Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145106.roa
File:                     AS145106.roa (raw, json)
Hash identifier:          Mo1dptbZqdQAkaU8wHEPPC5thjKKpsmmDY1WKFa7I0Q=
Subject key identifier:   0B:71:FC:FE:0C:D3:62:37:E0:EF:2B:44:C7:B9:48:5D:BC:52:01:CF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0ECCB7EE6241DDCC870964855BB603CBF8383EE3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145106.roa
Signing time:             Mon 25 May 2026 01:51:29 +0000
ROA not before:           Mon 25 May 2026 01:46:29 +0000
ROA not after:            Mon 24 May 2027 01:51:29 +0000
asID:                     145106
IP address blocks:        240a:a998::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cc:b7:ee:62:41:dd:cc:87:09:64:85:5b:b6:03:cb:f8:38:3e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:29 2026 GMT
            Not After : May 24 01:51:29 2027 GMT
        Subject: CN=0B71FCFE0CD36237E0EF2B44C7B9485DBC5201CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5a:59:15:ac:e9:f6:6d:8a:45:ea:f1:73:25:
                    be:eb:35:f5:ee:c7:b0:52:7f:41:ae:86:e0:89:4b:
                    2d:ed:f6:5e:cc:92:28:7d:99:62:31:d8:d4:02:2f:
                    0a:63:35:0d:73:db:ca:52:6f:fd:ee:a0:9e:aa:b3:
                    12:ed:44:b9:66:67:c4:3f:55:c7:11:06:ce:b5:73:
                    8a:e6:a7:a0:86:d6:5e:1a:c2:e8:29:cd:d8:8b:88:
                    34:8e:1c:0a:13:04:53:eb:58:11:6a:10:95:6a:d1:
                    f4:55:2d:b2:c0:fa:38:d4:58:26:68:f8:72:09:c3:
                    1a:ae:ab:c6:f4:e8:4a:f7:c7:a5:d8:1b:97:7e:2e:
                    74:56:1a:20:f9:c5:df:b4:ca:8b:b4:af:e8:c2:dd:
                    67:78:f1:70:8a:ff:7c:56:41:0b:84:3c:30:71:73:
                    f9:83:6d:68:33:c0:fc:ad:91:5c:c8:9d:0e:68:d4:
                    ec:4b:e9:4c:82:fd:45:31:33:d9:ab:66:cd:ae:c8:
                    34:69:df:6c:89:90:3b:d3:04:47:1f:be:39:57:ec:
                    00:70:d0:bf:36:37:68:b8:24:4a:d6:86:ce:52:69:
                    b5:92:2c:d8:56:56:39:b5:72:47:53:bc:0e:b3:ea:
                    40:e3:60:6e:5b:9a:7f:0c:6f:f3:3d:5e:af:85:27:
                    9d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:71:FC:FE:0C:D3:62:37:E0:EF:2B:44:C7:B9:48:5D:BC:52:01:CF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145106.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a998::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:1a:0e:c6:9e:ba:9a:07:0a:01:31:05:e8:31:99:d0:23:26:
         c6:18:e7:c5:a1:57:9d:56:70:82:d1:33:d8:ea:eb:c6:8c:5e:
         07:c0:46:89:dd:64:2d:c7:75:75:cf:93:40:a9:a6:fd:c7:6a:
         06:f1:84:f8:ee:b7:4d:32:69:79:c1:ad:51:1b:a7:35:4d:b2:
         6d:40:31:e4:1a:b3:53:f4:4f:13:49:97:14:37:76:c3:75:e6:
         2b:3e:cb:d4:28:9c:1f:8d:38:27:5d:fd:83:7c:33:73:fe:4c:
         fb:8f:19:96:68:95:72:c5:d5:5b:c4:ff:45:2e:e0:ec:9d:b1:
         96:78:03:f3:32:9f:5f:29:03:21:92:94:26:78:bd:c6:14:9a:
         29:27:38:0c:e2:44:fd:70:6b:d8:ff:2b:33:9c:7d:1f:8e:6b:
         d5:27:82:00:50:45:e7:28:86:07:05:df:cc:cc:44:b0:37:17:
         51:5c:f8:f3:30:ee:cb:c9:7a:87:0c:14:1d:15:9e:95:88:17:
         30:6e:a3:db:c8:ce:a5:fd:e4:de:42:e3:41:91:86:9a:0f:e1:
         c4:9c:b9:12:45:9b:dd:3b:13:31:ea:9c:80:d8:a5:84:fa:49:
         72:ce:d8:f9:87:d7:b2:2f:c6:3d:7b:ed:b0:33:c4:3d:94:23:
         6c:e6:f8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----