Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145895.roa
File:                     AS145895.roa (raw, json)
Hash identifier:          z3IAnEXVzrJWwhmrI8N2JfPEE1f38dN/YX0pwt/3Ai8=
Subject key identifier:   20:76:4E:F0:DC:54:7F:58:6B:A8:37:D4:D1:52:18:0F:77:8C:2E:81
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4BEF3666FB75105A09D76A657E7286F2C38C174F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145895.roa
Signing time:             Mon 25 May 2026 02:22:25 +0000
ROA not before:           Mon 25 May 2026 02:17:25 +0000
ROA not after:            Mon 24 May 2027 02:22:25 +0000
asID:                     145895
IP address blocks:        240a:acad::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ef:36:66:fb:75:10:5a:09:d7:6a:65:7e:72:86:f2:c3:8c:17:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:25 2026 GMT
            Not After : May 24 02:22:25 2027 GMT
        Subject: CN=20764EF0DC547F586BA837D4D152180F778C2E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:61:31:bd:b0:2d:89:18:5b:54:ad:1d:99:06:
                    47:26:cd:e1:70:f9:59:51:a8:f5:90:f4:5c:62:32:
                    97:96:6d:42:16:f7:f9:22:59:bb:e4:92:4f:7a:7f:
                    5b:e6:80:a6:65:db:a2:a4:e4:62:7e:9f:66:70:3f:
                    48:d8:38:5f:5a:68:e7:ad:0c:16:82:19:fb:25:e3:
                    3c:d9:3f:ce:23:d7:b0:2d:9a:18:b5:26:5d:ad:f4:
                    9a:d5:b4:70:e0:8a:c3:e5:01:b7:c9:bd:6b:7e:84:
                    b2:cf:c1:b0:61:f3:b5:ba:79:3e:5e:56:ff:d9:7a:
                    fb:51:82:35:da:dd:85:75:09:53:df:d7:54:9a:e7:
                    0e:f7:de:f2:c2:93:eb:7c:51:cb:33:4d:3a:aa:9f:
                    72:25:98:e3:0a:88:78:15:29:29:66:f8:65:93:10:
                    21:af:a0:6f:8b:58:5e:9b:1c:65:9f:28:fe:77:0a:
                    18:1a:02:17:38:0c:7d:d4:9d:72:04:f3:a2:37:b2:
                    11:ee:a4:55:2b:53:52:07:4e:47:43:49:58:ba:f9:
                    97:82:0c:17:0f:08:e1:cf:9a:07:ed:e9:6e:9c:35:
                    b1:15:29:49:d6:e2:0c:e4:67:e7:57:43:6c:d8:0d:
                    35:2d:70:91:29:a2:be:96:f6:c3:5a:48:75:6f:98:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:76:4E:F0:DC:54:7F:58:6B:A8:37:D4:D1:52:18:0F:77:8C:2E:81
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145895.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acad::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:e4:af:96:33:d4:3c:74:90:f5:9d:90:82:68:ed:b8:57:fe:
         e6:32:07:36:58:93:32:75:6d:52:1b:1e:22:fd:62:ba:20:ab:
         c5:ae:bc:25:d0:bf:44:3e:15:77:81:be:7a:b7:4f:be:37:06:
         93:55:eb:df:7a:94:41:4a:13:85:a1:d4:65:51:a3:e2:63:e6:
         f7:b8:68:87:40:30:e9:e8:bd:5a:7a:31:30:b5:86:cb:64:14:
         e4:3f:d3:34:4a:5e:75:3e:ca:29:99:78:cb:d0:fc:ae:95:f8:
         4b:3f:f7:fe:2f:9c:49:1d:f6:dd:58:8a:de:36:9e:1e:68:a6:
         79:9d:0d:29:0c:53:35:4d:0f:de:3a:9d:0d:64:ad:d3:d6:55:
         7e:13:0c:72:8b:64:f0:2b:ff:3e:69:14:9e:89:e7:ef:71:e8:
         31:e2:0d:23:34:c8:f4:2b:29:28:37:31:19:cd:3e:43:0f:db:
         34:0d:5b:9e:73:6a:73:db:31:d1:a3:19:d6:05:a0:4b:eb:ee:
         24:15:93:ea:d2:2b:27:9b:5c:6f:61:e1:c1:ef:fa:f9:91:54:
         b4:63:24:75:2a:47:95:1c:f9:3c:fd:ad:08:51:b0:0a:00:17:
         8c:e9:44:79:3d:f1:d7:51:61:bd:fa:ae:a1:75:25:4b:96:9d:
         ea:b6:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----