Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145307.roa
File:                     AS145307.roa (raw, json)
Hash identifier:          s9l7G+Mrb87Psmk3tLIOAGsMNt26YFoKfrFdEPLnuPA=
Subject key identifier:   94:4F:E1:44:BF:08:FC:F7:0D:6A:BE:CC:6C:2E:A3:EF:5B:56:AC:72
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6E2E17B0140A0021A013057FD4BEFB194B4C02E6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145307.roa
Signing time:             Fri 22 May 2026 07:24:27 +0000
ROA not before:           Fri 22 May 2026 07:19:27 +0000
ROA not after:            Fri 21 May 2027 07:24:27 +0000
asID:                     145307
IP address blocks:        240a:aa61::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2e:17:b0:14:0a:00:21:a0:13:05:7f:d4:be:fb:19:4b:4c:02:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:27 2026 GMT
            Not After : May 21 07:24:27 2027 GMT
        Subject: CN=944FE144BF08FCF70D6ABECC6C2EA3EF5B56AC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:e0:9c:78:42:76:07:6f:7e:af:73:ae:dd:
                    d4:a3:b3:14:d8:c1:4c:63:fb:35:29:38:92:19:5e:
                    a5:0d:a6:16:3a:aa:b3:5e:6d:ad:bb:51:f9:a7:23:
                    da:cf:55:2e:a9:7a:10:c7:e3:c6:bc:73:96:9d:a8:
                    2b:cf:c1:e7:0c:b3:16:53:c4:d3:94:3e:50:25:cc:
                    40:2d:94:28:6b:cb:a5:68:a5:bd:9f:25:8c:a3:ef:
                    94:eb:55:21:58:3c:a2:61:5a:d5:d7:bd:71:da:a9:
                    0f:0f:29:16:37:65:b0:74:c4:17:07:ca:58:4d:5b:
                    4a:8a:ed:00:ef:e4:82:3b:82:ab:3b:ec:30:a1:17:
                    7f:4f:4d:37:11:c6:97:83:47:6c:97:19:93:39:1e:
                    4f:e1:80:ef:a2:58:7c:36:eb:61:90:24:5f:56:d2:
                    5a:75:12:84:ff:20:8e:b6:cb:94:d2:f0:9c:c9:35:
                    ba:66:a1:0f:e8:42:f2:7b:e8:52:21:3a:70:aa:2a:
                    86:78:29:27:8d:1d:a0:a0:54:d3:ba:f1:50:6d:3b:
                    74:c6:51:d6:ea:98:89:69:04:65:74:aa:4f:c8:d9:
                    e8:25:d0:c7:8c:e4:68:dc:fa:f0:14:10:7a:c6:f6:
                    bb:21:cc:2b:43:82:63:25:1b:98:f7:4a:a8:cf:e7:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4F:E1:44:BF:08:FC:F7:0D:6A:BE:CC:6C:2E:A3:EF:5B:56:AC:72
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145307.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa61::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:c3:16:00:12:bc:18:62:5a:6d:66:1f:14:e3:53:24:2f:69:
         0c:05:bb:15:83:b7:ea:b7:71:22:2b:88:f6:73:80:5d:10:b2:
         a5:3e:47:93:af:43:ee:0a:5a:9f:07:35:8e:92:e1:84:af:63:
         83:41:d9:cd:28:bd:c7:3f:ed:b4:5a:64:0b:b4:37:58:e8:1d:
         75:b4:23:e6:c2:e3:37:03:10:36:ed:f2:49:a4:93:32:c8:a0:
         19:2f:95:67:c2:82:08:db:a6:44:eb:af:88:07:f5:e9:20:9d:
         22:6f:cc:e3:78:5c:fe:30:64:70:4f:21:73:cb:bf:27:82:7e:
         47:38:b6:54:b1:e1:87:ca:27:ae:d2:20:d2:3a:70:a1:f2:08:
         cc:82:73:eb:52:23:fd:ee:91:4b:c3:f8:39:f1:85:49:de:a2:
         71:f3:31:a5:90:37:ae:8a:8b:7b:8b:80:68:72:fd:bc:9d:e0:
         53:b0:57:7d:80:e4:0b:64:7f:2e:70:14:4a:ef:c9:1c:6c:dd:
         b7:8e:ff:a7:4c:0e:b3:fc:02:ed:5c:12:28:bd:7a:b8:ba:bf:
         fd:75:66:2d:a6:2b:ea:3c:00:a5:5e:5e:f4:e1:d8:5f:18:37:
         12:87:be:c9:7a:02:59:28:60:cc:1e:2b:e5:1b:f0:4c:66:39:
         44:a5:9e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----