Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145540.roa
File:                     AS145540.roa (raw, json)
Hash identifier:          Fo6oLy0MZf0xhCenYKzEWHmS61ClP4cNN4Lt76Xt/os=
Subject key identifier:   42:D9:A1:B4:20:A0:06:AA:28:2D:41:A5:D4:1C:A0:55:78:10:34:B5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6B702154772399DFB624C583340A92D935890A66
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145540.roa
Signing time:             Fri 22 May 2026 06:05:13 +0000
ROA not before:           Fri 22 May 2026 06:00:13 +0000
ROA not after:            Fri 21 May 2027 06:05:13 +0000
asID:                     145540
IP address blocks:        240a:ab4a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:70:21:54:77:23:99:df:b6:24:c5:83:34:0a:92:d9:35:89:0a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:13 2026 GMT
            Not After : May 21 06:05:13 2027 GMT
        Subject: CN=42D9A1B420A006AA282D41A5D41CA055781034B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:a9:53:14:cb:92:f3:a0:bc:ca:41:14:ad:
                    cc:68:57:13:bf:38:4e:f3:eb:82:e2:d5:c0:7c:11:
                    11:77:90:07:a7:89:6a:56:d1:69:63:b9:06:51:c5:
                    5f:44:01:89:b6:7b:e6:71:f6:6e:c3:31:71:5b:68:
                    a7:fb:dd:7a:31:04:f5:c9:eb:6a:28:ed:05:98:15:
                    fa:9e:40:dc:0f:f0:e0:f8:37:f4:40:93:b8:3c:a8:
                    0e:d9:91:f0:aa:ed:56:a7:e1:a8:80:fe:bb:0a:8d:
                    cc:f9:b3:05:70:b8:cf:9b:49:f3:b2:67:e3:a0:c3:
                    bb:2a:8d:c4:66:06:06:e7:3c:a8:52:53:bf:b9:26:
                    4a:ca:79:3d:b6:2f:66:8c:f6:bf:48:53:97:a2:ce:
                    fc:3e:f3:60:2d:fe:81:f4:c3:ca:a2:ec:3c:6b:e4:
                    ea:b2:40:d0:c8:aa:64:2e:71:3d:8a:91:6a:b8:5b:
                    1c:06:cc:ff:80:3b:c3:1d:38:8b:ab:c8:b7:2c:dd:
                    85:c9:4b:e4:fa:af:ce:1c:91:74:02:c3:00:e2:a0:
                    45:b9:3e:b9:65:e6:fe:1c:b5:88:d8:f1:7b:55:50:
                    c2:50:73:52:66:10:7d:a8:7b:aa:02:07:3d:6c:74:
                    30:6f:bc:56:68:87:98:d4:2e:34:e2:f0:15:76:c5:
                    a7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D9:A1:B4:20:A0:06:AA:28:2D:41:A5:D4:1C:A0:55:78:10:34:B5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145540.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab4a::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:8f:42:32:f5:99:1f:97:43:4f:16:f1:a1:39:f0:c5:5e:47:
         ff:0e:12:78:12:ea:35:56:a6:ed:d7:c5:9b:49:5d:b8:16:6b:
         ac:36:41:f1:38:10:e2:08:80:e1:cb:98:3c:cf:0c:dc:1c:25:
         8f:a4:84:aa:74:5d:1d:87:9c:cc:80:54:b6:75:1d:dc:aa:ba:
         11:e5:ee:15:92:b8:0e:b9:b6:5c:7a:69:1a:70:80:66:35:4f:
         6e:9d:df:40:be:d7:bc:d3:88:7c:7a:ad:fe:7b:88:48:c2:ba:
         18:e8:27:6a:81:1e:0a:4f:09:d7:a3:98:f5:28:df:83:ae:6b:
         bc:94:2d:5b:6f:ff:7e:b5:45:9d:03:f7:08:ef:b7:b6:97:73:
         68:04:02:4b:36:2f:15:15:4b:6d:f8:fb:30:ad:77:f9:d7:c3:
         61:b7:77:9d:86:8f:9e:a2:d2:46:08:c1:75:41:90:69:96:2a:
         87:61:17:93:ac:f9:34:3f:90:1b:bd:31:e4:ab:25:d2:bb:17:
         9a:5b:ca:eb:5e:20:6f:7d:74:1c:5b:22:81:b5:9f:39:d2:8a:
         0b:13:a1:7f:74:17:42:f8:3a:f9:db:f3:bd:9f:ec:09:cf:89:
         db:84:3d:0d:dc:e1:e0:af:cb:02:98:31:e9:1a:d3:00:06:0b:
         05:6d:35:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----