Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145160.roa
File:                     AS145160.roa (raw, json)
Hash identifier:          by6DnZpTWg/vEWBbZu5jQKpJE7D5XICbR43HpiAC0Pk=
Subject key identifier:   F5:6B:55:5F:F3:E7:88:69:5F:9F:01:95:56:EC:BF:1B:00:CC:57:26
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       14D7DED7C29D7BE90CE5541FD91A857AE711DCD3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145160.roa
Signing time:             Tue 26 May 2026 01:13:21 +0000
ROA not before:           Tue 26 May 2026 01:08:21 +0000
ROA not after:            Tue 25 May 2027 01:13:21 +0000
asID:                     145160
IP address blocks:        240a:a9ce::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d7:de:d7:c2:9d:7b:e9:0c:e5:54:1f:d9:1a:85:7a:e7:11:dc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:21 2026 GMT
            Not After : May 25 01:13:21 2027 GMT
        Subject: CN=F56B555FF3E788695F9F019556ECBF1B00CC5726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:9c:49:54:6a:81:e7:7f:b1:02:e7:ad:f5:
                    c8:d1:b1:25:82:11:6a:d5:80:8f:de:91:dc:c7:88:
                    98:a1:b2:9b:a4:a8:0e:70:50:0c:ee:6a:b3:57:56:
                    6e:88:91:3b:23:2b:6c:5f:8f:b9:fd:56:a0:fc:78:
                    14:8b:51:91:e9:4d:bf:76:b0:90:ac:d4:c1:e9:79:
                    b5:a0:c0:4c:cd:aa:f9:66:ee:84:23:ca:19:70:3d:
                    fb:68:2b:07:65:e4:58:ec:39:2a:3e:fa:66:ea:e3:
                    5b:09:4e:8b:fe:2a:a9:46:6e:3b:05:ea:bb:67:34:
                    0a:10:05:a8:98:01:0e:02:48:81:46:34:2c:57:e1:
                    fd:ae:ba:84:17:2a:a5:b0:c2:8e:31:20:88:bf:40:
                    2e:10:71:6e:b2:a4:dc:50:62:07:ac:33:b6:5b:51:
                    37:a1:6f:b9:75:26:9b:8f:38:c8:53:1e:75:27:c7:
                    af:91:e4:ab:0e:89:60:57:6c:9f:a4:fd:3b:26:ae:
                    17:4b:f1:46:3f:d8:78:92:3c:6c:f2:7a:83:b7:6c:
                    aa:ae:53:c3:84:4a:f6:97:3d:80:49:2e:c7:27:b8:
                    74:63:75:1b:b8:a7:cc:81:65:b6:3a:f9:28:bd:a6:
                    c7:63:4a:f2:4c:55:10:2d:84:2d:5c:03:ad:ef:c3:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6B:55:5F:F3:E7:88:69:5F:9F:01:95:56:EC:BF:1B:00:CC:57:26
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145160.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9ce::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:18:43:ef:35:0b:c7:1f:74:71:8a:3c:43:3d:a6:36:47:c2:
         c1:a3:c8:08:98:24:d2:99:f1:88:3a:18:23:da:47:71:8d:6b:
         21:11:6f:b9:47:f6:82:e4:07:10:f3:a5:47:c5:88:fb:a0:96:
         2b:15:d6:98:2b:ff:50:b5:0d:96:1c:71:88:f1:ba:a8:f3:4a:
         b0:98:aa:35:72:01:ff:b9:93:a1:f8:38:96:3d:a4:53:25:fb:
         48:8a:b2:61:98:c5:67:26:62:6e:fe:13:d6:fc:1c:49:4c:95:
         f7:94:f7:46:30:5c:4c:e3:49:30:b9:e5:d9:98:3b:d2:6a:5f:
         2a:ce:55:e5:e8:93:b8:0a:b2:82:09:1d:82:0b:0f:fa:5c:bd:
         c5:9b:34:f3:9b:e7:b8:cf:f2:ac:4c:3f:17:4c:57:6e:bd:1a:
         eb:dc:b7:12:c1:8b:0e:84:1c:0e:e9:f7:2d:9d:8a:bc:6a:32:
         23:4e:ef:15:87:89:f4:e8:ea:71:37:cd:23:1a:5c:ee:4f:8e:
         ab:ac:9c:d0:93:2a:54:1f:72:ba:82:22:c4:04:bb:2d:b1:a8:
         53:14:aa:10:93:6a:ad:c5:3d:9e:5e:ce:29:bc:5b:ab:0b:cd:
         87:f7:6e:e9:44:42:0e:57:b4:0a:cf:f9:e5:a7:a7:a3:17:fd:
         dc:86:2d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----