Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145056.roa
File:                     AS145056.roa (raw, json)
Hash identifier:          ugCV602CtztJRx3CbHTskB5hIb7qP52xI+kRy8MujKs=
Subject key identifier:   DC:C1:DD:57:40:D2:19:06:ED:CB:73:A6:EC:3E:7B:D0:83:78:DB:B9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4A901DD8C08E7B83E5B5477999529A2F334FCA59
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145056.roa
Signing time:             Fri 22 May 2026 02:47:41 +0000
ROA not before:           Fri 22 May 2026 02:42:41 +0000
ROA not after:            Fri 21 May 2027 02:47:41 +0000
asID:                     145056
IP address blocks:        240a:a966::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:90:1d:d8:c0:8e:7b:83:e5:b5:47:79:99:52:9a:2f:33:4f:ca:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:41 2026 GMT
            Not After : May 21 02:47:41 2027 GMT
        Subject: CN=DCC1DD5740D21906EDCB73A6EC3E7BD08378DBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:32:ed:95:b5:3a:77:71:e9:79:38:a3:90:
                    a3:f7:58:72:89:72:1c:f6:62:76:67:98:98:b5:d7:
                    46:46:61:2c:87:f6:02:25:f3:12:cb:bd:bf:53:21:
                    68:5b:d3:41:bc:21:0d:06:99:63:6e:7e:3e:6c:d3:
                    da:17:5e:cb:f7:d7:d0:7b:ad:24:5e:67:70:78:ac:
                    26:36:40:d4:3f:51:1c:26:2d:3b:d2:f9:00:dc:a6:
                    86:3d:c1:8d:ea:f8:14:b4:72:d8:11:b2:a3:4d:4c:
                    12:dd:3a:ea:03:21:d7:e1:26:07:11:57:3b:5f:73:
                    68:4b:79:3d:73:00:d6:37:97:e8:e8:aa:39:21:dc:
                    54:8b:aa:a8:ae:76:7f:50:28:1b:c1:6f:77:6a:75:
                    01:06:07:0b:f0:da:c9:88:68:52:31:c1:3d:a4:95:
                    18:20:7d:fe:67:fb:44:72:de:d4:5a:b6:28:2c:30:
                    c2:e8:c4:7c:e3:f9:4d:32:6a:1f:0d:ba:d0:de:e9:
                    77:51:c1:be:b3:26:f5:d5:b7:d7:ae:04:2a:1d:c1:
                    9b:31:49:62:44:f9:7e:2f:3d:e9:f5:1f:2e:54:46:
                    11:26:c6:78:4c:fa:5d:ae:66:f4:4c:0a:6f:7d:9a:
                    00:d7:d7:01:ff:6e:3c:ba:c5:6b:c4:26:6a:32:bc:
                    bb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C1:DD:57:40:D2:19:06:ED:CB:73:A6:EC:3E:7B:D0:83:78:DB:B9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145056.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a966::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:f2:93:1c:ab:39:c6:71:06:6f:7d:e0:df:ef:90:61:82:c7:
         d3:57:4f:75:2a:0f:29:b3:31:f5:2c:45:1f:f5:8a:10:a3:b5:
         e0:49:a2:6a:f0:99:cd:33:69:3a:80:03:bf:72:e8:ac:7a:de:
         1f:4c:7f:10:b4:8c:84:a3:a0:7c:23:c7:90:cd:75:d9:2a:49:
         56:d4:8b:b8:e6:0d:ab:b8:6f:d9:76:03:59:94:d2:a5:ce:9e:
         65:51:91:83:c1:1f:6f:6f:f6:f6:06:dc:f8:a5:c2:28:1e:03:
         d3:1b:f7:6f:4c:3e:54:0b:e8:6b:04:d0:de:b6:f7:38:7c:fc:
         f3:7b:8f:b4:6b:30:d0:7c:ff:b8:cd:12:6b:73:c2:ef:75:be:
         76:22:a1:e6:a3:cb:f4:01:18:09:48:74:b0:0b:4f:d9:e6:ea:
         d6:3a:cf:91:d6:d4:cf:75:c3:5f:4d:45:e9:e5:c8:bd:b2:94:
         f5:e6:df:93:96:72:c0:08:53:a5:87:b2:85:f9:a2:d7:f6:47:
         ff:ac:ab:43:b8:4b:4c:d0:02:23:8b:b3:0f:2d:f8:a6:1d:62:
         7d:9c:e7:57:cd:c1:7b:b6:a9:8a:f4:46:e9:7d:de:3b:c8:f4:
         38:dc:87:05:e6:c7:dc:1a:4e:bb:fc:4a:4b:fd:04:ef:b7:96:
         b0:01:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:18 2026 by rpki-client