Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145835.roa
File:                     AS145835.roa (raw, json)
Hash identifier:          b6CqsD8w+5j/l5e9sb/C/V0uOR6+aZ3GBs8dIfLMMWY=
Subject key identifier:   A4:AB:10:A7:07:13:3E:77:E2:32:A2:0C:24:2A:7A:18:67:3B:B9:A9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       20A426AB0A3D70DA31405B63B428084DB896958A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145835.roa
Signing time:             Fri 22 May 2026 06:27:44 +0000
ROA not before:           Fri 22 May 2026 06:22:44 +0000
ROA not after:            Fri 21 May 2027 06:27:44 +0000
asID:                     145835
IP address blocks:        240a:ac71::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a4:26:ab:0a:3d:70:da:31:40:5b:63:b4:28:08:4d:b8:96:95:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:44 2026 GMT
            Not After : May 21 06:27:44 2027 GMT
        Subject: CN=A4AB10A707133E77E232A20C242A7A18673BB9A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:1b:60:7f:4b:6e:52:de:25:e9:99:7c:9d:
                    94:b0:b6:8d:98:27:4f:73:00:f7:a9:2a:54:07:5a:
                    f0:c4:83:71:9e:92:54:16:da:a7:58:9f:c2:4c:c9:
                    f6:49:1e:57:5c:17:e0:94:0a:b6:44:a3:7d:e8:64:
                    af:66:b4:64:5c:64:31:24:b6:ca:2c:19:92:d0:45:
                    30:68:d6:31:47:2e:d0:a9:63:f2:31:d3:e7:a3:8b:
                    f0:45:ee:80:52:5d:93:82:fb:42:f9:78:2b:7a:35:
                    a7:eb:cd:af:7a:0c:05:4d:5a:4c:b4:17:95:05:0b:
                    9d:c1:ce:42:5b:b6:49:21:49:48:5f:47:95:08:99:
                    53:0f:d3:39:93:fe:5f:87:5b:14:24:6d:df:77:00:
                    e5:67:15:ec:75:cd:e2:56:13:fc:29:af:be:63:3c:
                    1e:2e:3c:49:f8:cd:ef:81:f6:45:93:7e:ab:b0:9c:
                    c7:e2:01:46:c5:73:5b:e2:00:41:ee:7f:e1:f1:27:
                    e3:74:b2:b9:d2:49:c3:f0:1c:d7:5f:2e:90:4e:5c:
                    53:6a:5c:67:67:78:69:f1:12:04:60:13:5a:c3:0e:
                    a6:a2:6c:32:6d:7b:a4:84:51:75:bc:d4:b0:9a:39:
                    27:f2:ea:a3:4c:82:1e:13:b6:7c:a8:f4:aa:4c:3e:
                    fd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AB:10:A7:07:13:3E:77:E2:32:A2:0C:24:2A:7A:18:67:3B:B9:A9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac71::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:7e:c8:39:d6:cb:b4:b5:23:96:a5:95:a9:9a:c4:aa:bc:e9:
         4d:5f:fc:b6:96:94:58:4e:89:3e:59:e5:ea:41:63:c6:98:6c:
         1a:4f:68:b8:15:be:d9:4b:34:1d:83:f2:8a:da:10:7e:cf:16:
         4c:10:76:b4:af:2f:85:7a:f2:97:8b:1d:8e:e2:88:1a:39:cf:
         b2:bf:4a:67:c3:71:e6:d5:fc:75:52:f8:5b:dd:a7:cc:9a:15:
         f0:11:e9:db:03:8c:2e:f8:06:28:ad:7f:5b:4d:a4:4f:3c:61:
         25:d2:8b:55:d8:90:56:55:cd:8a:c3:33:45:5c:38:19:bd:00:
         02:43:d0:bd:43:47:8c:a1:0c:9f:b4:e0:eb:62:e4:94:46:0f:
         c3:13:c8:c9:d0:f9:b6:fe:cb:21:f4:61:d9:3e:ba:99:15:0f:
         cc:e6:1b:b3:90:9b:1a:46:b9:7a:dd:a0:87:89:da:65:f2:f8:
         d2:f6:8e:c4:fa:b0:30:1a:6c:a1:72:56:ae:46:c2:67:46:8d:
         4e:14:eb:10:4e:41:1c:e0:7d:f3:8f:09:64:5b:34:f6:e4:1c:
         df:07:66:c6:83:11:05:08:c7:dc:16:29:f9:98:75:65:20:ec:
         6e:9b:fc:ef:5e:b7:a7:cb:1e:a4:b0:90:33:55:55:89:51:a4:
         84:22:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----