Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145396.roa
File:                     AS145396.roa (raw, json)
Hash identifier:          VePJ9uG0k44xcX8dTvX3ITACCt7D16oqmXozStzYfno=
Subject key identifier:   38:58:E5:ED:F3:F7:DC:DD:FE:9C:02:5C:2B:C7:9D:68:E1:73:A2:FB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       55A902C8274CB60775FEC129030FCD45070A532E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145396.roa
Signing time:             Fri 22 May 2026 04:26:49 +0000
ROA not before:           Fri 22 May 2026 04:21:49 +0000
ROA not after:            Fri 21 May 2027 04:26:49 +0000
asID:                     145396
IP address blocks:        240a:aaba::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a9:02:c8:27:4c:b6:07:75:fe:c1:29:03:0f:cd:45:07:0a:53:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:49 2026 GMT
            Not After : May 21 04:26:49 2027 GMT
        Subject: CN=3858E5EDF3F7DCDDFE9C025C2BC79D68E173A2FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:46:7b:09:b5:70:80:2e:74:12:fd:8f:96:
                    63:f6:e8:45:ca:19:29:55:02:1d:7d:b7:d3:54:5e:
                    63:89:fa:4e:ed:78:ba:a2:fa:5b:4f:00:25:a7:75:
                    e8:17:49:45:10:5e:e8:2a:16:43:04:2f:d5:77:e7:
                    e9:ca:5c:2b:82:6d:55:96:87:ff:ed:53:f5:98:4a:
                    f3:d4:52:d4:63:3e:cf:ef:cc:7a:a2:de:2a:45:b1:
                    2c:dc:ac:01:44:ff:fd:20:35:85:b6:35:95:66:b1:
                    69:db:d6:eb:5e:5a:b0:ea:b9:2b:a4:ab:d4:a2:91:
                    a1:10:79:d3:dc:cd:3e:2f:c6:62:6c:55:7e:e1:e0:
                    fc:ab:e9:da:f9:14:81:d8:8d:86:40:bc:bd:f2:03:
                    fb:d7:8b:c1:08:96:38:e3:a9:a1:ec:7c:80:90:94:
                    ca:35:41:ad:37:ee:1c:f6:14:cc:e7:68:11:3e:a6:
                    ef:55:38:15:a0:f1:76:06:75:22:2d:3e:71:7e:1d:
                    b4:11:56:b3:d7:b6:50:b7:48:01:ae:95:3e:b0:1c:
                    e4:81:ce:ec:51:f9:07:ff:70:07:c0:f7:04:bc:bd:
                    da:93:61:8f:e8:08:9b:e9:de:46:5a:b1:63:38:21:
                    67:a1:3c:48:5c:00:3d:98:8f:0b:49:18:57:ea:8b:
                    8a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:58:E5:ED:F3:F7:DC:DD:FE:9C:02:5C:2B:C7:9D:68:E1:73:A2:FB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145396.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aaba::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:ee:77:56:60:5d:fd:a4:94:a9:27:b7:b8:dc:93:ea:8a:c6:
         b0:d1:32:71:6d:26:ef:b7:48:cf:e9:70:35:19:0d:99:c0:b9:
         b2:b5:58:ee:14:d9:38:74:8f:83:54:0a:e9:de:c5:63:f7:00:
         d2:88:49:d0:5f:83:6c:13:d1:c5:9b:56:d9:fa:15:57:17:1e:
         9c:3b:a8:a3:0a:b3:93:8b:65:c0:5c:72:a6:6a:cb:6c:53:5a:
         0a:16:8a:a7:6c:80:ac:11:ee:61:42:7f:20:ab:30:5f:ec:34:
         a0:0f:e9:c3:9c:f0:63:21:8b:3c:11:51:69:90:b9:6c:61:23:
         9e:80:00:db:40:fb:47:95:21:a8:d2:f7:0b:dd:97:2a:39:e3:
         ef:25:5a:50:58:11:3c:89:fa:e3:f4:39:21:14:b0:22:8f:17:
         6b:61:c5:b4:da:4f:e5:a1:b5:ff:f5:c8:e8:e0:33:53:fb:5f:
         dc:53:8b:33:5b:5c:f9:6c:ec:ac:d7:c9:4d:39:a4:a8:2b:28:
         7c:5d:f2:7b:aa:93:8e:1e:4c:cb:f0:3b:79:6c:f3:fa:a1:1e:
         5b:96:bf:47:e7:42:74:2c:2f:bb:1c:c2:2b:90:93:7e:65:cf:
         b7:fa:0f:f2:32:58:1a:c8:bf:b3:76:ce:ea:a2:f6:fb:0e:d3:
         6d:d8:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:17 2026 by rpki-client