Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145301.roa
File:                     AS145301.roa (raw, json)
Hash identifier:          t2CU/rIb6xZYG5+PnMc33ad0m9oYKelzHN2mUPtYpKs=
Subject key identifier:   96:FE:46:0D:13:9F:37:7F:FC:BA:D9:A7:59:6B:DB:C7:77:55:EB:0D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       48C2E49BF3C3C9FC1AC9D7C1D85298594A7FA35B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145301.roa
Signing time:             Tue 26 May 2026 06:12:27 +0000
ROA not before:           Tue 26 May 2026 06:07:27 +0000
ROA not after:            Tue 25 May 2027 06:12:27 +0000
asID:                     145301
IP address blocks:        240a:aa5b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c2:e4:9b:f3:c3:c9:fc:1a:c9:d7:c1:d8:52:98:59:4a:7f:a3:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:27 2026 GMT
            Not After : May 25 06:12:27 2027 GMT
        Subject: CN=96FE460D139F377FFCBAD9A7596BDBC77755EB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:c4:15:4d:2d:13:af:c1:82:b0:3f:e7:52:
                    4f:ee:41:fc:eb:8d:f6:c0:74:3d:a4:e8:12:37:ef:
                    c4:93:1c:74:25:cf:23:35:6f:7d:8a:3c:89:2a:37:
                    3f:89:82:74:6d:ff:44:36:46:63:b8:b8:e5:af:1f:
                    9c:a6:e9:04:d1:ca:7e:ac:42:ee:ec:a0:b2:82:e4:
                    4c:15:d3:a7:ba:6b:02:54:a2:e9:82:71:bf:3c:4b:
                    c1:bc:06:23:88:98:a6:5b:38:cf:a7:4c:dd:d1:02:
                    9b:98:ad:90:a5:5f:a1:79:b7:10:bd:ac:24:a5:9b:
                    f9:13:3b:f6:22:5b:a2:22:09:ce:74:ef:d8:ca:0f:
                    ff:00:a7:19:74:a6:c8:44:1d:61:be:5d:13:7d:0c:
                    bb:07:51:ab:43:bf:e3:8c:ba:bc:4f:9b:40:ad:fc:
                    14:01:e5:68:f2:3b:0f:8c:b4:34:5f:e4:13:09:85:
                    a6:ad:54:a3:22:2c:f1:69:d3:c8:ee:09:16:ca:90:
                    2e:4e:22:0c:be:70:7a:75:24:77:01:70:ab:9c:4a:
                    06:8f:26:8b:65:e0:d4:f2:79:dc:8b:69:5a:e3:87:
                    6c:e2:18:01:85:c1:65:f5:fa:a1:e4:d8:ef:5d:cd:
                    9f:ec:12:77:6c:eb:e7:44:09:7c:8e:b8:55:ef:73:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FE:46:0D:13:9F:37:7F:FC:BA:D9:A7:59:6B:DB:C7:77:55:EB:0D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145301.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa5b::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:67:b9:62:0a:85:bb:b5:f5:66:6f:cf:81:e0:df:62:53:
         56:a5:23:9c:9e:a1:8c:e6:bc:f0:2f:24:2f:72:23:0f:6c:18:
         d9:73:9d:0e:63:3f:fb:b7:29:09:12:0d:b5:64:f1:7d:92:54:
         e1:68:a9:99:b0:57:41:6b:59:c1:4a:74:24:f8:11:11:94:08:
         60:6b:d2:4e:e4:c4:6b:73:85:76:a6:02:53:91:d6:1a:5e:de:
         23:4b:52:97:d3:78:27:92:4f:33:89:5d:06:bb:1d:cc:5b:a0:
         9f:89:7e:63:41:42:f5:f4:92:8f:6c:cc:27:c6:95:80:46:da:
         5f:e9:a2:2a:80:51:a9:74:ac:d5:f3:48:a8:a9:0b:0e:b7:ef:
         c7:56:2a:52:68:d0:51:39:f7:02:90:7c:1d:44:fb:57:d6:45:
         c8:3d:e8:ca:42:70:1f:09:5a:54:2d:df:1c:9b:37:1d:52:08:
         6c:f0:0e:1f:b0:85:f3:8c:d7:5b:e0:88:05:bb:4b:d9:4e:21:
         d2:a6:78:b8:ec:4e:e9:f1:ca:49:94:e0:32:17:3a:c8:e6:c8:
         14:a5:f5:e9:da:d4:1f:39:c3:eb:dc:e4:40:5d:54:b1:d5:7a:
         95:18:88:06:8a:65:66:44:3a:6e:29:f6:34:12:7a:34:b5:ca:
         a4:d1:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----