Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145527.roa
File:                     AS145527.roa (raw, json)
Hash identifier:          XVUqqY0zN0yte0ySgMjOvuihxatCDi4PCS6vcaYqbvQ=
Subject key identifier:   0B:D7:94:11:9C:5B:BE:6F:DF:AE:06:78:E5:BB:EB:BF:89:7F:13:5C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       19675ADEF9242F18F88BA657E8849A771EE8A06A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145527.roa
Signing time:             Tue 26 May 2026 03:17:12 +0000
ROA not before:           Tue 26 May 2026 03:12:12 +0000
ROA not after:            Tue 25 May 2027 03:17:12 +0000
asID:                     145527
IP address blocks:        240a:ab3d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:67:5a:de:f9:24:2f:18:f8:8b:a6:57:e8:84:9a:77:1e:e8:a0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:12 2026 GMT
            Not After : May 25 03:17:12 2027 GMT
        Subject: CN=0BD794119C5BBE6FDFAE0678E5BBEBBF897F135C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:65:f4:72:30:7c:69:ff:19:e5:0f:9b:af:
                    1d:85:b0:cd:cc:58:c1:c0:ed:fd:ac:aa:cd:bc:a9:
                    e6:a8:05:bb:90:de:10:d1:b9:b1:a5:74:0f:79:19:
                    7d:d1:c6:26:24:17:9e:fd:4b:c5:7e:b5:f5:6a:18:
                    14:0a:32:3a:b4:82:ee:87:3b:36:24:d2:33:a6:a2:
                    c6:30:83:65:f5:a1:84:62:50:e6:66:b1:5d:0e:47:
                    6a:02:75:a3:92:f8:41:1b:02:75:60:7f:36:b4:5f:
                    42:ac:40:53:78:f5:1c:a1:f5:51:94:87:18:a6:95:
                    8b:79:68:34:9f:fa:75:f7:ad:a3:b0:e1:41:cf:68:
                    af:ad:4d:b9:68:75:0a:a0:8c:ea:e1:02:6f:c1:56:
                    de:6f:50:8e:b2:4e:66:a5:e3:51:07:98:aa:b1:46:
                    7e:52:58:8b:f4:9f:da:79:06:54:7c:9a:0a:84:a4:
                    fd:08:ce:d5:92:25:1e:aa:91:43:6e:4f:13:40:cf:
                    38:52:ce:18:8f:e4:3a:97:c6:68:be:c0:35:a0:aa:
                    71:f8:01:cc:38:b8:2e:7d:f0:84:49:9c:01:f5:8f:
                    77:61:ba:c3:5d:7a:4f:bc:2f:a6:b0:e0:05:12:7c:
                    4c:32:ea:2e:58:ed:f7:4d:cb:99:ab:cb:3f:7e:15:
                    61:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D7:94:11:9C:5B:BE:6F:DF:AE:06:78:E5:BB:EB:BF:89:7F:13:5C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145527.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab3d::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:ef:5f:b0:a7:2a:16:96:a8:67:74:17:c8:7c:fa:04:3c:61:
         b2:50:fb:c0:9c:20:f2:61:ce:ff:a3:a9:81:e8:55:70:bb:84:
         5a:88:da:03:c5:5a:4f:e9:68:be:3a:31:a2:fb:fc:a9:a6:66:
         c9:43:7f:e2:09:89:de:89:73:d8:04:7d:e1:53:bb:9d:38:ca:
         37:cf:fa:d1:74:0d:de:58:a1:3e:cf:7b:f1:6d:41:0f:57:e1:
         a4:ea:89:af:61:db:51:d0:70:03:1e:74:da:f1:bb:a7:57:ba:
         96:33:55:57:b6:49:92:c4:66:bc:78:df:b7:7a:ba:46:bf:10:
         5c:84:97:a9:46:e0:ed:d3:9e:d7:3c:ba:30:29:3e:12:74:7a:
         41:e3:f1:26:56:98:e2:66:eb:9b:fb:90:b6:d7:a5:74:b4:a4:
         82:44:a4:7b:70:eb:c5:49:05:bd:87:d7:f3:80:23:8d:fc:80:
         1b:24:12:ca:2a:85:97:2b:50:1b:09:e7:d4:9e:5e:71:20:89:
         7d:1c:7e:36:c6:60:ac:ae:ff:48:ce:b9:54:40:3e:37:17:27:
         8a:8f:19:b8:49:43:01:61:9c:ca:ef:a1:1b:63:18:04:12:a6:
         70:dd:4b:28:eb:a4:00:a8:25:f1:7c:d4:9f:df:78:59:d1:79:
         da:89:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----