Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145747.roa
File:                     AS145747.roa (raw, json)
Hash identifier:          h8lP0Kco48JAuvPwsSd8BCa7/dFTOZ79oXdYFh5JXno=
Subject key identifier:   48:02:2B:42:49:EE:70:0F:67:06:8D:60:BA:ED:DE:B2:9F:84:42:BD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2A0F87451F73DE8CD4716A133DC2A7C99A045ABB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145747.roa
Signing time:             Mon 25 May 2026 02:22:12 +0000
ROA not before:           Mon 25 May 2026 02:17:12 +0000
ROA not after:            Mon 24 May 2027 02:22:12 +0000
asID:                     145747
IP address blocks:        240a:ac19::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0f:87:45:1f:73:de:8c:d4:71:6a:13:3d:c2:a7:c9:9a:04:5a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:12 2026 GMT
            Not After : May 24 02:22:12 2027 GMT
        Subject: CN=48022B4249EE700F67068D60BAEDDEB29F8442BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:eb:e4:0d:95:04:09:c6:5e:84:f1:97:0a:
                    c8:3b:2e:b7:94:6e:a7:93:5c:f4:9d:2b:ca:d6:14:
                    2d:ba:37:e9:ac:cb:42:f0:eb:0b:91:f4:7b:34:1b:
                    99:36:e3:ca:7d:03:78:3d:08:fc:10:ca:e6:66:fe:
                    f6:c9:e1:9c:95:f2:1e:1a:68:b6:65:f6:c0:ab:f3:
                    fd:d7:d1:fa:29:01:0b:44:39:df:2b:2c:f7:b9:c8:
                    cf:b9:98:fb:3c:e6:59:0f:50:95:7e:1e:fd:1d:c6:
                    c6:79:05:f4:f6:1a:a1:54:c4:e7:63:94:17:20:59:
                    aa:4a:ec:fd:ab:af:3a:f5:1c:8a:61:6f:5b:b3:56:
                    ea:6e:ed:25:68:ff:b0:c1:b0:47:59:31:73:24:d9:
                    4b:ca:c1:5c:c8:ba:bf:ec:91:31:a4:34:04:3a:5c:
                    39:db:db:ea:16:d0:de:a3:03:98:51:e3:de:0b:88:
                    e9:18:46:29:3d:31:d0:90:bf:f5:04:cc:cf:85:cd:
                    e1:7d:52:9f:3a:56:5b:4a:e8:7e:41:2e:83:39:f5:
                    62:19:ea:29:94:2b:26:d6:3f:17:f8:e1:8c:aa:b8:
                    d7:2e:2a:0d:94:cb:70:ed:c7:f4:f0:bd:bf:b3:ac:
                    6a:a5:23:c1:02:e6:c8:c7:dc:b2:fc:95:99:ab:da:
                    60:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:02:2B:42:49:EE:70:0F:67:06:8D:60:BA:ED:DE:B2:9F:84:42:BD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145747.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac19::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:5f:23:bf:1b:25:87:70:cd:dc:c7:90:fa:46:19:11:25:41:
         7b:10:69:6d:47:0f:b2:26:c3:ad:bd:3a:f1:c0:1c:02:d5:fa:
         23:44:b2:af:1b:e9:9c:dd:9d:9e:1a:81:bc:d6:3c:8c:ff:8f:
         97:0f:fb:6e:84:ec:af:7e:ef:29:88:55:ef:2b:b0:d1:b7:2c:
         97:65:15:aa:ec:50:96:b0:1f:68:c1:47:5c:e8:b2:4e:e0:25:
         d2:04:83:e6:99:e6:73:c4:5b:f7:af:5a:89:77:38:1b:fc:dc:
         8c:05:1d:4b:01:9b:a4:ee:cd:e7:64:9a:f8:fd:00:23:ba:2a:
         36:a4:e8:c9:13:4a:fd:50:c4:93:ad:4f:83:a3:0a:76:3a:1c:
         f1:c2:84:1b:af:3f:54:b7:16:ec:92:4b:14:58:14:7b:7b:41:
         89:b1:88:00:af:da:b2:66:04:5b:49:dc:65:d2:c5:40:b2:be:
         ac:c1:86:fb:b1:dc:f3:5a:ff:ea:f5:d8:d6:b1:ed:f9:b9:4d:
         cc:25:be:4c:ad:26:8c:6e:53:ec:f9:d3:70:a5:75:16:b3:54:
         f6:71:21:2d:2d:73:d0:5f:f0:e7:b5:4e:4d:c4:b4:35:94:0a:
         00:37:59:74:a1:2d:34:b6:93:0a:1d:55:1c:98:b5:ce:cc:99:
         55:43:26:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----