Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145184.roa
File:                     AS145184.roa (raw, json)
Hash identifier:          2ViD7UA8f0OKq8hgCmftv1BURCYVQDHXtcDd0r6toGw=
Subject key identifier:   FB:A4:16:FF:E5:54:3D:87:55:DD:8C:AA:A2:37:72:8B:52:C9:53:34
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       72869CC5B493086ACFD687E3BC829B4043338DF0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145184.roa
Signing time:             Fri 22 May 2026 06:58:37 +0000
ROA not before:           Fri 22 May 2026 06:53:37 +0000
ROA not after:            Fri 21 May 2027 06:58:37 +0000
asID:                     145184
IP address blocks:        240a:a9e6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:86:9c:c5:b4:93:08:6a:cf:d6:87:e3:bc:82:9b:40:43:33:8d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:37 2026 GMT
            Not After : May 21 06:58:37 2027 GMT
        Subject: CN=FBA416FFE5543D8755DD8CAAA237728B52C95334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:b5:97:8d:13:b3:08:b9:e7:b0:80:10:c7:
                    eb:8d:28:ee:91:28:20:0d:dd:f8:5a:ea:2e:78:20:
                    1e:7b:bd:36:a0:6d:21:f1:be:50:85:2e:86:70:6a:
                    c2:f8:05:8d:6e:32:e3:c9:4f:49:a5:d4:a1:83:af:
                    e2:8f:69:54:00:10:41:bd:7f:9b:c9:06:d3:da:fb:
                    65:b7:8f:85:46:e9:0d:93:2c:00:41:02:09:7b:35:
                    cd:06:a5:a7:f5:3d:da:7c:df:0f:c7:f4:91:04:5f:
                    87:c1:dd:99:94:a0:11:d6:95:01:2a:65:67:0c:e1:
                    83:39:db:1c:49:34:d5:7a:0a:b3:44:84:d1:7e:9e:
                    22:af:fe:41:1a:12:35:16:fa:f5:6e:da:3f:c1:56:
                    11:7c:f5:5d:bf:b5:b0:ea:87:69:2e:1f:af:5c:d7:
                    d2:fd:1a:57:57:42:e6:6a:b7:08:14:ff:54:a1:91:
                    81:a3:29:2b:7b:c1:e0:a4:a9:92:c5:fe:b7:31:20:
                    45:83:1e:1e:b6:f9:2e:65:13:0d:47:9f:fa:f3:5e:
                    f1:c3:67:ef:a2:8a:b3:5e:52:a4:3e:48:71:cf:8e:
                    83:89:85:f2:cb:c5:b9:fd:b4:17:65:d0:3f:60:89:
                    72:4d:ba:88:94:6f:e5:d5:66:a0:d7:b6:d9:91:9c:
                    6e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A4:16:FF:E5:54:3D:87:55:DD:8C:AA:A2:37:72:8B:52:C9:53:34
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145184.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:6a:d0:48:df:83:dc:54:cf:f4:a9:5f:6f:b3:d5:79:32:b9:
         79:5d:eb:00:ca:65:1b:4c:b2:cc:ac:7e:59:ff:f5:6a:74:fa:
         52:0a:19:17:1a:3c:97:5a:a7:2c:4f:2a:b5:54:84:c1:4c:6b:
         96:13:42:72:60:cf:ee:7a:b9:e6:15:4b:f0:5c:85:6d:fb:56:
         fe:17:9b:de:48:60:fa:fe:ab:ce:f6:83:3d:5f:a6:ce:ee:40:
         74:5c:0d:01:9c:1a:62:b6:a7:c7:59:39:3d:23:95:e8:46:e2:
         25:d7:da:1d:ab:1b:5a:e7:77:7c:d2:bf:a8:b3:e7:47:fc:d0:
         73:fa:43:d4:be:0c:e2:02:3b:b4:4d:ba:bc:41:21:a8:fa:d6:
         09:fb:c8:76:b8:cb:6f:1c:62:3b:83:61:45:39:7e:f2:ff:83:
         31:d1:68:56:02:e5:0b:b6:23:24:43:9b:42:f9:9e:01:0f:4a:
         70:5a:de:29:44:f2:95:ab:67:42:16:a0:50:87:a2:9a:e0:46:
         0e:c3:b6:e6:b2:06:05:dc:9d:d7:9f:64:3a:3d:7d:79:a9:2e:
         42:81:24:ba:e5:c1:66:a3:ce:6b:11:a7:16:17:82:0f:3d:8f:
         53:70:3c:4e:19:9c:a8:09:87:d9:2b:68:8e:aa:31:3f:09:35:
         e6:bd:78:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:04 2026 by rpki-client