Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145321.roa
File:                     AS145321.roa (raw, json)
Hash identifier:          cPhRy7a5NLMI30qj5V1PpYSwiFKc/1liuP0os0YdK+M=
Subject key identifier:   EE:BC:81:89:00:BB:9D:3E:3F:E4:3B:E1:C5:34:2A:02:3E:EB:4D:FD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7919B18EC99DEF05C84E341A7ACB007A93530AC8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145321.roa
Signing time:             Fri 22 May 2026 06:58:52 +0000
ROA not before:           Fri 22 May 2026 06:53:52 +0000
ROA not after:            Fri 21 May 2027 06:58:52 +0000
asID:                     145321
IP address blocks:        240a:aa6f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:19:b1:8e:c9:9d:ef:05:c8:4e:34:1a:7a:cb:00:7a:93:53:0a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:52 2026 GMT
            Not After : May 21 06:58:52 2027 GMT
        Subject: CN=EEBC818900BB9D3E3FE43BE1C5342A023EEB4DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:4f:fc:7c:a8:63:a1:9d:60:5b:95:d9:5c:
                    a2:80:cf:00:4c:87:a3:00:91:be:19:68:df:24:10:
                    41:c3:d8:21:56:83:18:5a:87:34:2d:d2:46:6c:f3:
                    39:d6:29:c3:f2:c9:ef:46:76:75:36:2b:b7:3e:b7:
                    14:78:fd:d0:fb:3b:bf:c6:36:0d:85:73:18:4b:65:
                    8e:cb:d9:47:de:04:7b:06:d7:83:a2:e6:5f:41:83:
                    79:bd:13:f7:5f:71:0f:13:33:e8:b5:23:fe:96:8d:
                    39:89:c5:eb:d2:c2:b2:9f:9a:c2:dc:da:c8:d9:37:
                    b1:c8:45:e3:23:96:c1:08:7d:c0:65:7d:34:f3:29:
                    d6:a2:d5:a2:a6:2b:07:4e:fe:d9:2e:c3:50:cf:aa:
                    a8:d1:c9:33:45:47:af:94:0e:20:d8:04:f2:1a:4f:
                    34:ea:e3:6e:08:e4:9f:14:5e:4d:54:d7:53:05:f9:
                    91:45:d7:ed:ae:e2:86:83:64:b8:71:55:57:66:8a:
                    9f:a3:1f:cd:40:7c:eb:0e:02:a9:6d:f4:1c:36:51:
                    36:35:77:59:f1:01:21:b3:22:51:a5:54:02:c9:4f:
                    02:4c:c7:76:47:67:fc:85:2b:25:53:cc:89:8b:5d:
                    b0:c3:41:c3:b6:5a:75:03:b6:cf:d2:f3:ff:9e:63:
                    e6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BC:81:89:00:BB:9D:3E:3F:E4:3B:E1:C5:34:2A:02:3E:EB:4D:FD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145321.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa6f::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:6a:ce:46:f9:6f:c1:bd:d2:41:bc:b3:1b:3f:92:16:ac:66:
         e9:6b:b2:af:bb:d7:6b:af:61:8e:d7:32:38:c6:f4:2c:2b:b9:
         00:d9:e0:10:81:22:af:04:09:29:64:ac:63:f7:78:7b:c8:00:
         14:3c:9d:5c:a8:6a:91:6e:d8:a7:6d:5c:64:64:01:bf:9b:7b:
         29:5a:0e:6e:f9:15:2b:92:2e:81:71:ca:b4:12:9d:11:07:bd:
         56:79:ba:1b:92:b5:c3:b3:2a:9a:1a:f5:45:88:2f:ab:c7:09:
         dd:11:b0:be:20:28:9a:67:62:73:ab:fc:f6:98:07:87:2f:d9:
         c1:a5:4d:4d:59:03:7b:56:ac:3c:18:0b:f9:8f:5e:7c:6c:d0:
         12:53:c8:05:93:5b:64:87:03:77:73:7c:e1:9d:74:54:56:fd:
         83:05:d4:2f:2f:ac:5d:db:42:23:b9:6c:cf:c3:16:88:db:4c:
         27:ba:01:86:e1:35:1d:01:9e:c1:16:39:44:27:20:bd:ce:8e:
         14:be:68:0b:18:ae:06:a2:15:78:a8:87:38:59:d9:72:4e:f2:
         f2:ec:7c:47:61:70:73:77:52:b5:33:d0:2a:0f:e9:06:ba:89:
         42:78:80:8e:fa:e9:32:22:e3:24:e0:f8:8f:63:f4:72:e8:91:
         f9:0c:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----