Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145504.roa
File:                     AS145504.roa (raw, json)
Hash identifier:          hR4wrgqySqTG9OMe3H7jmFzwOsPLCRRiPfZSDn7WSpM=
Subject key identifier:   1A:C2:27:D1:BC:22:6D:28:2E:1F:8F:CC:F2:BD:43:18:11:6B:F3:23
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       46A53D44C5ECC64E22150225A1A3C096F55FC7A5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145504.roa
Signing time:             Tue 26 May 2026 03:16:54 +0000
ROA not before:           Tue 26 May 2026 03:11:54 +0000
ROA not after:            Tue 25 May 2027 03:16:54 +0000
asID:                     145504
IP address blocks:        240a:ab26::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a5:3d:44:c5:ec:c6:4e:22:15:02:25:a1:a3:c0:96:f5:5f:c7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:54 2026 GMT
            Not After : May 25 03:16:54 2027 GMT
        Subject: CN=1AC227D1BC226D282E1F8FCCF2BD4318116BF323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:35:74:08:cf:0f:df:96:7e:09:d1:d2:4d:74:
                    26:f2:d7:d5:0f:82:ea:ee:0e:83:3a:75:3d:16:19:
                    1f:28:5d:c3:a5:a9:49:26:b2:a2:f5:a3:30:83:e7:
                    fd:19:c2:24:e8:c5:9c:2d:ad:1f:9c:63:ee:1d:63:
                    be:7f:64:fa:0f:02:73:af:dc:3c:04:d1:b3:72:9f:
                    30:af:65:76:30:2e:81:32:85:56:54:a3:c7:ec:24:
                    22:30:fe:bc:12:4c:56:d2:91:94:c2:ba:6e:e7:fc:
                    11:2b:e0:c6:db:14:99:a5:3b:66:87:1e:ef:61:77:
                    c8:55:af:ed:6e:3e:0e:b5:62:8f:4c:5a:66:30:41:
                    f2:51:e7:ce:23:75:ed:63:a7:f6:cb:75:ee:be:ce:
                    3b:29:a1:49:b0:b5:9b:45:4e:85:54:a7:fa:73:7d:
                    73:fb:cd:53:80:2c:a4:02:23:51:4f:2f:98:30:5a:
                    9a:11:28:fc:dc:27:5c:7b:3a:11:25:e1:c7:8f:5f:
                    1f:19:00:34:c2:ad:16:7e:6f:4d:56:0d:78:7a:10:
                    54:41:66:87:62:21:7b:eb:b8:95:83:fd:2e:5b:26:
                    4e:79:20:dc:35:bf:a4:f7:75:92:8c:1c:b0:22:41:
                    c4:fd:77:e9:25:00:8b:d2:e9:97:44:6e:27:cb:0f:
                    c7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C2:27:D1:BC:22:6D:28:2E:1F:8F:CC:F2:BD:43:18:11:6B:F3:23
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145504.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab26::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:16:a7:b5:eb:8a:04:ff:60:4d:a8:a0:49:ed:c1:cf:e0:89:
         f5:96:74:29:70:43:5d:3c:b9:05:cd:c0:19:72:0b:23:ce:b5:
         d3:f0:d4:21:dc:12:c5:00:87:27:21:8c:78:5c:a9:12:8d:fb:
         07:92:ca:3a:88:f1:3c:41:79:b3:3b:56:ef:3d:b4:95:44:70:
         d6:7d:b3:95:f2:ad:14:ce:e6:4d:34:2f:44:39:d6:ac:4d:49:
         da:e8:9d:11:61:e1:64:bd:4c:48:f6:8a:08:73:75:8a:37:73:
         06:ac:9c:74:09:ca:9e:57:1a:b0:e1:31:ff:dd:33:5c:2f:03:
         ec:4f:07:5a:20:c7:02:c0:0b:5c:d5:b2:a1:87:0a:0a:0f:76:
         66:7b:0a:bb:76:62:dc:b5:0a:64:34:f5:09:c0:a8:6a:dd:d6:
         66:65:e4:63:e5:f8:7c:a0:8e:62:23:8f:43:21:79:9a:ad:63:
         c8:9d:b6:94:a9:ba:0e:ed:c3:c2:4a:3b:cc:55:3c:69:7f:d8:
         96:5c:c6:0d:34:69:a0:04:45:24:27:b0:6b:94:a6:bb:87:79:
         ff:c4:bd:b0:f3:ff:8b:36:72:d5:9b:a6:6a:88:c4:12:f3:8b:
         49:70:b5:6f:8c:59:7f:5f:26:24:c9:d6:94:66:4c:cf:e0:75:
         ad:b1:29:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:49 2026 by rpki-client