Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145322.roa
File:                     AS145322.roa (raw, json)
Hash identifier:          Z6oUfPkv+uU6+NhGFpEy/BMWhk1cP7Tab0+ZyujxIag=
Subject key identifier:   06:93:F6:30:E6:AE:AD:C9:FB:C9:46:BD:8C:F9:4F:09:BA:EB:0A:FF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3344D10EAD63B6AC7EDAE7AB3FDCD3C1BF31E9FA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145322.roa
Signing time:             Fri 22 May 2026 06:27:55 +0000
ROA not before:           Fri 22 May 2026 06:22:55 +0000
ROA not after:            Fri 21 May 2027 06:27:55 +0000
asID:                     145322
IP address blocks:        240a:aa70::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:44:d1:0e:ad:63:b6:ac:7e:da:e7:ab:3f:dc:d3:c1:bf:31:e9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:55 2026 GMT
            Not After : May 21 06:27:55 2027 GMT
        Subject: CN=0693F630E6AEADC9FBC946BD8CF94F09BAEB0AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1f:7a:d4:5b:6c:0e:8a:fb:ff:0d:ae:64:fc:
                    90:77:f8:e0:d8:1a:bc:c1:6f:24:70:d1:25:f3:69:
                    b0:ed:be:72:79:71:52:66:37:42:e7:b0:e8:39:14:
                    43:85:63:74:02:6d:7f:16:f3:c0:61:f5:b5:51:d8:
                    1b:cd:6e:85:4d:de:50:5d:c2:1f:3d:59:28:26:9a:
                    39:12:16:24:7c:c2:60:df:fc:5b:f6:77:f9:ca:b4:
                    fa:d6:52:44:b1:8f:87:da:c5:26:77:c6:1a:e2:4a:
                    7d:56:26:9d:d0:6d:40:e4:ae:de:da:1a:35:93:5d:
                    3f:c9:f2:c8:eb:58:39:67:9d:f2:c2:74:b3:54:3f:
                    9a:6d:e4:45:53:9d:4a:1e:4b:68:58:91:8b:8d:6a:
                    4f:a7:bb:a6:dc:57:a0:e8:66:90:92:05:94:34:18:
                    b8:d5:c8:de:30:03:7c:d0:0e:56:e5:c2:99:b5:c6:
                    17:25:c1:9b:6f:7f:df:7a:4e:bc:ce:5f:97:8b:01:
                    cf:c2:b0:2c:15:ab:59:f5:59:eb:44:0c:65:ec:d7:
                    00:22:46:e3:95:cb:be:85:a8:81:10:d0:2a:df:bc:
                    ec:84:b0:c5:49:4f:3d:de:a3:a9:69:49:1b:1b:9e:
                    3a:ae:f6:6b:3c:23:ed:cd:e7:47:f3:cb:cb:62:00:
                    69:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:93:F6:30:E6:AE:AD:C9:FB:C9:46:BD:8C:F9:4F:09:BA:EB:0A:FF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145322.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa70::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:f8:83:da:b3:02:ac:6e:38:98:88:76:2a:e5:27:db:1d:01:
         cd:76:98:9f:4c:a0:c5:ff:c3:80:48:84:c6:f7:76:68:76:77:
         7e:21:22:39:8d:7a:22:47:90:c3:e2:dd:1a:b9:52:8e:91:40:
         87:35:f4:73:59:be:45:96:22:c5:aa:1c:2b:73:bc:d4:91:8e:
         4d:7c:39:6e:88:a1:bc:24:15:46:1c:b5:cb:f6:65:d8:0d:c0:
         8b:d6:77:c7:be:f4:10:a2:30:08:93:1e:12:34:00:79:11:85:
         a7:37:7b:c7:8a:4b:3e:37:62:19:56:bb:61:68:aa:69:db:34:
         e9:0c:9a:2f:62:20:e1:5f:61:55:1e:dc:a5:ca:15:fe:59:b3:
         6d:cf:71:d6:8e:5b:0a:f8:15:58:47:94:c8:92:b2:a8:ed:1f:
         d1:75:b3:7a:29:8c:61:61:90:4f:fc:70:32:df:95:ff:10:6d:
         b5:4f:4d:61:31:a5:1e:81:cf:c5:19:25:cd:45:ac:70:35:d5:
         fb:90:e2:d7:c5:15:c0:14:7a:91:be:cd:65:a6:e3:f8:bd:fb:
         b3:a7:2c:46:e9:ab:57:d3:bb:11:22:8e:cd:7e:c7:17:4d:be:
         7e:ea:da:83:57:25:5a:26:17:3e:24:79:c7:14:2a:5f:57:de:
         e9:2e:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----