Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145262.roa
File:                     AS145262.roa (raw, json)
Hash identifier:          t3J9ANPf5NMbvVdgueJZpS79YLklXs5A0a6uzTqDVOQ=
Subject key identifier:   F9:0F:A4:B6:3F:03:C0:26:0E:A3:73:A4:C1:19:B4:50:2C:95:68:3E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       030AB834DDCB7EF71FA4C5D6CB55581EE014D8C1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145262.roa
Signing time:             Fri 22 May 2026 01:50:42 +0000
ROA not before:           Fri 22 May 2026 01:45:42 +0000
ROA not after:            Fri 21 May 2027 01:50:42 +0000
asID:                     145262
IP address blocks:        240a:aa34::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0a:b8:34:dd:cb:7e:f7:1f:a4:c5:d6:cb:55:58:1e:e0:14:d8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:42 2026 GMT
            Not After : May 21 01:50:42 2027 GMT
        Subject: CN=F90FA4B63F03C0260EA373A4C119B4502C95683E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:67:c1:7c:3a:7b:44:62:ae:d7:59:b4:a0:74:
                    2f:1b:b9:ef:a6:d3:2b:f1:a7:b9:62:07:e5:40:36:
                    33:cd:ea:f7:59:4b:df:b8:37:93:80:4a:89:85:63:
                    ad:25:ef:85:d8:b9:21:88:0a:81:35:54:f4:9e:1b:
                    93:d1:b7:51:1c:1a:f9:43:a5:0f:2b:a6:fc:b4:32:
                    19:49:0f:64:99:09:21:33:66:90:b0:6b:4f:c5:45:
                    fd:7b:83:24:cf:16:76:29:b9:04:89:58:2c:d7:d1:
                    2f:a2:85:bc:ed:73:57:91:eb:c2:e6:d1:87:a1:22:
                    27:17:9f:1a:f5:95:f5:df:f2:69:47:27:11:f9:43:
                    ad:2a:06:89:83:ca:23:c0:5d:44:1f:d0:5b:76:70:
                    95:f9:f1:c4:6c:29:94:cc:6b:5b:e1:cd:cf:30:06:
                    90:53:cf:f1:ce:19:d4:7f:63:a0:91:c8:8e:6f:3c:
                    73:c0:2d:8c:7e:7c:0f:6b:23:50:b6:33:d4:11:7e:
                    00:32:f9:d1:76:13:9b:d4:5c:c9:39:66:39:7c:fe:
                    a4:a5:98:47:d6:79:59:cc:a2:09:f1:e7:ff:d0:ff:
                    6f:10:ed:b7:88:f4:92:71:6a:c2:3d:48:4b:b0:f5:
                    a3:e5:e4:5a:b7:43:39:52:85:39:13:4f:79:e6:f5:
                    91:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0F:A4:B6:3F:03:C0:26:0E:A3:73:A4:C1:19:B4:50:2C:95:68:3E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145262.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa34::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:2b:a9:e5:aa:5e:04:fd:65:f3:98:08:73:9e:81:d7:e4:5c:
         2a:b3:2d:7e:77:01:8e:95:41:67:1a:64:dc:ab:cd:7f:67:df:
         4b:21:c5:a0:9f:ee:88:68:b0:ed:8a:73:07:ef:d0:25:a9:8a:
         55:f5:75:3c:f1:db:eb:cc:39:0d:84:ef:37:d8:45:0f:a9:b1:
         81:75:ff:23:94:85:45:9c:c5:45:2e:ff:bc:02:5f:a4:45:a4:
         f4:fe:db:45:b2:d9:6d:a6:70:d3:ec:99:fd:cd:02:d5:2c:7a:
         28:bf:4b:37:01:80:f4:a1:0e:56:84:e7:08:9d:af:03:6d:7c:
         38:47:3f:d1:37:0b:00:f4:b2:de:02:73:5d:42:8f:e8:8d:55:
         73:93:05:d1:7f:2f:9e:64:3c:f0:e5:17:c4:fc:49:7c:5a:c0:
         6e:d6:be:fe:74:ed:a2:6e:52:6b:86:bf:d4:fe:ab:f6:a8:82:
         d8:2a:b4:65:1d:af:db:4e:15:76:ca:22:47:45:f2:a1:b9:50:
         fb:5e:d9:dc:75:85:23:8d:1c:db:34:3c:14:96:c9:6a:b5:7c:
         a8:3c:91:1b:e1:6c:96:4a:f7:8e:92:f3:de:e0:fe:a3:a2:58:
         86:ce:5a:9e:73:94:f6:93:9d:08:ab:27:20:e2:88:29:14:70:
         0d:59:75:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:53 2026 by rpki-client