Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145829.roa
File:                     AS145829.roa (raw, json)
Hash identifier:          JCa/9aDAEw5Hv/4QiiDhBoC4bPicgJOXh5scu8ah3SI=
Subject key identifier:   B0:F2:61:00:60:79:AA:83:90:55:A1:BC:35:09:97:87:CD:DB:C6:DD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2B05A3FBF1F5FDE10A41E4BC46B8CA33ECBA9853
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145829.roa
Signing time:             Tue 26 May 2026 02:35:26 +0000
ROA not before:           Tue 26 May 2026 02:30:26 +0000
ROA not after:            Tue 25 May 2027 02:35:26 +0000
asID:                     145829
IP address blocks:        240a:ac6b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:05:a3:fb:f1:f5:fd:e1:0a:41:e4:bc:46:b8:ca:33:ec:ba:98:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:26 2026 GMT
            Not After : May 25 02:35:26 2027 GMT
        Subject: CN=B0F261006079AA839055A1BC35099787CDDBC6DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:4b:03:4d:66:90:ad:c0:91:d2:32:6e:dc:
                    c4:74:95:dc:2a:49:2d:c1:32:0a:21:5b:6b:6a:4e:
                    9b:52:80:59:a5:fc:d3:c8:1a:3f:4c:08:06:9a:e8:
                    0e:7b:84:17:2e:b7:04:6d:fc:80:d4:f3:c6:3d:08:
                    52:0d:0c:27:51:c8:18:73:e0:69:54:69:99:ff:ee:
                    ad:3f:e8:d8:4f:82:c3:fc:cc:15:c5:fb:60:e6:7b:
                    23:9f:2c:63:b3:22:c9:f5:12:58:e6:6e:33:69:79:
                    21:5b:de:43:8a:0d:90:b7:e4:c7:72:98:6a:e4:a3:
                    b2:ce:b8:a4:d4:9e:00:3f:ea:69:f8:14:93:69:ed:
                    c2:d5:04:25:62:06:33:5d:48:8e:fa:33:35:58:df:
                    46:00:59:ee:77:33:2d:b8:eb:10:bc:ef:fc:65:64:
                    05:27:b9:58:13:68:ec:f7:bf:f0:e7:21:bb:d4:48:
                    cb:a3:12:c7:ed:00:48:dc:97:3b:f4:da:ce:b1:4b:
                    d1:e7:9c:7e:05:b5:96:5d:a2:df:31:0b:d8:ac:d7:
                    21:2a:e2:23:cf:ab:19:21:7c:48:17:44:d1:30:6e:
                    45:8b:ca:31:65:dd:04:b5:05:9d:80:7f:7a:3f:98:
                    d5:79:ed:5f:32:84:93:0c:35:c0:40:3e:40:14:38:
                    54:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:61:00:60:79:AA:83:90:55:A1:BC:35:09:97:87:CD:DB:C6:DD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145829.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac6b::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:2a:a3:63:de:9d:83:00:47:b7:eb:52:67:e6:57:c9:d6:df:
         f9:3e:64:f7:e8:6e:37:61:4d:24:a2:2f:e5:9c:da:9f:61:3e:
         2a:b9:df:2d:85:c7:5d:66:a8:db:be:b1:37:89:ba:e8:94:4f:
         f2:12:af:72:6f:e4:21:57:e3:3b:43:8b:0c:0f:ab:8a:c7:8e:
         82:bd:be:6b:4e:d0:6d:1b:fe:0b:a4:2c:59:54:d5:a3:f4:5d:
         ae:8e:3d:81:47:c9:fb:34:57:ef:a6:d3:20:02:80:df:e1:6a:
         fe:cc:8b:09:61:75:92:f1:1a:13:fc:6d:2b:d6:72:08:fa:ff:
         75:31:33:0b:aa:73:dd:95:aa:0e:93:6e:5c:96:88:e3:ad:ac:
         d2:37:6b:3e:1b:ff:c6:c8:a4:23:6e:c4:a6:e3:23:3b:32:44:
         78:45:e3:70:93:71:c4:5f:34:94:58:d3:fa:d4:ae:54:4c:b4:
         f0:e4:49:27:97:11:16:58:da:dc:20:85:eb:ca:c5:c5:fd:34:
         6c:b2:c6:d9:d3:ee:15:1d:d5:35:88:76:86:18:c8:45:41:7c:
         2c:f3:88:e0:14:26:6c:89:d0:b8:44:e0:07:ef:2a:98:93:d9:
         d3:11:80:42:f3:55:99:1a:75:1d:11:c9:1b:29:e7:9b:45:e6:
         8c:f0:14:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----