Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145965.roa
File:                     AS145965.roa (raw, json)
Hash identifier:          aJzwcQCjhdxYjUzwCK6Utlo3zgmPtqNK9/u6wFY1Wqo=
Subject key identifier:   17:C9:B7:73:FC:60:CE:B2:5B:CC:5D:9F:2E:89:D4:26:FD:0C:F0:BD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       49635E384D9B51C7AE771338C70264ED51BBC52A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145965.roa
Signing time:             Fri 22 May 2026 07:41:14 +0000
ROA not before:           Fri 22 May 2026 07:36:14 +0000
ROA not after:            Fri 21 May 2027 07:41:14 +0000
asID:                     145965
IP address blocks:        240a:acf3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:63:5e:38:4d:9b:51:c7:ae:77:13:38:c7:02:64:ed:51:bb:c5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:14 2026 GMT
            Not After : May 21 07:41:14 2027 GMT
        Subject: CN=17C9B773FC60CEB25BCC5D9F2E89D426FD0CF0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:56:11:d0:cd:48:52:6e:3e:9a:d3:5b:dc:
                    bb:e9:1f:03:ad:85:f0:2b:4c:08:d5:1b:9c:12:09:
                    aa:03:4c:cd:37:2c:b7:63:38:5c:52:96:4c:c9:97:
                    57:ed:6e:d5:0e:30:ad:90:19:6d:21:79:8b:7f:51:
                    25:cb:ac:5d:37:f8:be:13:f6:43:2f:2b:96:a0:40:
                    7f:48:3b:08:0c:cc:83:c3:a0:ff:4d:a7:f5:78:22:
                    fd:48:6f:3e:1a:4b:cc:23:69:49:5c:a9:7b:76:46:
                    0e:13:88:fd:f8:52:87:30:f4:92:9f:b4:57:02:a6:
                    12:f9:e1:40:c3:45:a0:88:f2:83:dc:29:ac:f3:b3:
                    37:84:e4:b3:22:8d:c6:59:1b:25:b0:59:c8:9b:56:
                    9d:92:d1:ef:d5:25:3c:5c:94:79:ed:60:97:04:27:
                    5a:97:a9:16:df:7f:c1:3d:ea:01:61:dd:b9:99:e9:
                    c9:f6:de:3e:40:f3:5f:40:f9:36:02:d6:43:b2:45:
                    a6:7b:6d:84:0c:39:11:00:36:04:8f:c9:ee:2c:4d:
                    a4:69:a5:7e:5c:93:87:53:65:ba:ad:65:58:7b:a3:
                    a7:07:1d:3b:90:92:e5:28:28:56:2f:8b:57:0c:66:
                    6e:7a:03:77:b0:f4:8a:f1:f1:d6:d4:2f:8d:c7:95:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C9:B7:73:FC:60:CE:B2:5B:CC:5D:9F:2E:89:D4:26:FD:0C:F0:BD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145965.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acf3::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:2f:9b:04:51:27:4b:79:2f:b8:86:2e:1a:7d:b4:41:7e:95:
         53:95:81:8e:fb:c3:d2:16:d5:8d:e8:36:26:5f:f7:f2:f7:f6:
         12:af:ff:03:d1:71:ef:c4:48:95:af:92:67:3a:fc:51:4c:f6:
         de:e8:f0:12:33:78:74:f2:8d:c1:28:7b:97:c3:05:eb:9b:0b:
         84:ba:a6:99:40:eb:e6:52:a7:f1:56:e7:d2:96:2b:db:4f:0e:
         12:1c:03:be:15:74:75:c3:69:2a:3f:93:e1:20:69:df:fc:0c:
         0e:b1:9a:91:8c:40:8a:b3:d8:ba:72:53:9f:3b:4a:48:fd:12:
         d1:c1:af:a0:84:a7:8e:fb:22:19:b4:89:ae:2a:82:a5:ce:2b:
         6f:0d:54:3b:50:25:d1:81:b7:86:db:81:ce:0f:ae:12:de:93:
         35:6b:c9:e8:9a:d1:82:fe:d2:9e:84:ab:e0:04:20:cc:71:6d:
         55:66:75:68:ee:d8:28:a1:cc:01:43:13:e2:0c:3a:a0:bd:bf:
         5b:db:78:c4:b8:72:24:41:de:e1:b2:f8:86:d9:17:86:c0:11:
         f4:a2:81:e7:f0:28:5f:f5:99:3a:79:1c:42:33:c0:79:9f:5a:
         79:05:c8:4f:56:e2:e8:e2:bf:f3:e5:a2:4b:2a:a3:6c:c8:f4:
         64:ca:c3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----