Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145210.roa
File:                     AS145210.roa (raw, json)
Hash identifier:          HTOO4yKP5EO0B+lC0wAfpTdEVEZkgUMNgeQSsGu5+ek=
Subject key identifier:   AD:E9:B0:E7:C0:8B:7C:0E:FF:85:4B:C5:C9:3D:C3:EB:2C:E7:CD:3B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       408A1A1D96ADE79B68324BC9D08572029DE1B245
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145210.roa
Signing time:             Fri 22 May 2026 01:50:41 +0000
ROA not before:           Fri 22 May 2026 01:45:41 +0000
ROA not after:            Fri 21 May 2027 01:50:41 +0000
asID:                     145210
IP address blocks:        240a:aa00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8a:1a:1d:96:ad:e7:9b:68:32:4b:c9:d0:85:72:02:9d:e1:b2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:41 2026 GMT
            Not After : May 21 01:50:41 2027 GMT
        Subject: CN=ADE9B0E7C08B7C0EFF854BC5C93DC3EB2CE7CD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:9a:91:88:1e:48:43:a8:c5:fd:37:46:e8:
                    90:f8:49:50:3b:6a:dd:de:52:59:35:4e:91:ff:e2:
                    6c:34:99:f8:cc:0c:ba:f3:cb:4f:aa:b5:95:1f:24:
                    b3:f7:ac:aa:06:b1:d5:aa:c0:a4:b0:a0:2c:52:dc:
                    d0:61:79:83:75:7b:0c:3a:f5:20:11:40:2b:26:ab:
                    3b:12:de:ca:64:76:20:bb:33:8a:44:ca:c8:b4:19:
                    70:98:ec:66:0f:bc:41:39:7c:41:14:37:47:ec:29:
                    01:42:d8:32:8a:45:29:1a:1d:fd:15:0a:d3:6b:92:
                    1e:c0:f6:87:08:20:4c:11:3e:4d:7c:af:ef:40:3c:
                    5c:1f:2a:2c:37:f9:93:05:21:3d:8a:91:6c:0b:20:
                    01:71:dc:bd:c8:44:ee:ec:58:46:40:7b:5a:53:99:
                    14:f1:50:c4:c3:1a:bf:f7:81:c2:63:60:60:40:bd:
                    df:a2:2c:e2:8d:14:05:9a:a7:b7:7d:88:ff:8a:ce:
                    a9:da:6c:41:e3:79:a0:ac:7e:27:1e:7d:ac:c8:b6:
                    32:c7:c8:e0:75:7a:1a:49:45:1d:54:61:99:00:c9:
                    d4:f3:87:82:ef:1d:51:1f:80:01:32:11:ef:1e:c4:
                    e2:6b:f1:8c:78:48:df:bf:02:36:0d:48:e9:fb:a3:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E9:B0:E7:C0:8B:7C:0E:FF:85:4B:C5:C9:3D:C3:EB:2C:E7:CD:3B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145210.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa00::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:2c:1e:12:38:0e:1b:4f:35:66:58:0e:67:3c:da:1d:e9:44:
         b2:2e:5a:c2:c0:d4:76:ae:d6:68:5b:fc:3a:91:8b:05:d2:b7:
         d5:11:be:58:ca:b7:0c:22:52:20:ff:a3:13:62:1e:25:8d:da:
         1c:6d:fa:b7:ca:ed:7a:90:4f:81:70:21:2f:47:07:1f:5f:63:
         23:1b:35:63:f6:3c:43:70:11:54:51:92:c4:9c:66:4e:58:20:
         d2:e8:f2:cf:a5:91:b3:a9:4f:b7:41:66:2b:69:72:4c:8e:c9:
         36:85:ed:fe:7b:62:6b:34:04:d8:e2:31:5b:97:a1:88:f5:0d:
         a3:e4:68:69:f0:df:0c:f1:cb:02:b4:11:63:c9:40:fc:68:6e:
         60:d0:e4:b0:fe:b6:07:d6:ee:3a:b2:7c:31:87:fd:53:af:b1:
         da:11:48:1d:7d:24:56:48:c9:1f:4c:5a:51:43:8f:db:0c:9c:
         b1:0b:d7:ae:ce:59:92:a7:72:64:d2:07:dd:f3:4c:19:d1:9e:
         96:ea:ae:82:11:97:da:bc:af:ed:59:7d:3c:ea:1c:64:a1:cb:
         e0:2a:82:24:9c:41:02:89:ef:26:b2:64:07:76:ef:68:99:d0:
         9c:2b:f5:92:67:d0:b9:e1:02:05:c0:54:b7:f2:04:40:68:db:
         f2:76:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----