Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145102.roa
File:                     AS145102.roa (raw, json)
Hash identifier:          dn6jUayQ5EGsDPPcz7Z9sQDvzFOIui+ZC9G7VBkgYWk=
Subject key identifier:   90:BA:C3:04:7F:A7:28:00:77:64:81:BD:FF:6A:B6:E8:C9:2A:42:E3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       723CAB042EF9C293AE4A4DA097AEB6398DC5FA08
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145102.roa
Signing time:             Fri 22 May 2026 07:09:15 +0000
ROA not before:           Fri 22 May 2026 07:04:15 +0000
ROA not after:            Fri 21 May 2027 07:09:15 +0000
asID:                     145102
IP address blocks:        240a:a994::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3c:ab:04:2e:f9:c2:93:ae:4a:4d:a0:97:ae:b6:39:8d:c5:fa:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:15 2026 GMT
            Not After : May 21 07:09:15 2027 GMT
        Subject: CN=90BAC3047FA72800776481BDFF6AB6E8C92A42E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:c0:c7:e0:52:01:26:b7:25:bf:29:ac:44:
                    e7:bf:fd:7a:bc:87:93:66:77:17:06:41:94:ab:31:
                    25:a8:d7:42:26:f7:a7:dc:da:12:7b:f8:53:92:76:
                    d5:e3:b2:47:68:de:e4:0d:a6:f6:40:8e:50:28:32:
                    e8:44:26:8b:32:bb:05:9e:3a:6a:10:0e:5c:80:50:
                    6b:22:61:8d:c3:78:ae:f4:2d:86:2a:9c:57:65:6e:
                    72:04:b7:f8:dd:cf:64:3d:b7:1e:75:56:35:d0:c7:
                    0b:70:71:7f:ac:5d:c2:c1:9d:53:ce:1f:71:a2:65:
                    95:22:e8:c2:4f:bf:19:f8:99:03:d3:bc:e7:cd:e1:
                    dc:ce:87:e2:b8:0a:de:bf:72:d6:47:9c:20:aa:e5:
                    33:eb:ab:5b:77:5d:e4:32:0c:31:38:f5:ba:24:c1:
                    23:53:d1:bb:3d:67:0b:3b:69:cb:51:82:da:ea:88:
                    2d:a0:07:d4:74:5e:04:fb:d4:ae:14:2f:b5:8e:d4:
                    3f:7a:b9:47:db:f6:13:20:f5:31:09:26:bb:1f:33:
                    26:12:71:cc:54:59:1a:66:52:ce:f9:7c:0a:07:fe:
                    f6:03:2d:8f:37:d8:41:6d:d2:76:ae:63:c9:aa:ee:
                    7f:78:75:39:ac:f9:63:0e:b3:c9:72:36:37:ab:70:
                    1a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BA:C3:04:7F:A7:28:00:77:64:81:BD:FF:6A:B6:E8:C9:2A:42:E3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145102.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a994::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:73:2f:3a:04:79:e7:a3:55:fc:e2:50:50:55:ec:b3:e9:d5:
         f9:ce:b3:e9:6e:8f:fa:e1:fb:6d:25:39:41:5c:52:ae:a6:6e:
         01:38:c8:a2:75:f2:c9:2e:54:10:9c:a8:7a:3d:ad:7c:3c:42:
         03:2c:98:fe:c5:89:b3:15:4d:02:6d:e2:69:ad:b2:af:e0:9a:
         97:d6:59:20:df:80:46:87:50:d6:06:58:f7:da:50:a8:9f:13:
         90:36:2c:81:cf:e8:76:4f:20:e1:b4:5d:65:12:4f:f1:09:6c:
         3b:33:39:16:0b:56:a0:d3:fd:91:f2:3c:12:ab:bb:27:a4:39:
         91:47:b2:f1:61:a2:83:e1:ca:3c:97:8b:d6:2e:ca:c7:41:98:
         05:eb:2c:56:f9:9b:cc:cd:ef:f5:e5:2a:86:ae:d2:93:c0:db:
         86:da:cd:de:51:59:eb:1f:08:6b:3e:93:a4:6d:62:6b:d2:cf:
         d6:85:63:be:66:4a:48:0d:01:7f:27:53:84:af:a6:95:bd:4a:
         bc:60:2c:b7:4a:f8:70:41:46:07:d3:c8:b3:ef:a0:99:60:18:
         93:6e:7b:59:2d:2f:b5:8b:09:50:fd:c1:a4:44:1b:f8:3d:a7:
         93:bd:63:b2:dd:ce:61:25:b1:4c:5b:dc:8d:b0:22:6d:c8:6a:
         85:8c:44:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:31 2026 by rpki-client