Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145269.roa
File:                     AS145269.roa (raw, json)
Hash identifier:          to+/VkdVvHeHirwSbSNO8akU22ZtXfkcoK8uqFKXCKA=
Subject key identifier:   30:82:47:3E:56:05:F0:62:76:62:A4:99:3D:8A:DD:2A:97:BD:75:FB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       574098CD8F3E657ADAAE4EFD3280AE1EE3033209
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145269.roa
Signing time:             Fri 22 May 2026 02:47:44 +0000
ROA not before:           Fri 22 May 2026 02:42:44 +0000
ROA not after:            Fri 21 May 2027 02:47:44 +0000
asID:                     145269
IP address blocks:        240a:aa3b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:40:98:cd:8f:3e:65:7a:da:ae:4e:fd:32:80:ae:1e:e3:03:32:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:44 2026 GMT
            Not After : May 21 02:47:44 2027 GMT
        Subject: CN=3082473E5605F0627662A4993D8ADD2A97BD75FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5d:af:23:5e:45:8a:43:d5:1c:42:06:31:44:
                    b9:30:d3:86:dd:9f:fc:87:2a:13:d1:5f:3d:a7:d3:
                    cc:d5:4b:3b:2e:aa:38:ce:1c:39:e3:df:85:d8:b8:
                    d5:65:1c:c9:27:e7:44:bb:7f:2d:13:a2:99:da:6a:
                    09:d0:52:dd:2f:a6:34:f6:44:75:21:c5:36:02:84:
                    74:1d:18:b8:b7:be:0c:dc:81:73:32:cc:51:01:4c:
                    2a:76:ce:8d:d3:0b:0e:1f:f6:dd:c6:a9:dd:56:9e:
                    89:a5:95:79:fc:e0:33:15:47:b8:f8:da:28:b1:1c:
                    f3:10:13:78:43:4d:22:2d:2a:f9:b1:e9:db:e8:36:
                    57:f8:bb:70:41:74:68:1b:24:49:c4:fd:77:67:43:
                    98:95:e1:94:29:93:ff:cd:6e:73:65:96:46:21:cd:
                    92:66:f9:d0:aa:1f:da:00:26:70:17:c6:8d:19:20:
                    1d:90:5e:ee:fc:86:dd:0d:2d:30:ba:e0:55:d5:f5:
                    56:b1:e2:bb:ad:a6:ff:e7:d5:2d:cf:f8:e7:af:6d:
                    7b:79:c6:91:b8:fa:98:cb:ce:3e:8c:e4:41:07:f8:
                    21:7c:f3:44:82:dc:cb:21:32:e0:83:d2:29:0d:99:
                    39:96:8e:3a:24:cf:d4:26:cf:1e:da:61:cb:8c:fc:
                    cf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:82:47:3E:56:05:F0:62:76:62:A4:99:3D:8A:DD:2A:97:BD:75:FB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145269.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa3b::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:b9:07:8a:3e:ab:ea:67:fb:83:e3:6b:15:b6:23:2b:23:e1:
         97:25:1f:4e:94:58:b3:ee:72:b0:8d:36:5c:8c:89:89:c0:a4:
         23:cf:f9:53:0e:48:98:9b:ab:bb:0a:23:de:55:8c:35:19:be:
         3e:bd:b5:0e:e7:2f:76:74:98:aa:65:57:1e:40:11:cd:8c:87:
         4e:93:b8:db:39:15:f4:04:2a:24:09:d0:0e:b8:d3:e2:e1:b8:
         8f:92:79:f8:c1:51:62:ff:a9:cb:fd:9b:88:b7:1c:d7:f5:07:
         af:86:f6:3c:b2:5b:39:13:5a:83:2d:1c:62:22:56:25:4d:b3:
         65:e8:05:a0:55:fe:b3:a9:22:38:c4:53:36:36:93:bb:01:17:
         54:e4:1f:34:98:ef:e6:2e:3a:27:93:eb:fb:70:56:4b:ce:a5:
         e7:89:fe:b3:af:0a:cf:00:be:82:36:76:48:69:96:b9:55:65:
         54:35:67:0d:bc:11:1d:2a:ae:2a:ab:be:a4:fe:5e:b9:56:0b:
         e7:c7:57:d1:28:06:e1:9c:bb:c4:a7:70:16:2a:d8:e8:52:45:
         1b:cc:d0:44:bc:f1:02:8a:e5:7e:35:e5:db:7b:45:c1:d0:c7:
         f6:e5:58:ee:b0:a3:4d:f5:60:ac:5f:4a:d1:2f:4f:f6:d1:56:
         55:da:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----