Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145468.roa
File:                     AS145468.roa (raw, json)
Hash identifier:          5xJBE4RRlXAJmlIcBgSBgQlqLrgqczTzAGMJMGyO9IU=
Subject key identifier:   61:0E:C5:0C:98:72:9A:EF:AA:DB:F8:43:54:72:5F:ED:88:11:5E:F8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5E3909A01F42AA00A5E9B7CDD4180555A7468737
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145468.roa
Signing time:             Tue 26 May 2026 06:30:51 +0000
ROA not before:           Tue 26 May 2026 06:25:51 +0000
ROA not after:            Tue 25 May 2027 06:30:51 +0000
asID:                     145468
IP address blocks:        240a:ab02::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:39:09:a0:1f:42:aa:00:a5:e9:b7:cd:d4:18:05:55:a7:46:87:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:51 2026 GMT
            Not After : May 25 06:30:51 2027 GMT
        Subject: CN=610EC50C98729AEFAADBF84354725FED88115EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:09:c5:5d:70:da:29:3d:c0:5c:77:9b:d0:
                    41:38:e0:3c:c5:60:4b:bf:f8:8f:1a:cb:1c:40:65:
                    28:97:fe:90:4b:89:99:82:7e:68:a3:d9:84:f6:0a:
                    df:80:9c:83:04:ad:16:9a:7a:e4:75:cc:8f:52:00:
                    b9:5f:22:4a:44:0f:9c:33:87:ee:20:8e:86:ef:fa:
                    3b:c4:e7:21:f5:5b:ba:ad:ad:91:03:df:0f:46:17:
                    82:75:5e:bc:42:84:d3:b7:83:7b:ed:29:93:ec:30:
                    15:67:80:4d:a8:b7:38:ef:e6:f9:c2:48:1e:a8:64:
                    c1:eb:ca:7b:fb:85:fb:04:13:36:11:93:cf:92:a3:
                    c4:d9:25:30:5d:31:33:45:79:9a:33:0b:8c:3b:73:
                    55:4a:bd:2c:72:0d:b7:c7:a1:be:e0:59:17:e5:46:
                    03:83:42:84:e6:b3:d5:df:3c:fc:12:4e:60:98:d6:
                    cf:0e:eb:57:03:c9:4f:59:73:fb:1c:29:64:37:2e:
                    48:1a:2e:41:23:cd:4e:9c:42:7f:66:3f:df:bf:2e:
                    7c:bc:1d:76:85:8c:d6:bb:39:99:9d:1e:87:d3:12:
                    e9:72:af:8f:c2:56:b3:79:00:93:26:06:6c:ad:10:
                    98:34:4c:da:88:f2:38:da:76:5d:8f:f7:98:a5:32:
                    4a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0E:C5:0C:98:72:9A:EF:AA:DB:F8:43:54:72:5F:ED:88:11:5E:F8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab02::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:d3:52:2f:6f:e0:70:bb:9d:84:13:79:2c:ad:a6:7a:50:76:
         66:4d:d2:1a:21:5d:c8:f1:6f:26:1f:58:aa:cb:20:87:1b:85:
         96:32:d4:1a:61:59:44:c1:2a:a6:33:0b:a1:89:be:c6:ac:46:
         06:c1:ec:d9:fc:ab:7e:37:fc:bc:e6:be:87:84:c0:d5:5b:e1:
         49:ee:88:7e:8c:69:a2:3d:29:50:27:e5:f1:f1:86:e7:48:7f:
         1a:59:b3:2a:07:f2:05:6b:0c:27:75:d0:f9:f6:1e:57:d7:9e:
         0c:a8:53:63:1b:89:7b:45:5b:5b:7e:02:e2:0e:1d:3a:9e:cd:
         05:b4:8b:bb:c6:e6:1a:d2:06:c7:82:92:c7:fc:d1:e9:10:6f:
         a2:6d:0b:62:61:19:c8:1c:d7:fc:02:8f:c3:cc:42:53:1b:84:
         9a:d7:09:46:a6:3f:9a:c6:81:78:6d:24:8c:7d:d9:f9:6f:62:
         58:89:07:c4:67:f1:27:41:b9:73:46:20:cb:cc:4b:b4:bf:b0:
         cb:b2:ec:05:6a:3d:fe:7d:04:7d:0f:83:c5:8e:27:8a:23:c8:
         e9:b6:26:b5:93:26:2c:cb:64:90:87:f8:3b:a2:23:b9:65:37:
         2d:48:c9:11:d5:b7:31:df:30:fe:f5:bf:53:1f:b4:3e:4f:52:
         6e:f3:18:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:11 2026 by rpki-client