Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145563.roa
File:                     AS145563.roa (raw, json)
Hash identifier:          3nHhxF+AFx+fjIWIOSkFWQVR/i/FAZ6TYw4IIjaK8wk=
Subject key identifier:   71:CF:1D:3F:65:67:D2:10:D2:CB:C8:4D:B9:50:2B:9C:9A:92:31:45
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       15384C3EB7BF61063F3A337151FB855601672B11
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145563.roa
Signing time:             Fri 22 May 2026 06:58:36 +0000
ROA not before:           Fri 22 May 2026 06:53:36 +0000
ROA not after:            Fri 21 May 2027 06:58:36 +0000
asID:                     145563
IP address blocks:        240a:ab61::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:38:4c:3e:b7:bf:61:06:3f:3a:33:71:51:fb:85:56:01:67:2b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:36 2026 GMT
            Not After : May 21 06:58:36 2027 GMT
        Subject: CN=71CF1D3F6567D210D2CBC84DB9502B9C9A923145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5f:e5:0e:a8:86:24:6a:7a:2c:e0:1f:6e:78:
                    d0:9e:95:a4:00:6c:cb:06:eb:0a:7c:41:31:eb:1b:
                    5b:f9:cd:05:f8:59:cf:f9:d7:54:38:56:2e:d3:4d:
                    53:38:59:64:a7:8e:4e:56:b8:19:16:ee:e6:bd:e0:
                    25:01:af:7a:13:10:03:c4:0d:1c:27:95:47:f2:69:
                    3f:9b:38:68:8a:cd:27:94:67:3a:5c:ec:56:30:d0:
                    a5:77:dc:6d:29:f8:3f:92:01:06:1c:b1:b5:33:53:
                    e3:15:de:9e:11:40:8f:56:e0:3f:1a:39:a0:3e:e1:
                    aa:65:b0:ae:88:10:ca:5f:2a:04:f1:01:11:93:75:
                    7a:37:60:89:e5:36:95:a5:45:78:8d:59:fa:31:9e:
                    03:82:df:2a:a9:2b:d1:f6:50:00:82:7e:8c:9b:91:
                    66:ca:1f:19:f7:b1:1f:e6:3d:74:1f:8e:be:1d:93:
                    18:62:e9:9c:a8:23:8d:28:c9:5e:43:bb:01:a7:f4:
                    c8:0e:6e:d9:9f:a7:0f:86:75:c6:cd:4f:86:3c:e8:
                    a5:9f:14:8f:50:ef:70:bd:b7:f8:f4:37:52:6a:af:
                    26:2d:2e:55:cc:42:c8:e1:b1:c4:2d:49:5d:7e:5a:
                    5f:4c:4f:fa:1e:5e:90:67:f6:d7:13:7d:41:4a:bb:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CF:1D:3F:65:67:D2:10:D2:CB:C8:4D:B9:50:2B:9C:9A:92:31:45
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145563.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab61::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:2b:95:c8:d9:0e:dc:fd:03:26:eb:f4:6d:c9:0b:5d:49:fa:
         23:e6:78:22:64:77:88:9d:3a:ee:eb:0d:db:c9:f8:27:c1:09:
         0e:7d:fb:31:db:b9:ed:87:a7:74:97:07:b6:d3:d8:d0:7f:60:
         eb:8a:e3:d0:39:92:e3:87:04:28:fd:92:04:e1:76:33:72:53:
         5c:15:44:dc:3d:8a:39:e5:7f:20:7d:9a:eb:8f:1b:2f:f5:7c:
         51:20:66:c2:3c:d8:d3:d9:53:d9:6c:3e:fd:fa:71:2f:5c:9a:
         7f:82:7e:2b:9b:f2:ee:1b:83:18:e8:57:e3:6f:e3:11:0e:14:
         3e:ee:41:65:43:25:c2:8c:17:55:a7:2d:51:ff:45:b5:ce:8c:
         6d:3d:a1:d7:a7:7c:57:ba:da:97:3a:86:db:dd:dc:af:8d:8f:
         0a:3a:97:44:e5:35:da:77:16:f1:97:6f:32:bc:65:af:ef:7e:
         f0:88:16:74:89:3d:10:5e:d5:3b:fb:a7:92:58:da:68:e3:5f:
         ae:ed:32:61:4a:7e:1f:62:b9:1b:67:0c:84:6f:48:f7:6b:f2:
         97:29:09:f8:e7:09:0d:11:54:14:a0:f5:58:1d:b0:03:47:2d:
         1c:4b:45:5f:cd:02:70:d7:1b:f6:17:e0:46:c1:ca:4b:01:67:
         87:a0:c3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----