Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145660.roa
File:                     AS145660.roa (raw, json)
Hash identifier:          IvHGFHWyKLZ//wFlHis9msHd+LrZ2E8M+qrqYopVoKc=
Subject key identifier:   C1:49:E3:FC:BD:E8:13:7B:53:41:84:40:36:F5:13:9F:E6:F8:24:78
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       02412D74477D2A04C7CA703429DD5EE61517F435
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145660.roa
Signing time:             Fri 22 May 2026 07:32:01 +0000
ROA not before:           Fri 22 May 2026 07:27:01 +0000
ROA not after:            Fri 21 May 2027 07:32:01 +0000
asID:                     145660
IP address blocks:        240a:abc2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:41:2d:74:47:7d:2a:04:c7:ca:70:34:29:dd:5e:e6:15:17:f4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:01 2026 GMT
            Not After : May 21 07:32:01 2027 GMT
        Subject: CN=C149E3FCBDE8137B5341844036F5139FE6F82478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3c:71:c5:a5:3b:fb:cd:70:47:ad:e5:80:53:
                    14:ad:06:e2:e2:69:d1:26:50:04:50:ff:d1:c1:7f:
                    99:85:58:d5:ed:8b:66:3d:5f:95:0c:5d:18:c4:f9:
                    a8:50:3b:e4:42:01:aa:5f:07:64:37:a2:55:84:91:
                    3f:13:0d:df:4b:c9:fc:df:24:2f:b2:3d:c6:45:f2:
                    74:59:97:24:40:d4:4e:81:c3:fc:f0:f1:41:cc:33:
                    fc:82:a8:e3:1a:01:14:ba:a1:60:06:89:39:60:0b:
                    f7:1c:82:4a:4b:80:93:5a:c1:21:5d:60:fa:54:48:
                    46:e0:0a:97:82:8b:a2:e8:dd:5d:00:f2:7c:58:81:
                    59:76:c6:88:47:28:ee:25:a1:4e:0e:5f:5b:ba:8e:
                    d9:79:b5:1d:17:9f:88:07:e3:92:7e:ed:cf:13:83:
                    1b:f4:97:c5:cd:58:7f:0d:83:9d:0a:3f:66:5c:45:
                    45:2f:96:8d:b7:27:ab:ca:7e:15:82:56:78:dd:df:
                    88:3b:15:82:ad:6f:41:ac:9a:d2:73:aa:3d:c4:13:
                    fb:97:5c:c0:5b:0b:c5:43:fc:35:de:c1:96:5e:e5:
                    37:d3:a2:ae:15:3a:6d:5b:bb:c2:6b:61:6b:48:b4:
                    d4:a1:10:40:da:e2:24:65:38:ed:d0:aa:b0:6e:51:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:49:E3:FC:BD:E8:13:7B:53:41:84:40:36:F5:13:9F:E6:F8:24:78
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145660.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abc2::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:94:42:53:5c:78:11:1f:49:2b:d4:92:f0:da:37:9f:d0:
         5f:83:de:cc:c6:96:05:ca:54:c3:39:3e:c2:ed:18:53:29:b3:
         7a:93:0e:1a:2e:3d:44:5f:6b:8d:d7:40:d5:3d:10:69:ff:e5:
         84:74:6f:fa:c2:fe:aa:43:e9:29:73:20:83:bb:35:07:cd:98:
         30:2b:e9:d1:11:42:1e:0f:65:b7:e2:02:a1:89:b0:ff:6e:b8:
         c2:6e:f1:09:35:6a:fd:a4:e3:77:39:8b:92:3d:7a:16:9c:2c:
         4b:63:43:87:53:0d:a1:91:51:32:cf:c0:46:68:27:1c:d7:bf:
         b7:e9:58:71:7f:c3:06:42:35:62:b0:13:ae:b2:96:51:c0:3a:
         b8:b9:ab:79:1f:d2:ba:43:9c:d6:a6:d5:76:24:a9:9c:0b:e4:
         ad:9f:ad:2d:fd:e5:9a:f8:45:26:58:c2:18:3c:82:ee:61:17:
         93:8f:1b:5d:36:52:bf:e7:df:37:95:f7:19:17:eb:64:60:d5:
         88:c7:85:64:43:09:85:ae:69:0c:09:c4:d9:a2:23:79:17:c5:
         9d:02:d8:47:16:a7:16:39:10:3f:ce:59:31:2f:35:42:e8:30:
         60:70:dc:7d:bd:b9:10:f6:d9:db:cc:5a:51:7b:7a:4e:e9:dd:
         0e:e4:f3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----