Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145709.roa
File:                     AS145709.roa (raw, json)
Hash identifier:          x6FwQEKRUSxsId2kV6Hj1b9ZrH5Klt79PBQLlkXKZ2Y=
Subject key identifier:   7C:9D:C4:97:88:FF:94:2D:A2:EF:28:71:6D:34:76:CD:A7:27:54:0B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       02362ECCEF8476E7C1ACE4C72F0BC1412D315B60
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145709.roa
Signing time:             Fri 22 May 2026 06:46:12 +0000
ROA not before:           Fri 22 May 2026 06:41:12 +0000
ROA not after:            Fri 21 May 2027 06:46:12 +0000
asID:                     145709
IP address blocks:        240a:abf3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:36:2e:cc:ef:84:76:e7:c1:ac:e4:c7:2f:0b:c1:41:2d:31:5b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:12 2026 GMT
            Not After : May 21 06:46:12 2027 GMT
        Subject: CN=7C9DC49788FF942DA2EF28716D3476CDA727540B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:b0:73:4d:48:cf:ea:96:cd:ee:ce:5d:2e:
                    97:f3:2b:47:60:f9:c2:d2:a8:ab:5a:76:7b:5e:cb:
                    29:e5:5f:6f:ba:26:58:8d:22:79:c8:82:ba:95:16:
                    57:70:d7:9f:75:ea:35:96:e4:fc:4e:49:bd:1f:3f:
                    e5:b6:ca:d3:96:0c:27:9c:18:b3:f0:d5:bc:01:ca:
                    00:49:58:57:de:c0:5b:6c:e5:21:8e:d5:57:1d:d2:
                    44:02:ca:92:2a:4d:b2:37:61:bc:59:c2:2f:63:c5:
                    3e:8f:6f:ab:49:2a:d0:36:3a:20:ee:c5:83:89:e9:
                    88:21:e2:00:e4:4f:45:c2:a2:c7:db:ec:00:de:be:
                    1d:4c:37:2d:50:4c:dd:35:27:e8:50:b1:36:eb:c6:
                    52:df:5e:0d:b5:56:0f:88:a9:f2:10:21:7d:85:6e:
                    aa:5d:f4:13:a2:5b:fa:45:22:7e:38:5d:56:a6:52:
                    71:2d:b3:d2:9e:85:b6:c1:37:d5:8b:fc:0a:ce:b6:
                    cb:24:5e:13:e9:fc:70:10:63:a3:c7:46:33:d4:1a:
                    e5:05:3b:05:99:b3:e5:c3:5c:69:b0:9a:6d:c5:dd:
                    03:86:bf:e8:1f:4a:df:aa:7f:1c:b0:82:e8:bb:f1:
                    6d:55:5c:73:81:3c:bb:8b:4b:07:91:60:66:84:17:
                    1b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9D:C4:97:88:FF:94:2D:A2:EF:28:71:6D:34:76:CD:A7:27:54:0B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145709.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abf3::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:12:f7:8b:4d:95:80:57:be:8c:1a:a4:4b:8b:92:d0:28:81:
         5f:5a:5f:0c:a8:46:ab:7d:74:28:d8:19:47:b4:58:4b:e3:94:
         bf:71:30:29:e3:72:aa:f6:41:42:22:3c:b4:c5:72:d4:93:67:
         d6:18:18:e5:dc:2b:0b:fa:a1:70:4d:f8:cf:2a:94:3d:88:de:
         88:f8:f6:55:ea:bc:5a:48:18:70:fa:ff:aa:8d:f6:6e:5c:7c:
         6b:2c:e5:cc:44:82:ce:48:63:04:af:77:6b:63:06:7b:db:47:
         79:38:09:0c:27:60:d3:51:ee:c6:9c:60:aa:cb:86:e2:76:39:
         cb:99:3f:77:be:c4:15:67:1b:f7:6b:55:13:5c:5a:55:fa:13:
         ac:d3:de:82:f2:ac:e2:58:70:10:81:ca:28:1a:d6:d1:3a:7f:
         c8:c2:f0:bf:cf:5f:92:d0:d2:be:26:e5:92:87:50:d4:e7:f4:
         72:b6:b9:0a:b4:79:cf:c7:c3:20:6b:cb:d3:2e:b6:34:73:cc:
         b1:e4:cc:3d:85:af:85:6d:42:cd:29:ee:85:3e:c3:1b:d1:3f:
         04:aa:17:0b:cc:08:21:43:3f:fa:d4:37:c7:a0:50:fa:28:62:
         e6:cc:d9:93:44:fa:f2:37:cb:91:d0:38:e0:ed:7a:3e:d6:41:
         c3:dd:b4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----