Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145571.roa
File:                     AS145571.roa (raw, json)
Hash identifier:          RCguStXD+xk/kaN70NgWstedVaBYS3sRXpa4BxmK/eo=
Subject key identifier:   33:0C:E0:2C:E4:95:1D:7C:3E:8C:2E:25:1F:FF:17:9F:B7:E0:D9:17
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0B482B54D132653061F00DFB9ADAC40B21720477
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145571.roa
Signing time:             Mon 25 May 2026 06:49:05 +0000
ROA not before:           Mon 25 May 2026 06:44:05 +0000
ROA not after:            Mon 24 May 2027 06:49:05 +0000
asID:                     145571
IP address blocks:        240a:ab69::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:48:2b:54:d1:32:65:30:61:f0:0d:fb:9a:da:c4:0b:21:72:04:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:05 2026 GMT
            Not After : May 24 06:49:05 2027 GMT
        Subject: CN=330CE02CE4951D7C3E8C2E251FFF179FB7E0D917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7b:0d:e0:7a:15:f8:b0:26:7e:0f:67:40:12:
                    f1:fc:34:61:f2:8a:21:41:27:62:52:f9:f9:c0:a9:
                    62:cc:34:2f:50:59:ee:68:cc:bb:c7:8c:54:5b:df:
                    9a:86:85:50:38:5c:87:1c:3d:04:22:6e:58:78:44:
                    57:7d:f5:3d:81:e1:14:d1:16:43:6c:a1:00:f7:34:
                    97:a0:82:92:14:fb:53:a5:52:06:33:b5:9c:c7:50:
                    4d:77:21:fa:5e:88:bb:49:62:20:f6:34:4f:89:ac:
                    ee:c6:0a:0e:52:b9:3c:fb:ff:de:16:d4:f2:83:cc:
                    a2:19:55:e2:1a:bf:e6:73:86:fe:0b:71:d3:ce:75:
                    a1:64:b8:ba:37:e6:48:36:36:4f:f3:3e:31:1f:ac:
                    91:e4:e8:a0:5a:97:fa:01:73:66:f9:22:9c:cd:59:
                    f3:e7:71:bb:19:a9:d1:48:6f:32:54:ce:70:08:a4:
                    e3:c8:c8:28:09:45:cd:dc:47:b9:6b:07:d6:ea:69:
                    fe:58:a9:b7:d1:9d:09:47:8d:81:ef:5d:e2:b9:71:
                    b2:3a:f0:e4:60:58:f3:56:1b:26:14:e7:80:c3:d1:
                    21:46:eb:e9:36:29:2e:a9:8a:13:ee:f2:56:c6:f1:
                    0e:e9:45:34:1f:d4:db:3e:ed:46:15:23:d5:15:f0:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0C:E0:2C:E4:95:1D:7C:3E:8C:2E:25:1F:FF:17:9F:B7:E0:D9:17
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145571.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab69::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:ab:08:f4:4d:fe:b1:93:01:41:d8:c9:7a:9e:25:e4:f7:02:
         d4:74:b7:72:c0:bb:51:d3:68:ce:e5:74:53:55:db:42:9f:45:
         9d:2a:90:74:fd:89:45:28:a5:3a:ca:9e:df:71:e3:38:18:e9:
         61:49:54:71:57:d6:eb:32:bb:6d:80:1a:5d:3d:90:a7:61:ad:
         aa:96:cf:fd:1a:74:ce:55:b0:9c:ed:1f:00:9e:d7:db:77:9c:
         3a:0c:72:dc:f4:27:08:64:44:5a:5e:9d:53:3c:06:7f:32:c1:
         e3:45:0c:a2:66:a7:aa:5e:5d:fb:27:de:37:c2:11:22:c1:f7:
         6b:da:5b:6e:61:d2:a6:12:53:41:86:93:5d:17:9e:22:08:b1:
         92:a9:49:ac:70:6a:9f:90:36:7e:00:2a:c6:6a:79:ae:08:a8:
         26:78:7c:81:31:ea:7e:34:d6:b3:a2:45:e4:d8:d4:05:65:39:
         c0:e6:c8:8c:93:5d:f0:4b:f1:3c:37:41:8f:8f:e3:bd:4e:eb:
         42:cf:51:81:cb:52:23:da:cc:6a:a3:ea:c7:e6:97:ba:f3:89:
         da:d8:9c:db:a3:a7:62:c5:fa:df:bb:03:79:f5:ee:4c:f5:34:
         fe:55:77:44:60:cf:cd:eb:e8:c8:69:4e:f6:80:c2:09:e3:e0:
         c6:6d:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----