Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145081.roa
File:                     AS145081.roa (raw, json)
Hash identifier:          KaB7quM32hGsbYGLwcNsY7ouJAigMn/2jTSJGRmd1iE=
Subject key identifier:   EE:87:9D:DF:75:87:0C:F4:09:F6:C8:54:A3:F2:A5:7E:69:CE:B6:26
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       09B9730F6283137537FF039F391A9BCF5F3F9A85
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145081.roa
Signing time:             Fri 22 May 2026 02:47:59 +0000
ROA not before:           Fri 22 May 2026 02:42:59 +0000
ROA not after:            Fri 21 May 2027 02:47:59 +0000
asID:                     145081
IP address blocks:        240a:a97f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b9:73:0f:62:83:13:75:37:ff:03:9f:39:1a:9b:cf:5f:3f:9a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:59 2026 GMT
            Not After : May 21 02:47:59 2027 GMT
        Subject: CN=EE879DDF75870CF409F6C854A3F2A57E69CEB626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:0d:25:0b:50:a2:97:c7:ec:1f:6c:01:3e:
                    06:d6:9d:fd:28:f6:1e:f0:47:f5:f1:53:4c:99:6d:
                    2c:48:02:80:df:b7:ec:c4:85:4b:1e:57:b6:5a:08:
                    cc:44:cc:5b:a1:33:59:05:ef:2e:e1:bc:24:fb:6a:
                    7d:9e:13:a0:f2:ab:fb:e6:c4:c9:82:10:02:f9:a8:
                    e5:7d:50:05:10:1f:42:d1:58:58:af:c4:14:a0:26:
                    1b:3d:52:e4:3c:9a:8b:65:da:65:56:c7:6c:e5:1b:
                    49:e5:4d:62:92:2a:e7:48:ef:23:cf:b8:ea:19:76:
                    a5:09:b9:b3:e1:22:9a:ad:7f:49:06:b7:33:d4:c0:
                    72:d8:e1:98:bb:b3:3e:94:dc:90:bc:58:c4:1a:54:
                    5c:29:e5:2f:40:d5:c9:22:88:5f:e3:f2:e7:49:37:
                    86:ea:a6:57:ba:9d:c8:e7:80:db:7f:fb:f0:44:9f:
                    30:1f:ec:35:7b:fd:a8:64:e7:ba:f6:8e:ad:2a:23:
                    60:76:88:26:43:78:bb:d8:24:8c:09:5f:51:c3:02:
                    3a:60:36:43:1a:74:cd:97:c9:8a:77:e6:ee:50:d1:
                    46:da:06:90:53:d5:18:fb:41:98:c4:65:34:8c:a2:
                    e5:f8:90:36:49:8d:15:35:e2:5f:ef:cb:e5:6c:58:
                    4d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:87:9D:DF:75:87:0C:F4:09:F6:C8:54:A3:F2:A5:7E:69:CE:B6:26
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145081.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a97f::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:5f:8d:a2:8b:73:c1:71:02:c6:f8:e2:92:61:26:cb:21:71:
         08:41:fb:57:d5:df:2a:19:8e:b9:a8:d6:ae:52:6a:0c:30:2c:
         a7:3e:c6:b9:d3:b2:c5:3e:27:5e:37:f6:36:48:3c:64:af:db:
         59:0c:39:ff:65:db:71:32:1c:f2:0f:a8:eb:46:9f:44:00:88:
         d8:a5:85:00:e5:42:20:17:31:ee:a3:cf:34:46:ea:d9:98:60:
         9f:10:ba:0f:16:4d:b0:64:c3:42:fd:c0:a6:a3:39:8b:8a:5a:
         62:c2:10:ee:98:22:0c:34:61:d0:83:9c:8c:eb:7d:be:5a:9d:
         d4:f1:81:0c:98:dd:35:11:63:7a:c0:6c:e6:8c:f2:79:fb:84:
         19:46:70:76:9c:8d:44:41:90:2e:e6:4e:4b:39:6e:9a:1d:ff:
         a4:e1:20:bf:03:9c:5f:6a:2b:b0:8b:66:18:a5:64:d4:97:d2:
         f7:bf:e2:ca:49:89:5d:37:a9:57:dc:bc:c7:22:67:ef:ab:e6:
         89:2f:e5:86:52:9b:69:dc:1a:a8:37:34:94:6e:e1:fd:23:33:
         19:42:4f:d3:8c:52:b9:5c:36:a3:14:f0:7e:75:ab:78:5c:6b:
         0b:eb:1a:9a:c9:d9:ef:3f:04:d9:67:01:90:b5:b0:86:f8:6c:
         32:d2:ae:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----