a:c9:fa:7b:6e:62:ca:9e:f4:e4:67:15:
         43:8e:ce:a1:09:7a:d2:1d:7f:a1:01:87:99:8b:3f:9c:de:d9:
         f5:b3:d0:9e:30:c3:19:ed:ab:1e:5a:46:79:e2:c7:be:05:a8:
         f4:2b:c9:45:e0:21:33:ac:70:76:f2:ec:7b:29:ad:2b:0c:bf:
         fd:8c:43:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----