Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145752.roa
File:                     AS145752.roa (raw, json)
Hash identifier:          6W1r6fOz2MOIzL2HdPJIwkXoDXi/h+HoWSyMzGXX9Hk=
Subject key identifier:   08:14:E4:F7:44:52:40:26:5D:FE:D5:CF:75:B8:09:1F:3F:A2:A2:A9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       37F748A0235B1B8F2E2261B8F51DA24DECEDC348
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145752.roa
Signing time:             Fri 22 May 2026 07:09:17 +0000
ROA not before:           Fri 22 May 2026 07:04:17 +0000
ROA not after:            Fri 21 May 2027 07:09:17 +0000
asID:                     145752
IP address blocks:        240a:ac1e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f7:48:a0:23:5b:1b:8f:2e:22:61:b8:f5:1d:a2:4d:ec:ed:c3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:17 2026 GMT
            Not After : May 21 07:09:17 2027 GMT
        Subject: CN=0814E4F7445240265DFED5CF75B8091F3FA2A2A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:c6:36:26:02:c7:8b:b0:92:12:5b:47:e7:
                    5d:64:6e:ac:0a:e6:ec:67:0c:e7:c7:51:10:bd:c7:
                    73:06:be:f1:8a:8d:69:24:3e:61:f1:f8:35:a6:4c:
                    34:de:5f:40:12:83:e5:ed:48:64:f2:ba:c9:8c:5d:
                    a0:3f:9f:18:f5:8d:4e:a2:f7:d9:2a:02:72:38:0b:
                    d1:23:e1:10:aa:30:70:50:a6:51:33:58:cd:6a:cc:
                    46:bd:82:a5:07:66:cc:49:b7:4e:3d:dd:d6:fc:09:
                    73:78:e2:19:4b:2c:c3:ac:ed:24:12:1d:f9:16:35:
                    79:12:64:6e:47:24:c6:2a:36:04:e5:b0:44:cb:d8:
                    8b:5f:0b:be:f8:3a:68:60:2b:60:af:54:5d:66:7b:
                    2a:b0:d9:48:dd:92:00:fa:55:55:a6:be:40:21:0a:
                    36:7b:f1:63:9e:0f:d4:da:5d:0c:44:b7:5c:5e:21:
                    c7:9f:5f:3d:99:e1:ad:c4:fe:94:9a:ca:dc:03:ee:
                    61:82:6c:9d:c5:15:e8:69:90:c2:39:dc:84:64:aa:
                    f3:a9:67:13:52:72:01:87:5e:64:35:4f:d4:05:64:
                    60:95:4b:db:0b:30:26:7d:9e:f8:b7:e1:87:b7:77:
                    a2:b2:7b:33:88:23:54:c3:20:ad:08:1a:fd:f1:43:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:14:E4:F7:44:52:40:26:5D:FE:D5:CF:75:B8:09:1F:3F:A2:A2:A9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145752.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac1e::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:33:6c:77:54:f4:41:65:8a:a5:4e:e1:a3:d8:fa:83:cc:d1:
         d3:0d:e3:45:c5:01:d8:70:e9:d9:4d:86:1b:61:47:db:2a:15:
         b3:97:07:b6:6a:c0:1f:d6:e5:29:c4:e5:33:30:b6:ba:6f:6f:
         5d:86:b6:ba:dc:e9:06:6f:13:68:34:07:cd:8e:dd:5f:f9:ab:
         1a:f3:39:9f:f1:a3:51:5c:82:16:4a:93:bc:12:90:31:9c:40:
         ec:06:73:99:5e:2a:d7:47:fa:19:41:62:91:8b:a3:76:e2:12:
         c8:74:41:ce:b5:db:ad:d6:47:e7:6f:4a:65:b0:c4:14:8f:82:
         dc:1f:99:1f:7b:5e:0a:27:5d:39:f6:f2:b0:5a:d8:73:f1:94:
         69:e2:1c:ee:94:d8:89:84:2a:55:ac:19:43:36:1b:62:f6:08:
         56:03:fd:95:7b:f9:71:4d:60:f0:4e:bb:c0:3e:63:3d:36:31:
         4a:06:a1:91:2b:21:63:d2:92:2b:2d:42:1b:40:df:4b:ad:d0:
         fc:96:f4:2f:33:a5:39:86:bb:13:78:72:d5:4b:4c:c7:de:78:
         63:28:34:a5:fe:c7:84:dc:9e:f0:e1:10:c7:21:26:be:a8:e9:
         e8:e5:84:a7:a8:88:38:47:da:87:bc:1d:a4:89:15:ef:57:b5:
         c4:b8:29:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----