Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145594.roa
File:                     AS145594.roa (raw, json)
Hash identifier:          UrukJz/VHl8MT2QUjgqKth2Zo6aA23UqnTOFxNQ7zqk=
Subject key identifier:   28:84:CA:D2:58:40:F0:F2:79:9B:2E:9E:12:E7:C5:C3:A2:EA:B3:48
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       63CF8891724107631D08BEEE0A11C1AEF3AEFEEA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145594.roa
Signing time:             Fri 22 May 2026 01:50:42 +0000
ROA not before:           Fri 22 May 2026 01:45:42 +0000
ROA not after:            Fri 21 May 2027 01:50:42 +0000
asID:                     145594
IP address blocks:        240a:ab80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cf:88:91:72:41:07:63:1d:08:be:ee:0a:11:c1:ae:f3:ae:fe:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:42 2026 GMT
            Not After : May 21 01:50:42 2027 GMT
        Subject: CN=2884CAD25840F0F2799B2E9E12E7C5C3A2EAB348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:45:ba:8c:5e:57:b3:d4:8c:7c:ab:72:a2:
                    10:4c:e4:8a:e1:f0:b5:45:32:c8:b2:9d:26:1e:6e:
                    b3:1a:79:9e:56:a6:3e:17:ae:60:99:34:bb:5c:05:
                    37:3d:3e:aa:3c:b0:4d:d3:7b:95:c7:e9:ef:b0:d6:
                    51:c5:75:f5:13:a4:e1:68:4e:bf:31:f1:b9:4c:3a:
                    a0:ed:f8:f7:91:5c:d5:09:a3:f9:e5:c8:12:50:78:
                    6e:4e:30:01:2b:77:9d:a6:67:ed:97:07:86:cd:ad:
                    40:e9:d5:97:bf:4d:59:11:ef:89:09:44:55:7e:65:
                    5b:51:52:f5:28:1e:92:21:46:71:36:0f:51:0d:89:
                    31:fe:04:51:4c:1d:6e:42:d3:f4:a4:9d:85:12:17:
                    a4:ea:07:97:9a:02:9c:c6:a1:88:6f:97:bc:51:fe:
                    7e:dc:13:01:09:04:62:b9:2b:d8:2a:0b:8f:16:ed:
                    8c:5e:58:71:7c:8e:34:94:40:89:21:d8:db:57:cf:
                    98:6c:d4:f8:9a:99:9d:ba:67:65:72:12:f0:9a:29:
                    1d:03:f3:01:01:1d:e2:e1:3c:14:3a:a5:fc:e6:39:
                    9b:f5:6e:70:c1:d3:2b:e8:26:2d:2f:95:51:b9:95:
                    d9:db:e8:22:ee:a3:9b:67:0a:66:0d:e5:19:17:a7:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:84:CA:D2:58:40:F0:F2:79:9B:2E:9E:12:E7:C5:C3:A2:EA:B3:48
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145594.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab80::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:29:c7:31:47:87:65:3a:ee:2b:a3:e1:50:58:cb:07:9b:1a:
         3c:06:3b:7c:c9:4a:1c:91:76:d1:40:bf:76:6b:02:34:1f:27:
         87:94:38:8d:da:81:a9:46:4e:31:4e:ce:4f:ca:86:5e:f7:87:
         44:4e:47:67:f4:94:ef:d8:ed:19:03:33:8a:af:10:49:e9:05:
         b9:d2:28:cd:7f:08:04:62:3e:f4:a2:da:b5:26:d3:24:e4:fc:
         56:11:d4:df:03:d7:d7:c9:d3:fb:cc:2e:7b:3f:1c:23:7d:72:
         eb:74:c6:cf:59:e7:03:5f:da:1a:7e:c6:86:b2:15:4b:15:98:
         c5:af:42:eb:38:db:e2:3c:a2:e5:5a:b4:cd:86:75:dd:1e:bb:
         1b:80:3f:e8:a0:f5:dc:a5:8b:39:0e:e9:6b:eb:ef:87:9d:89:
         2d:45:41:58:3d:e9:6f:02:64:df:d5:9a:46:4c:43:88:9c:c7:
         0a:5e:0d:dc:a6:55:db:03:72:95:b0:79:06:25:dc:27:76:00:
         49:48:db:1d:0a:2b:c2:c2:aa:59:6e:a1:f0:55:bb:39:47:b8:
         57:21:4a:99:17:fb:0d:16:7a:e5:08:ec:97:30:b9:23:82:1a:
         6e:b3:3f:4a:9e:a9:80:58:c0:49:4c:98:51:2c:f1:6c:4f:17:
         56:0e:16:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----