Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145258.roa
File:                     AS145258.roa (raw, json)
Hash identifier:          aj/Mp9NF2+Wz5pnGQ6Si8EXH9ebVOVXR91/0i5ZnMMY=
Subject key identifier:   0B:6D:F6:90:FC:EB:7A:CF:91:2F:60:F7:25:10:AA:0E:69:51:EF:08
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       23078A1561893B33869162261AA2B6271BCFDDEB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145258.roa
Signing time:             Tue 26 May 2026 03:17:06 +0000
ROA not before:           Tue 26 May 2026 03:12:06 +0000
ROA not after:            Tue 25 May 2027 03:17:06 +0000
asID:                     145258
IP address blocks:        240a:aa30::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:07:8a:15:61:89:3b:33:86:91:62:26:1a:a2:b6:27:1b:cf:dd:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:06 2026 GMT
            Not After : May 25 03:17:06 2027 GMT
        Subject: CN=0B6DF690FCEB7ACF912F60F72510AA0E6951EF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:41:8f:87:bc:44:3d:4b:6e:49:5a:b6:7a:
                    14:85:30:75:5c:34:de:ed:3d:f7:b1:66:7e:95:29:
                    cc:83:94:c1:30:92:77:8f:df:e0:70:a8:24:21:69:
                    d1:65:bf:b8:d7:a3:85:14:4a:e2:a7:f0:f0:51:84:
                    66:6f:91:c2:97:78:12:bd:d4:f3:d3:65:e3:b6:86:
                    20:25:da:af:1b:b9:91:ab:e6:c2:6f:bc:7d:ba:1b:
                    26:73:f6:9c:d5:b9:8b:7f:31:4f:ea:87:69:2b:3b:
                    f4:f9:db:bd:d7:b6:8a:95:63:cb:54:8e:0e:6f:cb:
                    2b:46:d6:36:f1:e9:a3:9a:ec:ff:04:55:1e:04:16:
                    47:c3:ee:a3:c3:84:7a:78:78:68:77:e5:5a:e2:4e:
                    fc:8e:f5:35:29:d8:54:a7:cc:41:49:13:68:00:9b:
                    7c:a4:49:85:22:0d:b7:ea:69:9d:d8:db:38:d6:28:
                    e0:38:0e:d7:ae:5c:cd:c1:9f:97:09:56:6b:92:97:
                    f0:09:49:69:5a:a0:f9:fc:67:77:b7:6d:ce:c4:34:
                    c2:8b:04:4f:0a:82:c2:e3:ee:3d:29:e3:54:bd:55:
                    3d:80:aa:1e:91:f4:94:8f:c8:0b:13:99:7b:c7:d4:
                    b1:af:bb:8d:5d:84:d7:27:cf:ae:49:1f:58:ae:5c:
                    ef:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6D:F6:90:FC:EB:7A:CF:91:2F:60:F7:25:10:AA:0E:69:51:EF:08
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145258.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa30::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:56:43:85:e2:2a:76:24:0b:b8:a6:4c:4f:a2:6d:83:80:77:
         80:df:2f:d4:81:62:ae:a2:35:c7:3f:d6:79:ea:35:3b:de:9b:
         62:75:da:f5:15:51:f4:e9:02:92:c3:4e:7e:f8:6f:58:3a:b9:
         9d:22:56:d6:28:3a:21:fe:2b:0d:a9:82:6d:bb:a7:40:66:1e:
         61:7e:cd:f1:64:20:e0:ac:c1:b6:96:6f:14:10:c1:a5:24:99:
         67:10:4a:3e:92:63:cd:c2:1e:de:b8:1e:aa:89:16:ff:0f:a6:
         20:19:96:8d:ab:58:4c:d9:21:36:b2:48:8f:43:0c:04:37:88:
         13:e5:17:52:5b:56:e1:20:3e:94:51:d4:7b:c4:a0:b9:a1:8c:
         72:c8:ad:47:1b:16:0b:6e:ba:3a:45:22:9b:e8:0e:73:3a:6a:
         71:93:24:e5:94:77:0a:e9:a2:5a:ec:b1:61:cd:ca:a9:e4:7b:
         92:d5:09:39:07:c3:e3:09:0a:1c:0d:5b:69:35:cf:40:7e:e3:
         5e:d1:11:b0:d7:2d:40:f1:ff:33:89:ef:18:e7:97:11:27:75:
         ce:15:df:a0:68:6a:b3:ba:2e:70:9b:37:f7:17:03:48:55:7f:
         f8:b4:00:f2:df:aa:ca:cd:e4:56:d9:f9:36:da:1a:9a:9b:a6:
         c1:12:8e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----