Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145455.roa
File:                     AS145455.roa (raw, json)
Hash identifier:          oIu5xvh9obcajxFWDLVbPjzfLfDPUg30oy0ahQf6Zag=
Subject key identifier:   8D:49:BA:DF:51:E1:06:74:BD:5F:D1:AF:2D:96:F2:6A:DC:80:EB:62
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0B5D2CD05BFF911C56B3E2B44CF9229C64B91189
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145455.roa
Signing time:             Mon 25 May 2026 01:51:34 +0000
ROA not before:           Mon 25 May 2026 01:46:34 +0000
ROA not after:            Mon 24 May 2027 01:51:34 +0000
asID:                     145455
IP address blocks:        240a:aaf5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5d:2c:d0:5b:ff:91:1c:56:b3:e2:b4:4c:f9:22:9c:64:b9:11:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:34 2026 GMT
            Not After : May 24 01:51:34 2027 GMT
        Subject: CN=8D49BADF51E10674BD5FD1AF2D96F26ADC80EB62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:5b:b5:1d:52:7d:a4:44:46:a2:4a:fc:73:
                    2f:f5:e1:10:ca:e2:3f:b2:c1:90:46:7c:c1:77:30:
                    4f:2c:83:3c:84:c3:b0:ac:04:70:cd:69:a4:0f:14:
                    b9:48:34:6c:f4:7f:d3:94:01:ad:c3:94:d0:ac:78:
                    38:14:a0:5a:ca:7a:9b:03:7d:26:8a:f7:7f:31:4d:
                    9c:4e:1e:a8:2a:8d:9b:27:4a:df:aa:5a:59:fb:08:
                    fd:96:7e:96:0f:09:e0:d1:b5:10:c0:91:e6:2a:af:
                    d1:7d:79:de:9b:8f:10:a4:7e:3d:aa:c6:14:10:f9:
                    4f:06:b1:3f:36:73:e2:00:41:7c:b5:ad:72:ba:4a:
                    ef:55:65:6d:d7:f9:10:ad:c3:b9:6b:bc:8a:d5:8b:
                    d6:a9:09:5b:e1:03:f5:e9:97:03:10:87:78:6e:e0:
                    da:cf:74:9b:3c:a9:a3:1c:54:50:f0:23:7c:6c:2d:
                    d6:af:57:b3:e8:48:29:a9:ea:1e:e6:6d:2a:b2:7d:
                    42:15:7b:64:bb:15:d7:62:40:c5:e2:15:e9:48:27:
                    41:57:4a:c9:78:93:3b:8b:f8:75:7a:c1:d9:a7:f8:
                    7a:da:ce:86:48:42:75:f8:74:df:0a:a4:e1:1f:a3:
                    6e:24:36:b7:98:ed:58:f4:89:0d:95:9d:1c:e6:24:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:49:BA:DF:51:E1:06:74:BD:5F:D1:AF:2D:96:F2:6A:DC:80:EB:62
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145455.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aaf5::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:49:34:4c:ea:dd:fd:d9:07:74:43:de:bb:2e:a0:69:59:88:
         8c:51:a6:0c:76:b7:ba:6b:d2:af:56:38:35:86:b1:4d:b6:92:
         fb:a6:e9:de:be:fe:9e:05:ea:30:18:ad:cd:92:09:da:b9:22:
         ce:7f:16:66:7e:80:59:85:58:1e:ad:44:a1:83:88:94:42:8a:
         3b:9c:14:7c:82:59:6b:c0:38:83:bb:1e:13:d0:d5:a9:df:92:
         f0:47:44:cf:7c:53:85:8d:ed:38:1d:bb:f4:26:65:20:e4:6a:
         a7:aa:06:d4:2e:7b:fa:01:e0:cd:4b:f5:0d:c5:a5:9f:f6:91:
         e2:4e:56:dc:f9:a2:a5:27:7a:f7:33:91:6c:83:71:85:95:8b:
         de:c9:e0:46:f2:c5:0e:97:78:e5:7d:d2:3d:b5:d0:e0:c4:57:
         e5:aa:86:6e:43:72:c9:a3:46:9b:fb:5f:78:ac:7c:fa:4c:11:
         a0:7a:ec:36:53:2f:8a:fb:c9:42:94:de:ec:a2:5a:5f:1d:c4:
         88:f6:39:bb:e0:9b:49:20:94:08:b6:42:f5:15:ec:3f:9b:76:
         69:d2:06:09:f1:4e:9b:85:15:26:1b:ac:59:3d:ba:3b:4a:bd:
         96:d7:fd:4d:a7:5d:da:0d:ae:b0:99:31:c1:3f:77:91:86:88:
         31:68:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:58 2026 by rpki-client