Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145100.roa
File:                     AS145100.roa (raw, json)
Hash identifier:          jl9lAcgdnV/BNKVSTuoF0bm5Lt8gpgfciJTSPZn780c=
Subject key identifier:   6D:C5:8F:38:AA:A3:50:63:4A:4E:3B:AE:25:EF:C9:52:8A:43:05:22
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       224585D496C45E7AF53D07262359FE0AD9A2B9D7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145100.roa
Signing time:             Tue 26 May 2026 01:13:32 +0000
ROA not before:           Tue 26 May 2026 01:08:32 +0000
ROA not after:            Tue 25 May 2027 01:13:32 +0000
asID:                     145100
IP address blocks:        240a:a992::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:45:85:d4:96:c4:5e:7a:f5:3d:07:26:23:59:fe:0a:d9:a2:b9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:32 2026 GMT
            Not After : May 25 01:13:32 2027 GMT
        Subject: CN=6DC58F38AAA350634A4E3BAE25EFC9528A430522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:98:5e:fa:f6:93:a6:3c:c4:b5:54:4a:7b:f5:
                    64:08:be:22:33:5f:9e:2d:25:2a:97:be:68:a5:91:
                    51:c5:d8:ee:d5:b2:8c:d1:22:a7:c5:43:af:b7:42:
                    16:b7:aa:ec:e6:00:b4:33:14:b1:d2:da:7b:f3:7c:
                    ac:6d:6c:74:6b:7f:ea:26:57:58:5d:9b:f6:2a:40:
                    28:2d:b1:48:09:c6:85:12:3a:ac:c1:31:67:4a:8d:
                    aa:6c:b8:7e:66:f0:0b:ad:7c:5f:e9:ed:2d:94:46:
                    16:93:87:81:aa:5d:ee:56:e3:55:f3:1c:c0:d8:22:
                    88:01:d3:ab:73:35:34:77:9f:c1:4a:c1:a2:7e:90:
                    7a:2b:86:35:8b:5e:f5:50:2f:5a:9f:b7:d0:38:f7:
                    5f:db:d1:8a:2b:04:fc:4a:bd:3e:2a:aa:ab:c2:a6:
                    2b:92:6f:82:73:8f:1d:86:8f:6a:70:2c:9e:e6:38:
                    20:07:ce:03:45:6c:46:19:d1:e8:e3:f9:f9:b4:6b:
                    eb:76:e6:9c:4f:02:8d:ee:97:33:e4:2d:eb:76:22:
                    f0:8a:32:d3:fb:82:f4:04:e0:ae:86:65:b5:d5:5c:
                    4d:50:f4:b2:b4:94:a3:3f:d0:27:ee:41:b4:7e:18:
                    f5:da:1c:96:10:ea:1e:ad:f7:dc:3d:00:ac:12:5a:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C5:8F:38:AA:A3:50:63:4A:4E:3B:AE:25:EF:C9:52:8A:43:05:22
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a992::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:7a:a7:90:87:81:ac:b9:1a:78:66:9b:e7:67:f9:a0:42:fd:
         64:f6:7b:e8:88:1c:f1:bc:c1:64:4f:0c:f7:5c:96:08:bf:34:
         84:38:ec:9e:8f:0e:94:07:27:95:20:b2:59:cd:47:3b:ae:6c:
         61:40:ad:3f:46:ad:6f:10:be:a9:dc:16:ab:09:97:eb:ed:19:
         bb:6d:6c:6b:dc:6d:16:a7:50:5c:4b:0a:3c:55:14:54:2b:6d:
         61:34:2c:08:f8:8e:0e:d7:71:ff:08:cf:8d:3b:35:c5:24:af:
         16:58:10:76:35:42:85:f5:46:e2:0f:98:73:ba:ab:a8:87:fa:
         6d:34:5b:ea:06:91:d4:69:d9:04:30:44:f8:2d:cf:0e:73:72:
         96:61:99:5e:7d:2b:78:5d:e8:f2:6a:07:15:75:09:d9:d5:0a:
         e3:04:4e:fb:59:b6:b9:d2:5e:8a:06:b5:30:db:c7:7f:af:05:
         a3:28:49:44:9e:81:1a:83:e0:f1:66:9c:c0:7c:ff:92:d0:29:
         b9:71:11:19:97:20:ec:ce:b4:78:47:26:9d:db:07:c3:4f:e8:
         39:45:bf:af:db:6e:10:76:f3:cd:fc:02:3f:57:d8:d1:2d:32:
         b9:ac:ae:8e:bc:85:f7:a9:04:8f:73:7a:86:52:bc:92:c3:cc:
         aa:32:24:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:17 2026 by rpki-client