Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145031.roa
File:                     AS145031.roa (raw, json)
Hash identifier:          y3XygG/49c6xE5jv84GOHS2HoTlhREcBUgBMN3I3xw8=
Subject key identifier:   A4:37:68:64:49:A0:42:53:FF:C0:6A:2A:40:17:B5:F4:A8:A7:F9:D1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       044D9D2E38C8DC0782FCE585DC423F4F03B41292
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145031.roa
Signing time:             Fri 22 May 2026 07:40:46 +0000
ROA not before:           Fri 22 May 2026 07:35:46 +0000
ROA not after:            Fri 21 May 2027 07:40:46 +0000
asID:                     145031
IP address blocks:        240a:a94d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4d:9d:2e:38:c8:dc:07:82:fc:e5:85:dc:42:3f:4f:03:b4:12:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:46 2026 GMT
            Not After : May 21 07:40:46 2027 GMT
        Subject: CN=A437686449A04253FFC06A2A4017B5F4A8A7F9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:74:01:62:64:60:82:40:4c:41:48:db:d1:
                    b7:27:6e:4a:e8:47:72:89:e6:2e:71:47:75:24:59:
                    02:2b:10:82:ec:33:93:be:27:16:d0:8a:79:b0:30:
                    34:93:95:3d:10:a8:cd:b5:6d:d5:97:e4:f6:eb:49:
                    dd:0d:25:b3:44:c7:32:a0:fa:74:7a:0e:13:47:79:
                    db:ce:9d:83:d9:58:ca:d8:ee:44:ce:8f:cb:e4:11:
                    57:a7:6a:38:04:35:c1:ff:95:77:8a:7a:d3:26:1b:
                    d3:b0:b5:fb:29:34:02:d8:0b:6f:c4:1a:a3:22:9b:
                    2a:57:9a:d9:aa:09:de:24:48:5c:00:45:b3:3e:86:
                    dd:55:c4:e8:a7:2c:c5:62:a3:a4:13:4f:01:8a:ce:
                    4e:7e:ca:2b:93:3f:06:b6:08:7e:0c:8f:10:1b:4c:
                    1d:a9:de:52:e2:53:90:d3:93:90:42:b2:57:32:d3:
                    d6:c2:76:c8:00:b5:1c:80:22:30:c7:69:44:ef:68:
                    71:71:1e:62:47:f3:55:b5:0c:dc:80:52:00:d4:1c:
                    5d:21:db:2b:3d:40:ef:67:35:99:37:6b:3c:9c:d5:
                    ac:6b:38:c9:16:79:0f:c0:57:11:6a:b3:77:1b:8e:
                    9e:ef:d1:b5:66:94:52:2d:f3:1c:37:15:18:a0:e2:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:37:68:64:49:A0:42:53:FF:C0:6A:2A:40:17:B5:F4:A8:A7:F9:D1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a94d::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:9a:fb:ad:1a:95:28:4a:46:b2:fa:f8:b0:8f:3e:75:30:cc:
         e4:54:9b:f2:99:b3:23:4b:82:a8:3f:e3:3c:a7:7a:11:8b:69:
         fa:94:73:b4:48:4f:a5:a7:f6:30:10:e9:8e:f1:54:f6:b6:3c:
         cd:ac:e1:f1:23:ef:d6:ee:9d:c5:d3:cf:98:13:ee:20:e4:09:
         e8:a3:d0:ea:65:4e:1b:2d:22:04:d5:fb:61:df:25:eb:6f:59:
         8f:96:11:eb:c7:1e:d7:00:c8:16:5f:7b:ce:e2:67:db:9b:35:
         1f:1a:99:09:9d:87:2f:f3:55:35:eb:04:a3:3b:59:39:76:1e:
         56:9b:22:cb:37:cb:d4:95:ec:e8:e5:20:73:e8:0e:df:dc:80:
         4f:60:fc:90:6f:fd:ed:dd:2c:f7:14:e5:e2:cd:18:4f:0d:b3:
         2d:a2:fe:65:97:da:47:f8:e7:8d:4d:98:d4:24:e2:64:0a:43:
         29:77:1b:e5:26:b2:74:eb:10:77:97:58:36:5f:0e:ae:48:91:
         d9:db:66:66:24:b6:a4:ba:93:38:c9:1a:9d:81:12:6b:bf:ad:
         b8:3a:96:db:3e:4a:aa:19:5e:a7:08:01:f5:e0:54:ee:db:55:
         d7:f9:54:b4:35:b6:0b:28:c9:48:e1:d7:a9:3e:d5:97:c5:f3:
         82:4d:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:16 2026 by rpki-client