Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145374.roa
File:                     AS145374.roa (raw, json)
Hash identifier:          GopnLiNdpSJ9gfQu2gWa8PIMtpuMgTO4nVJ612JDveE=
Subject key identifier:   A5:E1:4F:16:CE:CC:58:34:B0:76:DD:F4:5C:07:82:F6:01:9D:1C:C8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1EB460690FE099637DAB5B5B3A6830936B7A334C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145374.roa
Signing time:             Mon 25 May 2026 01:19:59 +0000
ROA not before:           Mon 25 May 2026 01:14:59 +0000
ROA not after:            Mon 24 May 2027 01:19:59 +0000
asID:                     145374
IP address blocks:        240a:aaa4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b4:60:69:0f:e0:99:63:7d:ab:5b:5b:3a:68:30:93:6b:7a:33:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:14:59 2026 GMT
            Not After : May 24 01:19:59 2027 GMT
        Subject: CN=A5E14F16CECC5834B076DDF45C0782F6019D1CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:28:b8:48:03:05:f7:10:f5:5c:7f:bc:37:
                    72:2e:f7:2f:bf:a3:b3:12:24:c2:1a:53:f4:ed:64:
                    22:24:98:67:9a:14:56:56:c6:8f:88:57:d1:cc:e9:
                    de:18:4a:54:a8:db:cc:70:8e:01:43:e1:d0:e6:2c:
                    40:01:01:60:59:fb:fc:35:d7:11:a2:87:d2:77:cc:
                    25:00:ab:07:b5:89:2f:61:c5:5e:e0:e1:68:1b:29:
                    c5:65:63:07:9e:f5:25:1c:8d:60:0b:c2:4f:1a:1a:
                    f3:60:f3:46:86:a2:65:c6:df:77:3d:ed:f3:7d:46:
                    10:cf:c0:b5:59:be:b5:8a:a0:be:15:f5:00:d5:c3:
                    96:fa:e5:0f:89:d1:8f:d0:56:cd:4a:51:cc:b8:f3:
                    a3:df:c1:96:b4:52:cb:f6:ad:a6:86:ed:5f:00:5a:
                    23:5b:32:f4:d8:55:2c:72:c2:d4:44:c8:d4:7d:c8:
                    55:10:7c:3c:dc:23:c3:a7:cb:74:34:b8:46:20:8d:
                    e2:e7:ec:8c:35:d8:c4:02:c1:47:15:2f:5b:95:c8:
                    60:ee:55:21:52:cf:64:17:27:33:f3:2b:c5:21:a1:
                    1d:a7:72:86:52:97:f0:7f:50:78:42:40:0d:1f:08:
                    c2:3c:fc:0e:35:73:67:9f:0c:f7:32:b5:51:b6:85:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E1:4F:16:CE:CC:58:34:B0:76:DD:F4:5C:07:82:F6:01:9D:1C:C8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145374.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aaa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:1b:8e:2b:1b:1b:70:29:48:be:f9:df:eb:34:4b:35:02:45:
         1f:85:fc:bd:fc:97:68:c6:83:dc:6e:09:4f:f5:2e:53:48:13:
         f4:e3:6d:54:7b:44:3e:38:1a:53:10:d3:37:c8:7c:2c:87:67:
         1a:50:ad:83:3b:26:fa:ab:6b:0f:2c:9c:94:71:45:0b:38:aa:
         6e:71:2c:2a:1c:99:44:f1:8a:e8:43:52:00:b2:13:a8:6b:e2:
         b1:7c:63:5d:ad:fb:ed:ac:2f:f2:a2:c2:a8:b9:35:9c:86:b7:
         46:61:99:a2:7c:87:d9:a3:54:16:18:52:d7:9b:57:5e:e3:f9:
         3a:f4:7d:c2:de:a2:d2:e7:f4:ac:a6:ac:ea:da:bc:f7:eb:c5:
         ac:1c:24:c7:4b:db:95:d3:54:2d:6f:c0:01:12:0a:7e:9b:46:
         c6:64:12:c4:27:59:e7:48:33:a4:a0:6e:48:63:9c:75:f3:a4:
         fd:8f:f5:da:1d:d3:3f:a5:70:46:86:bf:82:cb:96:c9:e1:51:
         05:04:be:5c:48:e6:89:7d:08:b1:a1:ea:9d:6d:ee:34:10:34:
         15:55:d1:d9:85:a6:be:b9:a2:07:76:4f:ab:8e:d2:a4:dd:cf:
         8c:fd:85:fa:0e:8d:39:a0:e1:1c:52:b3:34:d5:c6:29:b3:3f:
         60:0b:9e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:29 2026 by rpki-client