Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145978.roa
File:                     AS145978.roa (raw, json)
Hash identifier:          dv2wDHlClXbv47ItP/g85I7Y4YuH1hASgl9La+eg0Ek=
Subject key identifier:   BC:01:3F:8C:E4:E2:4C:31:8E:14:22:C9:F5:14:BE:D3:1F:45:BA:9A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4B6828DF5AD500EB4C2BFCB2B6DF2180EDD5463D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145978.roa
Signing time:             Fri 22 May 2026 07:08:43 +0000
ROA not before:           Fri 22 May 2026 07:03:43 +0000
ROA not after:            Fri 21 May 2027 07:08:43 +0000
asID:                     145978
IP address blocks:        240a:ad00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:68:28:df:5a:d5:00:eb:4c:2b:fc:b2:b6:df:21:80:ed:d5:46:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:43 2026 GMT
            Not After : May 21 07:08:43 2027 GMT
        Subject: CN=BC013F8CE4E24C318E1422C9F514BED31F45BA9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:eb:3e:6c:52:0c:fe:40:13:ce:5a:ba:13:8e:
                    d1:69:61:85:ea:38:23:a6:ca:4a:81:21:a9:3d:32:
                    f2:1e:24:3a:32:74:a1:a7:3d:c4:b4:ec:9b:ef:ef:
                    ea:7c:44:02:a3:18:b4:9a:46:91:7d:f3:19:a7:37:
                    11:37:2a:dc:cb:52:32:a2:32:ca:d5:30:bb:d3:47:
                    ae:79:cf:1d:51:d2:55:ac:35:57:e5:30:bb:50:8f:
                    42:57:53:31:70:be:67:71:0e:fe:d5:44:50:99:b9:
                    a2:85:e6:98:31:65:28:70:3f:93:bb:12:30:6b:76:
                    f5:97:28:45:70:83:d5:f4:ad:d5:5b:cb:24:2d:20:
                    9c:14:4c:bf:95:55:a9:43:5e:60:86:e6:63:f9:dd:
                    6f:79:71:24:fa:e3:e3:b2:70:c5:1d:ed:ae:f0:c5:
                    a7:31:a0:af:5a:de:60:3b:77:77:d5:22:6c:22:4f:
                    0a:04:49:ca:84:63:7e:98:09:02:b6:39:81:ad:b7:
                    36:1b:69:17:b2:1e:a4:96:b1:b1:ef:f1:0e:2a:bc:
                    13:30:38:e9:fd:4d:0f:1a:6c:f6:b9:5b:92:cf:f0:
                    71:68:e0:ba:e3:34:98:78:2b:80:b1:fb:b4:d6:fe:
                    29:08:36:36:e5:20:79:38:38:89:95:77:3e:1f:7d:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:01:3F:8C:E4:E2:4C:31:8E:14:22:C9:F5:14:BE:D3:1F:45:BA:9A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145978.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad00::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:b0:ee:ed:3e:a6:8a:68:8d:d6:ed:0e:48:b3:fe:d9:84:99:
         16:0b:a1:77:84:1e:db:a6:72:68:a8:b8:22:8e:aa:fa:4b:da:
         c7:ff:83:97:c9:51:72:78:43:a4:0d:fd:07:01:cb:f9:22:53:
         cf:70:c5:de:0a:30:37:a9:56:3a:1a:44:de:12:8c:ed:09:e3:
         e0:e3:c1:75:37:75:b8:64:52:2b:3c:ae:69:aa:11:2a:a7:63:
         de:30:30:bb:2e:45:ec:1f:e2:17:dd:d0:17:9c:88:a9:b4:1d:
         a3:5b:d5:ec:cd:90:48:d1:c6:26:4f:60:94:e3:77:e3:cb:90:
         69:83:a1:31:d4:7e:93:d3:74:8a:cb:b4:76:da:80:2f:92:6f:
         b0:84:03:e2:0a:e5:cc:c6:f9:75:02:2d:9a:99:39:84:ab:a4:
         9b:4e:4a:97:46:86:da:2c:bd:87:b3:6a:e7:51:99:f7:ac:4d:
         d6:dc:76:37:95:a0:55:a8:b6:71:42:f7:85:9b:43:09:67:0a:
         89:b1:e7:10:f4:3f:84:01:48:86:75:b1:b1:f3:8f:11:36:a7:
         ae:07:d2:23:6d:f1:a1:26:e3:2f:c8:ae:f6:8c:8e:4a:a0:d5:
         b0:b5:ce:32:71:73:1c:d7:29:15:64:f4:60:06:ca:d2:ab:50:
         fa:e6:a0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----