Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145365.roa
File:                     AS145365.roa (raw, json)
Hash identifier:          bYtNTBTeL1q6EFbJlnC1W4gnI4L8EOYuFpSRPfScrJ0=
Subject key identifier:   77:DF:28:B2:B4:F2:E7:0F:69:96:29:4C:43:E8:99:24:67:0D:46:F3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       74E52C2DC2C1B926F097E829B6CBAA6F899F159B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145365.roa
Signing time:             Mon 25 May 2026 02:22:41 +0000
ROA not before:           Mon 25 May 2026 02:17:41 +0000
ROA not after:            Mon 24 May 2027 02:22:41 +0000
asID:                     145365
IP address blocks:        240a:aa9b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e5:2c:2d:c2:c1:b9:26:f0:97:e8:29:b6:cb:aa:6f:89:9f:15:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:41 2026 GMT
            Not After : May 24 02:22:41 2027 GMT
        Subject: CN=77DF28B2B4F2E70F6996294C43E89924670D46F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:da:1d:90:1c:d7:5b:25:2a:e7:e8:67:b8:
                    44:3f:da:23:3c:70:44:c5:b8:1e:75:85:cc:42:64:
                    f4:49:c2:24:d0:60:cf:0c:f8:9e:2e:bf:db:57:51:
                    bd:95:cf:73:71:dd:f4:47:b3:b3:23:0f:12:29:1d:
                    76:eb:7b:76:f8:91:17:51:66:93:ba:8b:3e:c8:8c:
                    49:6c:2d:b1:36:31:c3:3e:fe:62:0e:24:1c:35:85:
                    bc:65:bd:2b:45:26:a0:c5:f2:4e:3b:1a:00:1e:2d:
                    02:92:8e:c8:24:c1:e0:c1:b3:dc:13:b5:9e:c8:d8:
                    50:bc:cb:f6:02:b2:9e:74:78:07:87:38:b3:8b:0c:
                    b1:92:4e:38:e3:7b:a0:4d:e9:15:91:50:37:6e:92:
                    36:3a:0e:6d:7e:a6:d0:46:b3:a7:fc:91:89:70:bd:
                    09:12:44:63:bf:ba:60:21:1c:51:f1:b0:a9:41:fc:
                    f8:3b:44:6f:24:78:ce:78:22:b1:de:46:18:7b:c0:
                    ec:39:05:37:00:b0:ab:cb:7f:60:ff:47:21:db:61:
                    13:ff:d7:ae:33:d7:9e:36:ad:4c:19:c4:e1:55:aa:
                    9d:e0:ad:e2:10:ae:49:07:99:b6:22:71:c6:c3:68:
                    3a:63:89:27:07:ee:97:4c:10:6f:05:98:35:17:1b:
                    10:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DF:28:B2:B4:F2:E7:0F:69:96:29:4C:43:E8:99:24:67:0D:46:F3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145365.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa9b::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:57:15:19:48:85:0f:1b:16:49:7f:4b:10:12:7c:db:de:
         aa:02:02:cd:ca:c4:e6:be:cf:0a:54:f3:fb:9c:e9:27:ee:66:
         68:74:ee:c0:dd:fe:71:67:6b:f3:ee:aa:e3:40:51:2b:26:8b:
         67:30:12:c5:e3:04:76:2f:50:36:b8:7c:10:d8:4b:fe:32:10:
         2b:c5:33:d3:84:cb:11:da:d4:0f:8c:77:6a:3e:25:f4:32:6d:
         5e:16:f2:b3:98:23:74:75:bf:0c:a2:6f:87:e4:cc:4c:99:47:
         94:7a:19:57:7d:fe:68:5a:fe:8e:e8:31:a4:2e:8c:fd:00:e7:
         47:bb:c2:3e:31:e0:e7:d4:99:b9:ab:53:aa:65:78:b6:86:37:
         4c:d6:48:c2:7a:0e:67:fd:4a:8a:12:33:75:c5:be:e0:cb:46:
         bf:59:36:90:0e:b3:37:26:47:ce:24:2f:7a:17:fd:0f:44:d6:
         4d:0c:a5:1f:b3:e4:bc:a3:bb:2f:93:58:e9:a5:c0:0b:da:8f:
         de:a7:99:52:cd:88:86:14:49:54:36:29:35:08:12:4b:b3:ac:
         34:99:7e:42:18:81:30:05:c3:0b:ac:9c:e5:b2:b3:3a:7a:8b:
         48:c2:e3:52:d7:18:86:e9:fe:3c:69:6f:d5:d5:b4:c7:be:4b:
         8c:54:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----