Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145010.roa
File:                     AS145010.roa (raw, json)
Hash identifier:          xHN9MQdwz6/AV58jG56553QG+F+Fhm7MPzuT/xK7CL4=
Subject key identifier:   F5:97:88:72:70:17:0B:07:64:8C:57:85:94:50:80:91:76:00:1C:F7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0D907B56F0D3563B29CF0F1DF8EDFA8317D6C812
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145010.roa
Signing time:             Fri 22 May 2026 06:27:58 +0000
ROA not before:           Fri 22 May 2026 06:22:58 +0000
ROA not after:            Fri 21 May 2027 06:27:58 +0000
asID:                     145010
IP address blocks:        240a:a938::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:90:7b:56:f0:d3:56:3b:29:cf:0f:1d:f8:ed:fa:83:17:d6:c8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:58 2026 GMT
            Not After : May 21 06:27:58 2027 GMT
        Subject: CN=F597887270170B07648C57859450809176001CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:39:67:7f:4f:91:ed:dd:e2:96:1f:e3:25:
                    5f:b1:45:ae:48:50:7d:26:35:41:4e:ba:5e:43:18:
                    f9:64:62:53:58:d4:77:d9:8e:85:f7:76:9f:f1:75:
                    4c:0f:a5:40:5d:df:85:06:6f:a1:9d:04:48:2a:0f:
                    c1:54:be:37:f3:f4:b6:5f:86:43:6b:29:d9:29:35:
                    f8:50:d4:ef:87:5e:7c:81:d1:27:ae:87:03:de:5d:
                    26:55:6d:85:28:40:26:ab:74:74:12:04:d5:67:1a:
                    bb:11:b9:07:2c:96:9c:f6:da:ce:c8:0b:e2:36:50:
                    38:d2:ba:e4:af:bb:8d:98:75:c2:85:64:b8:12:a2:
                    80:27:2a:7a:0b:06:d5:77:74:71:42:7a:24:d9:42:
                    83:fd:2f:10:84:bf:d8:92:06:97:b2:b2:36:74:f3:
                    1e:96:23:79:4d:a0:3d:e4:86:02:74:f7:6f:7b:23:
                    87:a0:1a:1c:61:bf:65:be:35:7b:26:b3:06:df:af:
                    0d:e4:5d:90:5c:f7:51:b2:eb:8b:be:9a:61:fa:ee:
                    d4:5c:6b:55:58:59:cd:30:57:69:bc:c1:26:26:55:
                    28:31:d5:4d:ec:ef:f0:ce:4f:a9:d1:de:31:25:66:
                    17:2e:72:fd:90:05:92:1f:1d:2d:4f:50:39:28:3f:
                    e5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:97:88:72:70:17:0B:07:64:8C:57:85:94:50:80:91:76:00:1C:F7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145010.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a938::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:7a:cc:08:e7:62:1a:11:7a:68:ad:19:53:3e:72:e3:c4:db:
         cd:25:73:1f:5a:2e:a9:4f:95:85:09:ef:da:59:fe:dc:00:a3:
         2a:c1:a0:4d:65:c6:c5:f6:08:eb:45:d6:e7:47:92:40:55:5a:
         4b:a0:18:06:da:8b:2b:39:31:c6:bb:c0:7b:5a:43:5c:25:83:
         b6:99:ae:6a:1b:cd:5e:21:a1:dc:63:94:b4:a9:80:be:98:16:
         60:ac:99:8a:22:d7:d7:84:bc:80:b9:84:d1:58:58:f1:d0:60:
         99:dc:f8:d0:89:df:dd:bf:08:4f:b2:d7:f9:5e:76:c7:e0:8a:
         17:0d:24:49:6d:f2:6b:c7:da:dd:91:7e:03:7c:25:88:aa:e5:
         b7:c2:1a:95:87:5f:b7:14:8f:8e:d5:b5:10:bf:1b:55:a7:2f:
         0c:48:3e:3f:6e:43:08:9e:d4:07:03:3a:ae:dd:cf:0d:fd:62:
         8a:ee:c0:48:aa:98:e3:fc:d3:44:a2:47:ce:5f:db:2e:e5:46:
         fd:bb:98:a6:a3:e8:60:15:d2:52:98:e0:27:b2:0d:28:9f:d2:
         bc:2f:41:04:71:20:89:12:a5:08:47:87:89:90:da:18:68:35:
         f2:60:a8:be:bc:5b:da:e8:eb:81:e7:98:16:7c:53:11:e8:73:
         64:ca:eb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----