Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145570.roa
File:                     AS145570.roa (raw, json)
Hash identifier:          dKFsvpJTbccq+NelO2P674pjlcnaKM7zfuuFekE6Sq8=
Subject key identifier:   E2:10:66:83:93:75:06:8C:96:3D:4A:F8:7A:BB:99:26:67:43:21:8B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       559470658BA964E6AA2B328D184BFB1FB7EB3E0E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145570.roa
Signing time:             Mon 25 May 2026 02:22:43 +0000
ROA not before:           Mon 25 May 2026 02:17:43 +0000
ROA not after:            Mon 24 May 2027 02:22:43 +0000
asID:                     145570
IP address blocks:        240a:ab68::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:94:70:65:8b:a9:64:e6:aa:2b:32:8d:18:4b:fb:1f:b7:eb:3e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:43 2026 GMT
            Not After : May 24 02:22:43 2027 GMT
        Subject: CN=E21066839375068C963D4AF87ABB99266743218B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:02:ac:50:73:c0:ac:c0:d3:2c:aa:b4:b3:
                    34:99:29:88:8e:18:a9:e6:fe:c4:d3:41:21:37:d9:
                    fd:51:09:db:47:80:0e:18:21:45:c6:8f:f6:d9:73:
                    58:6b:a7:19:9e:a0:42:b7:ee:7c:f4:7a:c3:6d:95:
                    30:cc:b5:a3:e5:dc:97:99:d2:23:88:d0:9d:b2:1b:
                    b9:12:ca:93:1c:74:3d:c6:bd:c2:c4:8e:8a:f3:d0:
                    09:bd:bf:1c:c0:6f:87:3b:ae:1c:1c:29:a9:d6:ef:
                    a9:a9:3c:59:87:d8:4f:a8:ee:da:42:c4:c8:03:3f:
                    30:3b:9c:dc:82:d5:0d:70:eb:41:7d:57:0e:69:65:
                    55:c0:61:f7:cd:a1:95:3a:8c:b6:e7:17:2b:94:3f:
                    79:2c:8d:53:f6:88:98:0a:20:a0:0c:f5:05:25:58:
                    9f:4c:e6:93:1f:5c:c3:44:aa:5a:12:b3:7d:ef:e1:
                    c2:61:70:c7:07:71:f5:84:47:66:d6:e7:b2:53:0b:
                    6a:ee:71:b1:f0:f7:b9:4c:2d:8e:36:c8:a0:a2:bc:
                    48:19:9d:7a:8f:dd:63:04:41:ff:77:6c:02:03:85:
                    a4:8a:bc:12:e9:dd:51:48:77:c8:d3:b8:5b:a6:66:
                    5c:26:5f:65:70:94:0d:c5:7f:fc:89:60:d3:92:67:
                    1a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:10:66:83:93:75:06:8C:96:3D:4A:F8:7A:BB:99:26:67:43:21:8B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145570.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab68::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:c1:7e:b9:a9:98:67:f0:dd:f1:c9:e3:a7:5b:a1:e3:da:5e:
         54:08:64:dc:ef:39:f6:2e:68:fe:91:cf:98:e0:a5:45:d3:e9:
         b0:20:b4:30:c2:5a:f0:e1:a8:c3:71:40:d8:ac:3c:4e:85:82:
         1d:38:70:fe:bc:7b:78:4c:9c:f7:01:fd:fa:37:be:3c:cb:80:
         81:bf:4e:88:6f:75:69:9b:aa:dd:be:72:90:80:b5:eb:58:cd:
         8d:53:49:43:cd:88:bf:5e:10:51:33:8e:c6:6f:88:bc:ed:1e:
         df:1d:08:ab:60:0a:7f:3d:5e:bb:06:84:ae:23:0d:0b:8d:70:
         99:3f:f0:16:92:8f:1f:c5:50:3e:43:ac:3c:42:69:51:26:cf:
         e4:d9:c6:ae:da:5c:03:ae:e9:ce:4c:8f:d3:04:fc:4d:5a:31:
         65:02:d8:ab:8b:46:a7:5a:75:26:e2:fe:b1:80:9f:32:2b:6b:
         cd:43:48:e9:35:12:56:e4:94:67:b6:4f:04:0a:29:ac:b7:f1:
         44:30:00:0b:ee:99:c4:69:f8:e2:72:b5:78:87:7e:ab:70:82:
         b1:3b:3e:c4:2a:14:c3:bd:0c:ec:6d:07:4c:65:cd:43:5a:6a:
         f6:61:d0:d6:94:7e:f4:3a:5c:b4:ab:4e:ac:96:6e:b5:c3:dc:
         8f:34:3b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----