Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145437.roa
File:                     AS145437.roa (raw, json)
Hash identifier:          d3ifwVo7KJyzDYRz62Ek53bEQ3pM2QIApHiLVg/bZ60=
Subject key identifier:   2D:21:D8:B4:AF:7F:1C:75:CC:71:68:06:C2:17:B4:61:83:50:46:25
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       51EB8395E7857A7783EED59504EECB6F826A2913
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145437.roa
Signing time:             Mon 25 May 2026 01:38:28 +0000
ROA not before:           Mon 25 May 2026 01:33:28 +0000
ROA not after:            Mon 24 May 2027 01:38:28 +0000
asID:                     145437
IP address blocks:        240a:aae3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:eb:83:95:e7:85:7a:77:83:ee:d5:95:04:ee:cb:6f:82:6a:29:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:28 2026 GMT
            Not After : May 24 01:38:28 2027 GMT
        Subject: CN=2D21D8B4AF7F1C75CC716806C217B46183504625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:82:e8:4d:1e:af:da:1c:f4:bb:0a:a5:9b:
                    14:08:16:89:1d:c9:3b:fb:7b:7e:f4:36:0b:2a:d2:
                    9e:7e:f2:1c:a4:aa:36:26:9c:06:f4:19:58:30:e8:
                    9c:29:96:cc:f6:7c:74:60:6b:0b:25:48:cc:52:4e:
                    1d:20:7d:47:39:11:b3:42:ab:61:fc:73:fb:70:98:
                    98:23:e3:36:ab:af:1c:76:cc:73:27:27:64:6a:72:
                    98:31:58:fc:fb:4b:f3:ae:9c:2d:02:b2:f3:52:1b:
                    ad:09:41:21:75:a9:0b:ec:a4:f2:d9:11:c3:2b:b3:
                    a0:64:34:df:46:03:1f:9e:a3:5b:de:7d:d9:91:55:
                    bc:a8:f1:ba:10:0c:5f:27:ca:54:a0:0e:4b:c1:21:
                    7e:67:f8:e1:d7:58:81:fb:ef:66:62:b9:80:ff:41:
                    94:4d:33:fc:98:2e:69:e3:bc:02:71:d6:d8:ab:69:
                    dd:ee:a2:4f:a0:4c:27:26:ca:bb:8d:bd:30:7b:a9:
                    f8:45:fb:4d:5d:99:2b:2e:9b:79:e2:2e:c2:b9:eb:
                    79:50:f8:df:e2:a7:16:df:0b:5b:71:df:b6:74:00:
                    87:2a:63:d7:c2:3f:05:bd:ae:94:bc:64:fe:da:bf:
                    32:7d:95:4f:d3:30:d0:e6:b0:22:b1:d7:f5:88:46:
                    9d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:21:D8:B4:AF:7F:1C:75:CC:71:68:06:C2:17:B4:61:83:50:46:25
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aae3::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:82:5e:b0:2d:9b:3c:23:02:88:49:26:db:86:1f:da:0f:b0:
         08:bb:62:af:78:75:ef:e2:4b:58:76:5c:db:28:6f:42:dc:f1:
         64:12:93:96:81:71:cc:bd:46:29:8b:49:f7:60:b7:f6:53:0f:
         97:47:df:2c:f5:ed:82:fb:d3:e4:07:cf:90:62:ee:6b:0e:20:
         0d:25:88:ab:33:38:25:14:5f:5f:f5:01:d6:44:f1:eb:af:23:
         df:71:fe:7e:0c:94:bb:48:7b:ed:a8:ff:77:d8:5f:7f:f3:4c:
         2d:5b:9a:ec:08:13:45:7b:b9:56:6e:18:40:01:4e:11:de:99:
         3c:3a:fe:30:0b:3d:7b:3d:af:5e:fb:84:07:55:f4:b9:77:ca:
         ee:12:a7:f2:0c:7c:6f:15:ef:03:06:6d:e4:ac:68:af:2d:c2:
         b5:f1:e5:78:b3:f4:af:9c:24:46:ca:90:ff:0c:1b:1e:d8:ff:
         b7:29:60:fe:ab:c4:95:be:16:e1:33:a9:a1:7e:b4:08:15:7c:
         3d:4b:a0:43:9c:3b:28:04:b0:48:a1:fa:b4:3d:d0:f4:ee:ef:
         10:a3:39:5a:db:05:f2:fc:b9:db:29:d9:19:2d:95:bb:01:ba:
         5e:0a:08:33:d0:d9:cb:76:59:de:46:f8:c1:d6:c0:81:68:55:
         a7:21:ce:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----