Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145676.roa
File:                     AS145676.roa (raw, json)
Hash identifier:          BIS/R8sFOZlClLxj/7RNvh7a66egwO7RMkmF6CiIwWg=
Subject key identifier:   C4:27:17:3B:19:5B:7F:FE:A3:09:A2:05:45:70:45:4E:10:E9:B2:21
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2E0293639C47F5D32927AFF6D36507F10897C99F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145676.roa
Signing time:             Fri 22 May 2026 07:09:03 +0000
ROA not before:           Fri 22 May 2026 07:04:03 +0000
ROA not after:            Fri 21 May 2027 07:09:03 +0000
asID:                     145676
IP address blocks:        240a:abd2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:02:93:63:9c:47:f5:d3:29:27:af:f6:d3:65:07:f1:08:97:c9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:03 2026 GMT
            Not After : May 21 07:09:03 2027 GMT
        Subject: CN=C427173B195B7FFEA309A2054570454E10E9B221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:ee:b8:0d:f7:d1:3a:5e:8b:f0:dc:68:41:
                    ef:a4:52:1c:75:c2:13:6b:35:6c:f4:4b:f1:7e:c6:
                    05:ed:3f:a2:7e:79:6f:00:03:23:86:b1:7e:9f:98:
                    79:80:b8:b7:1c:d1:59:90:84:bc:75:30:c2:76:74:
                    ad:d6:f3:bf:02:74:e5:d7:55:69:3d:6d:42:ac:e5:
                    8c:3f:21:7b:b2:b4:85:d8:e1:0e:9e:2a:e0:f5:0c:
                    94:0a:3d:7d:32:db:d0:06:00:df:89:82:f3:24:c9:
                    4a:c3:ce:0d:4c:f8:5e:65:07:57:be:d7:77:1b:17:
                    88:14:c7:05:98:b4:06:52:ac:3d:66:5c:3f:75:df:
                    7c:b1:d1:11:c8:76:da:6c:ff:99:cb:92:1f:2f:f1:
                    ba:15:24:fb:49:58:c7:5f:d8:3d:e0:3e:91:57:08:
                    af:d4:f6:52:7b:a2:02:72:40:ca:34:aa:51:f6:11:
                    84:c1:0e:d4:54:4f:8e:20:94:57:9c:22:91:bd:78:
                    38:9c:c2:36:0a:c6:15:0f:6d:10:0c:4d:be:22:9c:
                    9a:50:a3:5a:16:26:cb:24:36:2e:11:21:43:10:ad:
                    b0:63:d4:63:9d:72:3f:0d:e9:3a:9f:8d:f7:19:c9:
                    53:ef:f8:c4:0a:b8:9b:01:22:c5:49:19:6c:12:14:
                    be:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:27:17:3B:19:5B:7F:FE:A3:09:A2:05:45:70:45:4E:10:E9:B2:21
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145676.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abd2::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:fc:da:5c:db:7a:ab:bf:d8:94:42:3e:cf:bb:e9:3a:80:f7:
         59:fe:f7:06:7d:08:37:e1:50:d1:43:84:8a:9f:18:ef:51:60:
         01:9f:f4:8a:ab:da:0d:fd:80:74:b2:99:b9:c3:c2:71:e7:e8:
         a0:0b:80:1a:d1:1a:14:9e:25:24:98:6a:e8:b7:c5:bd:11:1d:
         99:af:7c:de:ad:3d:7a:4f:2d:d6:a3:e3:68:17:75:23:cb:f6:
         43:7d:9d:1e:fe:8d:43:2f:bc:aa:59:54:d5:39:dd:1d:e2:83:
         db:6f:e6:e2:90:a4:14:6e:bb:ba:d7:4d:c8:d7:09:f7:e5:2e:
         eb:6d:f8:ad:11:57:53:d7:45:9b:f8:0c:71:24:c3:cb:80:ae:
         1b:3f:d0:54:8e:30:4d:6f:87:d8:10:76:d8:6f:b2:eb:c7:38:
         0d:bf:e3:a1:14:13:f7:d1:37:d6:1c:5d:e7:be:96:42:83:7f:
         63:f8:31:45:33:8b:3d:6e:cc:fa:38:7f:54:f7:49:1d:cc:d9:
         88:98:91:be:72:e2:5f:ee:72:31:76:18:27:d3:1c:6f:63:80:
         7d:70:a6:5a:d3:20:be:dc:29:ce:d5:3d:fe:cf:3b:1e:ef:82:
         43:4a:f6:82:f8:8b:1e:11:ae:a2:d4:72:ae:08:81:49:5d:0e:
         cf:65:cc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----