Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145434.roa
File:                     AS145434.roa (raw, json)
Hash identifier:          fBI0kNor7Wrh2hqG6bJ9sGeocFRx89c6X72eAqJmWBk=
Subject key identifier:   7F:1D:DE:E7:26:D1:E5:67:59:B4:E2:D2:27:A8:1E:83:26:3E:E8:9E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0F367F397C93AFAF2BBFCB754C1840C7AC861620
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145434.roa
Signing time:             Mon 25 May 2026 01:51:34 +0000
ROA not before:           Mon 25 May 2026 01:46:34 +0000
ROA not after:            Mon 24 May 2027 01:51:34 +0000
asID:                     145434
IP address blocks:        240a:aae0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:36:7f:39:7c:93:af:af:2b:bf:cb:75:4c:18:40:c7:ac:86:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:34 2026 GMT
            Not After : May 24 01:51:34 2027 GMT
        Subject: CN=7F1DDEE726D1E56759B4E2D227A81E83263EE89E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:91:7c:54:28:cb:cd:f5:57:8b:31:f5:8e:f2:
                    08:93:85:a0:dd:32:b0:a8:37:df:41:f5:34:38:d2:
                    0e:39:f0:58:3a:fc:f0:40:87:61:18:4d:37:08:c1:
                    e4:59:0c:f4:d1:48:1a:d0:6b:ad:c3:20:36:bf:86:
                    43:6e:d1:f3:64:07:58:f0:d4:50:ec:e5:d9:51:6f:
                    62:0d:75:f6:d3:2f:b7:43:31:df:b6:80:2c:97:36:
                    36:b4:e1:17:8e:51:d5:76:d6:19:e1:0b:4a:1e:f2:
                    70:8a:f6:ba:eb:5b:ee:f9:b7:a9:78:1c:c5:3d:73:
                    34:3c:f6:f6:f9:21:a4:ee:fe:30:c8:96:f6:fd:f2:
                    ca:49:41:5a:9b:13:8a:2d:86:a8:f2:22:2b:c9:50:
                    95:4e:11:14:78:e4:f3:6e:be:dc:97:5b:70:3c:e5:
                    58:18:c5:67:cc:3b:2d:16:dc:1f:11:fc:f8:e3:46:
                    c5:24:1a:44:28:b1:5c:08:c0:d5:af:e8:25:66:4c:
                    38:a8:f6:2a:e0:da:51:93:dd:af:63:c7:71:ff:50:
                    d8:af:f7:78:ae:40:82:83:64:f5:a2:9e:48:a0:e1:
                    6b:cb:7c:21:c9:a1:62:f5:de:82:53:35:28:4b:bb:
                    93:7b:be:97:a4:1d:38:f9:05:da:30:36:d7:57:50:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1D:DE:E7:26:D1:E5:67:59:B4:E2:D2:27:A8:1E:83:26:3E:E8:9E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:43:28:bc:8b:50:01:bf:f7:1f:f1:db:c1:b1:34:91:90:7c:
         d6:39:57:53:85:ec:ad:d8:6d:d2:88:5e:7d:69:45:2a:2a:cb:
         17:6c:8c:f7:17:f6:31:f2:a5:68:f7:45:8b:0e:70:0b:3e:3f:
         ee:f6:9e:26:73:1a:b9:fc:32:e4:f8:b7:e0:17:8a:c5:a5:82:
         e0:8d:2c:dd:29:4b:a6:1d:a9:c7:64:b4:dd:13:92:12:fe:a9:
         e1:3f:c0:ea:d4:a3:85:60:9d:8f:e0:da:de:c2:c2:e9:48:81:
         38:95:f5:a0:0b:ac:3e:53:7d:bc:bd:cf:63:b4:fb:48:35:12:
         a5:ba:17:66:08:e9:b4:9a:a0:45:48:7c:55:ee:1b:d5:fb:6a:
         dd:88:3f:4d:10:1f:d6:25:47:8f:0a:17:09:53:1f:f0:e2:4c:
         11:5d:38:31:d5:cc:75:91:c5:51:4a:d0:58:e2:51:46:79:e5:
         8a:f2:44:93:ef:7d:d1:36:65:c7:53:f7:91:ea:ca:ad:14:32:
         f9:8a:fa:68:f5:6a:7b:d7:2d:a6:c9:a8:03:e5:84:d4:27:75:
         b3:b1:2d:50:ab:0e:6b:c3:57:35:da:b8:b5:75:c8:a7:9c:f5:
         75:b0:de:0d:70:d3:b7:25:bd:0c:96:0c:77:f9:bc:de:88:92:
         ae:f4:9f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----