Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145018.roa
File:                     AS145018.roa (raw, json)
Hash identifier:          k65TO3uAf5QbnzY6pIZYdhUnj+8cW+TGXDndWiyJnJs=
Subject key identifier:   3B:41:14:2F:C9:9E:8C:0A:0E:FF:15:68:09:F0:9E:F5:24:C3:E3:67
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       294B0ACF4201242A3781C6E8465F4E00F1E2C0D5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145018.roa
Signing time:             Fri 22 May 2026 07:24:36 +0000
ROA not before:           Fri 22 May 2026 07:19:36 +0000
ROA not after:            Fri 21 May 2027 07:24:36 +0000
asID:                     145018
IP address blocks:        240a:a940::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4b:0a:cf:42:01:24:2a:37:81:c6:e8:46:5f:4e:00:f1:e2:c0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:36 2026 GMT
            Not After : May 21 07:24:36 2027 GMT
        Subject: CN=3B41142FC99E8C0A0EFF156809F09EF524C3E367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:8d:6f:1e:b7:8a:86:3d:e4:25:2e:76:ec:
                    6e:37:47:24:46:ba:31:75:45:9d:d5:32:27:de:2e:
                    37:77:02:1a:81:73:58:a8:13:e7:1f:cc:7a:7b:5d:
                    5f:d7:18:a6:71:cf:df:3b:df:0d:de:79:56:d9:58:
                    18:56:a1:c4:aa:dd:d3:53:08:8e:c1:9e:4d:e8:2a:
                    f2:82:39:2a:98:28:08:2e:db:e0:de:36:a0:8c:b2:
                    8b:ae:c7:65:ad:95:5e:4b:14:b1:98:26:0e:f3:af:
                    8e:6c:a4:dd:46:f0:38:6c:cd:21:0f:97:28:9a:53:
                    84:52:76:71:31:e5:8b:65:0b:01:b9:72:e8:7a:39:
                    02:ea:ae:26:4a:2b:f4:6e:ce:a0:35:34:3e:1d:59:
                    fc:90:b7:dc:d9:9d:48:40:fe:00:0b:46:9c:58:2b:
                    e8:00:0b:aa:fa:21:ea:b8:5b:3d:39:36:0c:9b:0d:
                    0c:f8:32:b4:43:85:3b:94:d3:59:d3:18:55:14:d2:
                    da:16:aa:8d:53:0e:a4:fc:ac:87:3e:24:e8:b0:cd:
                    4e:77:d4:a1:2e:f4:ee:76:35:ed:3e:e7:75:e0:a9:
                    0a:67:09:50:b1:36:c7:44:22:8c:94:3d:91:57:97:
                    83:20:a9:32:8a:f2:1a:21:dd:7e:7d:e8:65:2e:37:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:41:14:2F:C9:9E:8C:0A:0E:FF:15:68:09:F0:9E:F5:24:C3:E3:67
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a940::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:49:3e:10:31:1a:47:6d:cc:21:56:7c:c2:14:69:a1:7a:d6:
         d2:dd:7f:fa:06:81:f8:3f:4a:b1:0a:15:a3:79:05:db:83:d1:
         fe:43:59:2c:73:3e:2e:aa:8d:2a:0a:20:4f:70:66:be:cd:ae:
         e0:4f:0c:35:28:a4:b6:98:ac:e4:81:8d:fb:8f:08:89:b6:ce:
         37:ee:a1:92:8a:fb:21:ef:50:86:d4:92:d7:ab:1c:9c:f4:33:
         92:08:81:0b:2d:89:d8:ad:3b:79:95:3c:03:80:70:3e:f7:5d:
         5a:4c:32:cb:2c:5f:5a:f3:d6:ba:78:df:e6:48:a1:4b:ea:47:
         ce:c7:81:6d:d9:9e:ce:21:b3:f5:0a:46:ec:d6:f0:3d:9f:55:
         f5:14:66:c5:b0:83:03:99:70:a6:84:2a:5b:19:79:db:e0:4e:
         eb:e3:b0:d5:a4:bb:b1:ff:8c:b5:56:d0:11:b1:78:8a:2c:dc:
         06:18:5b:74:ee:ec:e1:89:93:41:7b:74:66:e0:25:62:8c:1d:
         85:55:b3:da:be:18:aa:de:7a:97:e0:a9:97:04:4c:b0:68:a5:
         d9:d3:3e:79:0f:fb:db:c6:af:12:21:2d:64:fe:39:2b:03:3a:
         56:e4:9f:10:0b:6e:36:e3:b0:8b:6b:e1:7c:d2:ee:9e:3e:f6:
         10:c3:f4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:50 2026 by rpki-client