Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145751.roa
File:                     AS145751.roa (raw, json)
Hash identifier:          x9fz/Pjd67ssEA1MuYe55EyPQueZlTLR+yM6mDZjlMo=
Subject key identifier:   89:8D:9B:4C:EC:30:01:A2:06:0F:B1:6C:23:BB:11:2A:77:E2:21:F8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5D1763B59420699F86D2564531B9E1968CC08268
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145751.roa
Signing time:             Tue 26 May 2026 06:12:57 +0000
ROA not before:           Tue 26 May 2026 06:07:57 +0000
ROA not after:            Tue 25 May 2027 06:12:57 +0000
asID:                     145751
IP address blocks:        240a:ac1d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:17:63:b5:94:20:69:9f:86:d2:56:45:31:b9:e1:96:8c:c0:82:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:57 2026 GMT
            Not After : May 25 06:12:57 2027 GMT
        Subject: CN=898D9B4CEC3001A2060FB16C23BB112A77E221F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6e:a6:77:95:56:83:cf:ab:3a:a8:68:98:f1:
                    bd:62:ba:3a:3c:10:2a:b1:d1:74:15:ed:8d:79:c7:
                    68:3d:69:c1:f4:be:99:f9:e2:8d:f2:12:da:77:19:
                    6c:0e:49:20:56:94:3e:84:03:f5:dc:54:5c:77:14:
                    71:7a:96:99:bd:1e:87:36:ec:c6:2b:e7:b4:bc:68:
                    85:3d:4a:b4:2d:14:54:87:75:36:68:ff:b0:b8:e4:
                    1b:5b:a3:a0:df:b0:36:b9:1b:28:dd:df:3e:c3:1d:
                    c0:5f:bb:38:d0:2f:35:24:40:c5:b7:b6:a9:7a:7d:
                    71:b1:12:2c:00:29:55:8f:11:cd:3f:64:79:1a:4f:
                    33:6c:e2:1e:69:89:4e:ae:b4:3c:ef:72:7f:cd:6e:
                    b3:66:ab:e4:5e:03:68:8a:85:24:7c:81:be:80:fb:
                    f2:79:a6:6f:a3:92:a4:06:e7:36:ce:62:5e:bc:aa:
                    5b:37:2e:33:f7:62:3e:53:72:e9:8b:92:19:94:14:
                    8f:ca:6d:e5:4c:d0:0f:4c:4e:61:a4:10:0a:22:37:
                    6f:54:c3:5e:12:e0:13:f0:30:1e:1f:87:5b:37:b8:
                    f4:fc:b4:c5:bd:5d:e5:86:8b:8d:f8:f7:64:97:74:
                    c4:ed:f3:5f:63:31:74:14:8a:20:f6:81:8c:75:83:
                    8c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8D:9B:4C:EC:30:01:A2:06:0F:B1:6C:23:BB:11:2A:77:E2:21:F8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145751.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac1d::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:33:5d:09:9d:76:6b:f3:da:ec:19:fb:19:9d:72:fc:b1:9f:
         26:f0:cc:3a:35:b5:12:88:25:45:54:a3:5d:5d:26:3f:94:99:
         8a:3b:f0:aa:d3:92:96:83:7e:95:5a:8c:5d:23:9e:25:92:c3:
         62:92:96:27:99:a0:56:2c:90:e6:9d:2b:48:8c:c0:30:d7:9d:
         98:dc:15:72:67:45:55:c3:e1:49:de:c6:90:7b:24:77:e5:60:
         6e:e3:d7:4e:c8:04:2e:e6:08:ae:d8:4d:b8:6c:80:78:53:ff:
         76:6d:37:e4:7a:7a:f7:c2:e5:90:22:a4:4a:7a:ff:c9:57:a2:
         40:a1:77:f7:36:1e:5e:e8:17:4f:27:b4:2a:74:d1:02:e1:56:
         a6:c3:2f:a1:9f:77:f0:80:9d:fe:37:55:54:9d:6b:6a:db:d8:
         8a:1a:34:7a:a6:d2:7a:53:5a:5b:31:98:08:2e:ee:b6:1f:8a:
         8f:cc:86:31:d0:33:f6:aa:60:28:60:0b:83:e2:9f:83:5d:af:
         76:45:11:fa:19:7a:2e:4e:ed:6b:51:fa:da:b3:bf:cd:d2:0a:
         a7:44:2e:f7:2a:e2:d4:57:4f:9c:8b:a8:6d:b1:4c:be:65:52:
         61:40:a6:59:01:87:70:0f:82:13:5f:d3:3e:51:36:b9:d7:94:
         66:ad:8c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----