Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145733.roa
File:                     AS145733.roa (raw, json)
Hash identifier:          fNQ+jd1ZODmXjT8s1iae00INWzAstACFJMz6hqH4s2Q=
Subject key identifier:   BA:83:20:01:E7:36:3A:08:E2:AC:D6:FB:15:A0:CE:E1:25:95:90:5D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       51A2A020E87AFD795FAB6CCEFE6B4E72BED839FD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145733.roa
Signing time:             Tue 26 May 2026 02:35:06 +0000
ROA not before:           Tue 26 May 2026 02:30:06 +0000
ROA not after:            Tue 25 May 2027 02:35:06 +0000
asID:                     145733
IP address blocks:        240a:ac0b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a2:a0:20:e8:7a:fd:79:5f:ab:6c:ce:fe:6b:4e:72:be:d8:39:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:06 2026 GMT
            Not After : May 25 02:35:06 2027 GMT
        Subject: CN=BA832001E7363A08E2ACD6FB15A0CEE12595905D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c2:87:42:27:4c:2c:9f:6d:bc:bb:5d:da:69:
                    4e:6e:3c:17:18:21:d4:3e:96:8b:e4:ad:14:28:0f:
                    71:0f:32:71:ab:18:cb:7a:d8:43:36:f6:07:71:ca:
                    ac:f1:d8:c3:61:f4:93:64:36:6f:bb:3c:da:15:06:
                    e0:f4:00:e3:b5:e1:f6:fc:b6:ee:0a:6a:0a:94:b2:
                    56:2a:68:48:be:4f:52:6e:8b:02:1c:8c:31:d3:e5:
                    42:57:3b:2a:94:86:85:b6:68:46:60:7d:5e:0e:a7:
                    f5:57:50:2c:72:7b:d5:e6:67:ec:c2:dc:c0:16:c8:
                    8d:59:08:e8:db:12:e4:98:f0:ff:c1:bb:2e:0e:c0:
                    62:c2:61:52:de:48:3c:23:83:b0:bb:f4:31:f8:61:
                    e2:ca:3c:49:4a:7d:f5:3e:fd:54:cd:de:49:30:08:
                    10:b0:29:52:66:85:01:98:8b:0a:41:48:87:dc:85:
                    af:13:50:31:40:d5:bf:ae:4e:3a:12:3c:f7:28:30:
                    8e:0d:4b:8c:50:50:16:f6:fe:56:fc:ae:4e:4d:8d:
                    96:8e:9b:3f:29:62:98:ee:f8:f1:90:aa:15:e2:60:
                    5e:ab:91:9b:81:2e:7e:e6:9a:ab:46:2d:4f:31:44:
                    5f:40:c3:8f:8a:01:d2:23:eb:15:73:81:a7:56:11:
                    6c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:83:20:01:E7:36:3A:08:E2:AC:D6:FB:15:A0:CE:E1:25:95:90:5D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac0b::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:25:73:82:bf:dd:56:e5:01:a3:a3:0d:2a:89:9a:28:73:f0:
         fd:d4:97:bf:a3:ee:62:0f:47:d9:53:8b:ba:59:6f:8c:4f:be:
         66:bf:51:95:c1:4f:2a:09:f9:08:e4:ee:51:95:e6:4d:47:db:
         2f:25:0a:d2:3a:e8:21:09:56:8b:40:2d:f1:86:bc:19:f6:34:
         b9:7f:83:79:9c:11:d2:65:0d:84:c3:9e:f3:00:8f:43:9e:70:
         2e:1b:b5:95:01:e0:67:8a:ba:47:db:96:3b:d4:54:3d:95:9e:
         eb:57:c0:68:7a:59:2d:e1:0f:d4:4d:c3:57:f7:1f:c2:cc:02:
         d8:3c:34:cf:d1:69:5b:eb:39:68:66:7d:ec:bc:fe:60:2c:a8:
         ef:8f:e6:40:8a:1b:58:60:3f:4d:92:95:82:ff:de:5a:59:e1:
         67:19:52:59:c6:04:23:a3:3b:7e:e6:32:b1:8b:86:65:fb:3b:
         58:ad:b1:c8:b3:00:04:2c:ce:90:21:59:32:2e:82:15:d5:4d:
         5c:df:fb:26:03:bf:08:76:97:b8:b4:1c:fa:6a:ef:d7:b8:47:
         2b:dd:0c:eb:ba:e1:1d:14:77:1d:c1:0d:54:f4:85:0b:64:9f:
         96:2e:d5:57:4c:13:49:cc:dd:86:9b:0d:11:dc:72:74:47:fb:
         3c:51:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----