Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145603.roa
File:                     AS145603.roa (raw, json)
Hash identifier:          /MTpkx9HvZFcimPp71m7GcpbFpnpJjQKfBMBB4C3Dsc=
Subject key identifier:   82:AB:F6:69:2B:DB:5F:8F:D4:BE:EE:0D:0E:4E:78:6B:8F:AF:00:23
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1C10321A07C01823D0147684ED16DF85A0FC8D81
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145603.roa
Signing time:             Mon 25 May 2026 06:49:09 +0000
ROA not before:           Mon 25 May 2026 06:44:09 +0000
ROA not after:            Mon 24 May 2027 06:49:09 +0000
asID:                     145603
IP address blocks:        240a:ab89::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:10:32:1a:07:c0:18:23:d0:14:76:84:ed:16:df:85:a0:fc:8d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:09 2026 GMT
            Not After : May 24 06:49:09 2027 GMT
        Subject: CN=82ABF6692BDB5F8FD4BEEE0D0E4E786B8FAF0023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:54:cd:ee:70:db:d9:62:83:4a:c5:0d:25:
                    44:b4:4b:25:48:0a:bc:de:60:0b:da:77:9c:46:7f:
                    55:5d:3f:51:7b:41:7a:2a:77:4a:6c:9b:25:d6:ab:
                    71:4e:15:e7:60:80:30:82:8f:26:85:3c:65:bc:0d:
                    9b:ba:6c:68:3d:c0:58:44:5f:96:86:74:a2:95:c6:
                    34:99:88:e2:eb:2e:d2:88:2a:b5:90:be:9f:b2:3a:
                    34:99:29:b3:38:85:32:83:e3:e0:1e:0c:a1:2a:75:
                    1f:ee:65:0c:58:21:48:45:85:41:c2:93:71:3d:54:
                    49:fd:e7:a5:20:ef:7f:83:ff:b9:23:f0:29:1d:9a:
                    02:c4:6d:b2:bc:f5:fe:34:d0:5a:dc:54:03:d6:cc:
                    21:30:2e:e0:52:dd:29:25:f1:5b:b0:f2:29:53:68:
                    d3:6d:0c:98:ae:cf:ba:5e:fd:02:63:78:12:ef:d9:
                    5e:cd:b0:01:60:bc:15:27:0d:3a:10:a5:5e:97:2a:
                    9c:df:cf:ca:3b:9d:37:a9:03:30:0b:ed:83:e8:57:
                    9e:fc:fc:bc:8c:e1:77:f7:f8:ac:60:5a:0a:f6:c1:
                    53:3f:14:a1:de:1b:82:60:3e:41:ea:73:5d:08:c1:
                    c6:4a:57:ef:6b:fa:72:b0:f9:f5:10:4c:96:5e:be:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AB:F6:69:2B:DB:5F:8F:D4:BE:EE:0D:0E:4E:78:6B:8F:AF:00:23
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145603.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab89::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:1f:a4:a1:04:d8:a4:23:94:39:23:b0:42:68:e5:4c:48:b3:
         c4:d5:a9:07:dd:b7:e3:17:78:2a:01:6f:b0:a9:31:09:e2:a7:
         3b:dc:4f:b9:e6:cd:ac:3f:ec:09:37:d8:99:75:7d:66:d8:74:
         ff:cc:dc:14:41:97:3b:17:99:f7:84:b5:1c:61:5e:bd:17:74:
         94:c7:0a:0f:df:67:82:a4:d1:20:ca:c5:ac:ed:64:05:32:b5:
         56:77:94:a5:62:10:8f:aa:6c:2b:bd:c7:bc:0b:46:1e:2f:22:
         eb:60:f8:66:c3:0d:74:a5:29:7d:d5:86:ba:ad:9d:d3:44:50:
         db:71:16:54:9d:a3:42:57:5c:c3:9a:d1:fb:28:a3:a7:85:55:
         1b:fb:3b:79:7e:2c:cb:f9:ea:9c:4a:2f:0c:7b:52:3d:78:e0:
         d5:73:6b:97:c7:90:68:ed:7e:71:c9:88:a6:79:b4:47:50:dc:
         9f:bf:59:d2:31:87:07:1d:73:42:b2:f4:78:0c:b3:78:b6:b9:
         63:ec:5d:c2:b8:61:77:bc:c6:ca:69:f4:68:b5:78:59:61:68:
         ae:de:2d:ae:90:35:af:f0:d2:94:1f:a0:4c:d9:b1:ee:2d:69:
         c7:a5:d4:c7:4a:d5:6f:3a:6f:48:78:c4:39:c8:7a:4e:c6:21:
         8e:6c:5a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:51 2026 by rpki-client