Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145182.roa
File:                     AS145182.roa (raw, json)
Hash identifier:          LUyBB/8dgtux9yBiuKWGcdsqoSTDLYH10lCCnQGszmc=
Subject key identifier:   C4:44:82:E0:35:3A:EA:CE:54:CF:CD:49:F0:EF:76:16:48:EF:1E:0E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       18D427D4B4AC94D48C11F7D28EDC487D40ADE8A6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145182.roa
Signing time:             Fri 22 May 2026 04:26:57 +0000
ROA not before:           Fri 22 May 2026 04:21:57 +0000
ROA not after:            Fri 21 May 2027 04:26:57 +0000
asID:                     145182
IP address blocks:        240a:a9e4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d4:27:d4:b4:ac:94:d4:8c:11:f7:d2:8e:dc:48:7d:40:ad:e8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:57 2026 GMT
            Not After : May 21 04:26:57 2027 GMT
        Subject: CN=C44482E0353AEACE54CFCD49F0EF761648EF1E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:e1:40:3a:42:d5:4e:27:05:82:ab:e0:8b:
                    0d:71:70:1a:90:1a:f9:4b:58:c2:a9:12:53:f5:24:
                    06:2f:fb:b4:65:c4:02:e6:cf:a0:64:2e:6a:f4:f6:
                    9a:db:27:17:45:0d:c4:cc:3c:fc:3b:35:94:a1:51:
                    ac:6b:84:66:14:40:98:33:4e:a4:e8:42:4c:da:d4:
                    ea:cf:c7:6b:e0:f9:01:f2:31:fe:5d:20:95:93:26:
                    a8:6b:3c:15:46:80:18:10:09:3d:26:32:f4:81:28:
                    1a:e5:b4:3d:de:b3:66:5c:a6:3f:95:22:ec:62:de:
                    8c:a2:a0:1c:e6:55:1d:bb:a6:18:25:21:1b:85:81:
                    e4:aa:49:ed:16:41:56:54:ea:3d:09:dc:02:f2:56:
                    6b:b0:6b:b3:71:39:7d:e9:f9:55:83:da:e2:0c:3b:
                    f6:08:1c:28:f1:19:20:f5:55:e5:ba:db:3e:b1:47:
                    0b:51:53:76:fa:09:cb:79:8d:f1:77:59:32:f4:ce:
                    0a:5d:cc:ca:b3:d0:08:12:0b:5f:56:20:e2:e1:8f:
                    5b:75:20:a1:d9:34:fc:57:c8:0d:c8:2c:89:d0:0d:
                    f0:81:d5:6b:4f:8e:f6:e9:c2:6e:21:5b:38:f2:80:
                    9d:40:25:06:63:e9:58:1a:fd:01:f3:8e:93:c7:e1:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:44:82:E0:35:3A:EA:CE:54:CF:CD:49:F0:EF:76:16:48:EF:1E:0E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145182.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:f5:17:fd:71:04:3f:67:3b:fc:fb:4b:69:20:6f:86:54:8e:
         ad:d3:f5:c5:27:75:36:cf:d5:86:47:a5:27:49:e9:dc:d6:bd:
         83:3a:05:9e:bc:ed:13:33:80:12:19:ab:11:30:88:d2:e4:f0:
         ec:5b:3b:35:2d:40:7e:44:28:a8:62:7d:9a:96:3c:56:9d:42:
         67:de:e3:a2:76:ae:fa:3b:03:64:ca:a9:a7:76:f0:d3:d4:d1:
         fa:38:4e:6d:5b:df:92:38:db:66:6a:7a:df:84:4d:3c:43:fb:
         ba:ab:28:c2:30:31:bb:d2:3c:58:2f:87:80:5e:13:b9:14:6d:
         8a:49:07:6e:f6:01:07:a6:d4:75:34:5d:34:71:25:6e:69:24:
         28:79:0e:3b:4f:04:ca:b3:18:ca:c3:a0:da:1d:fb:d4:b2:9c:
         3c:40:53:cb:a9:84:38:ec:a9:b2:8d:28:2c:e1:b0:dc:77:7d:
         70:12:15:a7:f8:b0:76:d8:cd:82:fd:72:df:7e:c3:72:3c:46:
         a9:67:26:b5:f3:3e:3b:f9:12:78:0d:a3:43:26:b5:59:ab:48:
         44:ed:a3:3b:4d:eb:d2:c5:45:80:34:41:01:13:8d:ec:52:2b:
         65:bb:7f:5a:7b:25:fe:71:e5:59:8f:34:2c:27:68:ef:c2:0c:
         5a:a3:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:49 2026 by rpki-client