Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145214.roa
File:                     AS145214.roa (raw, json)
Hash identifier:          ZAGALKiPO6tR39ASnBcWqilaMNzQhmTe/uUbs2ZthmM=
Subject key identifier:   FC:E6:81:2E:6B:8F:20:1E:F6:5B:65:72:CB:59:3A:68:1D:05:71:3B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3E58CD9AABCB0F915305A678F510771A838820E1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145214.roa
Signing time:             Mon 25 May 2026 01:51:05 +0000
ROA not before:           Mon 25 May 2026 01:46:05 +0000
ROA not after:            Mon 24 May 2027 01:51:05 +0000
asID:                     145214
IP address blocks:        240a:aa04::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:58:cd:9a:ab:cb:0f:91:53:05:a6:78:f5:10:77:1a:83:88:20:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:05 2026 GMT
            Not After : May 24 01:51:05 2027 GMT
        Subject: CN=FCE6812E6B8F201EF65B6572CB593A681D05713B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2b:73:8b:d9:75:8d:75:a7:fa:b6:8e:d3:4c:
                    ba:3b:22:7c:75:25:9c:a7:75:d6:c9:14:4c:dc:e4:
                    f4:69:78:a4:97:8f:cc:75:67:93:f1:9f:d4:a7:b8:
                    87:d7:eb:ce:75:cc:e5:91:43:ae:c3:88:09:80:93:
                    a5:0b:d2:4b:0e:25:df:ab:68:34:58:af:96:58:08:
                    d4:6b:ea:92:bc:bd:0a:a3:a3:40:8b:3a:53:68:cd:
                    a0:a8:34:d3:53:9f:36:56:a0:98:32:5b:52:e4:af:
                    9a:45:a3:c7:c7:af:ee:fb:f0:b6:3f:2f:42:9a:9b:
                    89:26:c2:80:03:8d:3f:9b:a4:66:48:88:0e:b0:af:
                    24:f5:90:76:98:2a:98:75:62:eb:c9:53:c7:32:e0:
                    ca:2a:aa:0c:fc:e4:eb:5c:f3:92:ec:b9:1f:ee:92:
                    65:35:dc:1e:0c:37:73:06:f7:68:a0:b9:58:76:92:
                    e6:8d:bc:f9:d5:0c:d6:6e:a2:0e:8e:aa:fa:7c:44:
                    ed:0e:a7:44:2a:d9:b2:75:bb:98:4f:be:1a:a7:8c:
                    df:d1:a5:9e:65:3a:98:94:97:79:9e:de:f3:a2:7d:
                    30:eb:c6:4a:a9:bb:81:95:45:88:1e:50:64:55:6f:
                    9d:2a:bc:fc:b3:92:2b:f8:26:e0:6a:f0:70:c0:ed:
                    46:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E6:81:2E:6B:8F:20:1E:F6:5B:65:72:CB:59:3A:68:1D:05:71:3B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145214.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa04::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:80:c3:7e:3c:ef:fd:23:3d:f9:91:c4:69:2a:33:24:23:9e:
         f9:e8:18:dc:0a:43:ca:75:e4:71:df:59:59:b8:f5:26:11:10:
         56:18:1a:40:83:ad:5f:75:fd:f7:cc:1a:12:59:71:db:25:ed:
         c2:b0:1c:8a:58:88:f8:cd:83:dd:e5:70:51:84:12:1a:83:c7:
         35:47:6f:e9:8f:c2:fa:ac:f5:2d:3b:87:63:67:aa:99:a8:dc:
         53:30:4e:f7:f8:14:20:06:fa:68:e5:fd:92:77:ca:7a:0c:a3:
         c9:11:21:cf:1f:4b:6c:d0:45:13:e5:f1:f0:02:7c:ba:2a:3c:
         67:00:9e:79:22:de:ee:18:ac:5f:29:fb:45:ea:39:a7:90:1b:
         8b:a7:63:4e:52:ef:f2:02:86:49:a9:71:d0:f0:c8:d3:0f:71:
         2e:09:35:14:5d:42:15:41:a9:fa:5f:03:5f:ab:d8:bd:c8:d9:
         74:7d:57:6e:05:df:9a:6b:2c:6d:dc:67:7f:b3:d7:17:90:9e:
         f4:c8:70:e9:99:99:3a:5a:8a:4a:10:b7:a7:7b:05:6d:d5:f6:
         12:66:d8:22:d4:fc:94:2e:d9:f8:9f:ad:b1:33:8b:11:2e:82:
         4b:6e:0f:d1:3d:c8:d1:4c:9e:21:5f:e4:b5:51:70:f9:fd:2d:
         84:f8:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:31 2026 by rpki-client