Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145243.roa
File:                     AS145243.roa (raw, json)
Hash identifier:          sg7gYQ0QaY0Vh/4iKXo5pzx6+TpGLA+HCU1M+IsY2+U=
Subject key identifier:   F6:14:6B:6D:E2:DE:45:99:02:39:DA:F8:76:88:17:F9:02:05:76:49
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1CBDDE094CDEFCB33E8B013D178C8881D107C10A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145243.roa
Signing time:             Fri 22 May 2026 07:32:26 +0000
ROA not before:           Fri 22 May 2026 07:27:26 +0000
ROA not after:            Fri 21 May 2027 07:32:26 +0000
asID:                     145243
IP address blocks:        240a:aa21::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:bd:de:09:4c:de:fc:b3:3e:8b:01:3d:17:8c:88:81:d1:07:c1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:26 2026 GMT
            Not After : May 21 07:32:26 2027 GMT
        Subject: CN=F6146B6DE2DE45990239DAF8768817F902057649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:15:23:fb:68:a7:1b:cf:3b:c7:e8:cd:4a:a2:
                    0b:6b:9e:4a:20:c4:91:0e:22:80:23:33:bf:a5:a8:
                    0b:47:41:a4:3c:b7:33:d4:4c:04:92:61:cf:db:11:
                    91:2b:f5:c9:e8:6b:a5:14:36:e1:04:e9:12:6a:8a:
                    82:8f:46:e5:3e:c2:91:36:81:96:4e:bf:c3:31:fb:
                    68:86:b2:11:31:24:9e:9e:07:72:8b:4d:a3:31:fb:
                    5c:12:c3:89:0c:dc:8b:c0:10:1b:06:f9:f6:3e:f6:
                    94:3b:f9:6b:95:68:d9:5e:07:04:4f:e0:18:d4:3c:
                    43:8e:a7:cd:fc:8b:dd:51:39:d5:23:6a:e9:8a:34:
                    84:01:2e:59:51:0a:fc:d2:55:9a:3b:9e:a6:de:16:
                    76:e0:c4:c7:e2:cb:03:72:9e:e0:67:26:f4:05:56:
                    a4:8f:15:52:9f:dd:67:a8:7e:8d:a5:15:6c:22:bd:
                    62:bb:07:96:d8:10:a9:71:3f:6a:e8:b0:e3:17:39:
                    10:2b:81:ed:b0:63:bb:cb:0c:d7:95:a3:43:b5:ab:
                    fe:73:87:27:9c:28:63:74:66:3e:20:74:0b:19:ad:
                    3d:28:b3:34:08:9e:5d:05:2f:4a:8a:78:93:59:01:
                    8b:d8:2f:6b:1d:40:03:da:e9:7c:8a:1b:7f:a7:98:
                    97:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:14:6B:6D:E2:DE:45:99:02:39:DA:F8:76:88:17:F9:02:05:76:49
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145243.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa21::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:8f:d3:f9:e0:cd:20:43:f6:90:bc:3c:b1:66:c1:a3:4e:82:
         03:0b:e0:8d:cc:7c:fa:41:4e:4a:09:65:64:f5:df:6b:5f:b6:
         a6:3a:7f:f2:7d:9f:1b:a3:88:dc:90:0d:09:08:66:eb:1a:83:
         5b:63:09:bf:55:d7:81:a1:32:16:74:7a:c7:69:1c:5e:54:eb:
         67:37:18:cf:f9:d9:09:58:1c:28:7b:1b:7d:18:fb:87:d2:70:
         73:4e:5e:f5:c8:b4:c8:b8:02:c1:d9:f3:28:16:13:13:29:20:
         42:c1:03:ee:42:78:53:03:26:7b:eb:21:82:bf:6d:87:4f:ff:
         1b:3b:0d:a5:18:bc:ed:9d:72:03:c4:f1:a7:73:d8:7e:b1:18:
         23:83:df:64:4d:5f:da:3f:6c:7c:84:be:ab:7f:d8:82:e9:c8:
         f8:b9:57:cd:d5:3b:8a:6b:db:dc:15:02:08:2b:cf:08:fa:51:
         07:b9:4c:f2:17:09:41:bb:b7:94:74:be:a1:4f:8b:5a:72:ef:
         aa:c4:8b:e7:aa:9b:0f:90:ea:e1:c3:04:15:46:17:cd:8f:85:
         e5:6b:07:e2:c9:9b:fe:fc:6f:7c:4f:ea:96:c2:9b:3d:7b:8e:
         a5:1d:5d:73:ec:bf:d3:52:92:c8:d4:f4:2c:05:bb:2f:88:4f:
         56:b4:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----