Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145813.roa
File:                     AS145813.roa (raw, json)
Hash identifier:          U3U8m3BXMMnZdO12yp9+VsNW0F/bZJHrOl/JLXvSD4M=
Subject key identifier:   00:AD:CF:32:F7:FF:61:BB:8F:A6:39:E0:3A:4C:31:B4:63:DA:5A:1E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       17BF1C149E8BA7648426BEB715FB16B6CA0F529E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145813.roa
Signing time:             Mon 25 May 2026 01:38:19 +0000
ROA not before:           Mon 25 May 2026 01:33:19 +0000
ROA not after:            Mon 24 May 2027 01:38:19 +0000
asID:                     145813
IP address blocks:        240a:ac5b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bf:1c:14:9e:8b:a7:64:84:26:be:b7:15:fb:16:b6:ca:0f:52:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:19 2026 GMT
            Not After : May 24 01:38:19 2027 GMT
        Subject: CN=00ADCF32F7FF61BB8FA639E03A4C31B463DA5A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:32:0d:d6:ee:5f:83:09:98:8b:d8:d3:c1:ac:
                    16:4f:10:3c:47:5a:2a:99:36:20:85:5c:2c:9e:86:
                    b1:b0:16:35:2a:78:01:a4:69:d7:be:45:42:5d:97:
                    56:52:ff:7b:d0:2a:85:c6:3e:8f:a1:32:a5:a4:11:
                    92:c1:2d:de:18:fb:9d:08:b6:25:14:0e:b9:04:21:
                    3e:c6:18:f9:1e:5b:23:04:ad:15:06:15:6e:65:c8:
                    e0:7c:6f:e4:be:63:dd:17:dd:85:7c:19:bb:3b:bd:
                    5f:98:83:e1:97:3a:ff:40:f1:1d:89:02:50:57:d8:
                    ca:d4:41:7b:ed:4c:2e:f2:9e:e3:92:a7:6c:12:a0:
                    9a:1f:e1:69:73:e9:19:e2:90:72:6f:50:46:d3:06:
                    fc:6b:65:a5:3e:f3:89:c8:0a:e3:6b:7d:85:30:a4:
                    b9:e4:5c:6c:bc:31:d5:00:ed:3a:a1:b1:0b:d8:ad:
                    a8:9e:0b:d3:e9:46:f6:3e:4e:14:a6:b7:3f:51:e9:
                    b6:9c:3d:36:c5:08:3e:44:31:4d:2d:18:be:24:c4:
                    f3:0c:f1:c4:c7:00:b1:93:64:87:62:a3:51:62:d0:
                    00:cd:df:1d:d9:9b:65:e7:ad:4f:93:23:9d:2c:f8:
                    36:ef:34:26:d2:36:f5:23:f7:75:fb:c1:8a:6e:52:
                    d9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AD:CF:32:F7:FF:61:BB:8F:A6:39:E0:3A:4C:31:B4:63:DA:5A:1E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145813.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac5b::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:fd:6f:b0:44:5a:04:4f:55:56:f8:09:04:0b:85:95:0e:fe:
         07:ff:b0:61:8e:ae:1a:c1:df:9e:0f:41:34:d7:5f:93:7b:3f:
         54:ed:5c:0e:d0:42:1e:c6:68:40:40:4c:9a:e4:de:c4:14:84:
         28:b1:eb:c9:a9:0f:be:a1:80:07:39:64:8a:3b:9e:3e:97:94:
         c5:8f:6f:92:89:0a:d6:3f:b3:d2:89:3f:f3:15:31:76:11:b7:
         32:34:f8:bf:01:11:b1:5d:ba:ae:72:7f:a4:2f:32:37:81:30:
         1e:14:64:02:9d:a6:2a:e4:d3:f7:86:70:c8:8d:90:22:84:f7:
         53:72:5b:c6:b2:7f:a5:9a:e3:8b:51:61:be:e8:09:77:af:71:
         5a:f0:ac:9a:d2:f5:9c:96:4f:ce:64:14:d9:ad:21:c1:76:8e:
         3e:c6:01:2f:fd:fc:38:dd:ca:51:6f:df:f4:c9:5a:fe:e0:91:
         a8:15:55:75:58:0a:60:74:a5:de:00:d5:77:41:77:12:50:60:
         81:dc:f0:0a:bf:13:fe:ca:6b:54:8b:20:00:77:17:39:17:23:
         f3:fe:31:ea:9e:d8:9f:d1:69:36:c8:73:3e:80:b5:07:7c:48:
         9e:91:5c:a5:33:0f:84:0c:80:cc:4f:a4:f0:d0:cf:0e:f5:52:
         f5:96:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----