Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145060.roa
File:                     AS145060.roa (raw, json)
Hash identifier:          m8OLOQCeJxrU/bD8y/oGxCV0H3+Mxqp3vZvCd/UnsGs=
Subject key identifier:   2C:7D:63:13:74:F0:B7:B3:1A:63:48:52:26:19:ED:74:49:87:09:DE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       078A1A15771CDF5738A07CBA16B84DE5FEDD0718
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145060.roa
Signing time:             Mon 25 May 2026 01:38:17 +0000
ROA not before:           Mon 25 May 2026 01:33:17 +0000
ROA not after:            Mon 24 May 2027 01:38:17 +0000
asID:                     145060
IP address blocks:        240a:a96a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8a:1a:15:77:1c:df:57:38:a0:7c:ba:16:b8:4d:e5:fe:dd:07:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:17 2026 GMT
            Not After : May 24 01:38:17 2027 GMT
        Subject: CN=2C7D631374F0B7B31A6348522619ED74498709DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:68:8e:8f:04:40:ed:8a:47:e2:82:21:c6:
                    23:b7:d9:f7:d1:e4:43:56:cf:19:04:fd:41:26:42:
                    2c:39:18:c2:4b:c8:d8:df:e5:7c:6b:9b:de:ac:40:
                    e7:65:ab:28:f3:74:f2:22:82:ad:6b:18:05:91:4a:
                    b0:08:9f:2b:2a:eb:56:7a:d4:e9:de:b6:e9:75:ad:
                    6e:27:c9:a8:62:99:0c:06:a6:43:5c:44:a4:5f:7d:
                    7e:38:b4:f5:cb:46:b6:ea:e7:fb:93:03:8e:11:87:
                    e8:2b:ed:c5:90:7e:48:b5:57:45:fa:43:1e:72:fb:
                    70:bb:58:18:45:a0:7d:4f:4d:c8:80:e3:4c:6e:5b:
                    c0:0b:c5:1a:88:8a:11:81:3b:9a:cc:13:f8:1b:23:
                    c3:b2:22:16:f5:9e:54:b8:6e:9e:79:99:1e:f4:66:
                    19:9b:47:2f:64:22:93:af:8a:f4:e1:7d:67:56:ac:
                    03:fe:9f:f6:7d:46:d7:3b:dd:1b:86:eb:f2:0c:9b:
                    3d:15:da:6a:38:66:41:e5:93:d2:90:4c:bd:db:98:
                    36:4c:b6:e6:15:15:e8:d3:95:c0:4f:18:59:3f:76:
                    2c:bb:9a:51:e4:b4:d4:42:8b:c4:07:a2:02:7e:75:
                    0a:ab:bf:c8:ad:bd:78:e6:7d:75:cd:a0:34:f2:ac:
                    66:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7D:63:13:74:F0:B7:B3:1A:63:48:52:26:19:ED:74:49:87:09:DE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145060.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a96a::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:f7:5f:07:ad:92:0e:48:6a:79:2e:34:39:de:e5:ce:4a:65:
         75:b0:8c:b9:64:59:0a:44:4a:b4:e3:0d:1a:ed:ae:42:98:3d:
         c3:81:19:4d:a2:80:6a:95:78:63:8f:c1:93:88:59:c2:4d:63:
         a4:a3:75:42:87:3a:a1:ba:da:bc:08:6a:00:6f:a3:4c:27:74:
         16:6f:1e:d2:5b:41:0a:b0:d8:53:2e:a5:8c:c3:78:c5:56:24:
         0d:d9:a1:15:f3:3f:02:fd:7c:ab:50:80:93:22:7e:50:58:bb:
         a1:5f:8d:3f:fb:07:c1:03:3c:82:8c:4e:fd:b1:5d:89:c0:9e:
         dc:ea:12:b0:a0:c6:33:e8:98:67:f0:ed:14:39:b3:e8:68:1c:
         da:9f:c3:6f:e8:ab:0c:86:0c:17:51:77:be:d8:8c:99:c4:b6:
         72:95:81:b5:d6:c0:23:23:a3:bd:36:8c:47:78:84:23:e2:64:
         b7:bf:62:a7:29:63:84:49:43:8b:61:03:35:ab:40:f2:49:4a:
         5d:2e:1a:a9:25:b4:f9:65:85:d3:f7:b7:10:25:f6:36:06:82:
         4a:2c:97:a4:e7:09:1e:c3:89:51:07:33:45:a4:eb:31:6a:4e:
         23:47:ea:dc:62:62:49:93:df:d6:e2:c3:8e:31:ca:9f:62:6b:
         de:71:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:04 2026 by rpki-client