Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145648.roa
File:                     AS145648.roa (raw, json)
Hash identifier:          n4zQXJrNp+CWuBp9eUBBa/xxbFjVCcjlOPCs5z0L35o=
Subject key identifier:   73:04:D1:55:39:0F:79:DD:B4:0D:AF:19:F1:B5:1A:1D:0D:F3:5F:5B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       146A225901BE9AC2B486167C8C521F1EDF3D40D4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145648.roa
Signing time:             Mon 25 May 2026 01:51:23 +0000
ROA not before:           Mon 25 May 2026 01:46:23 +0000
ROA not after:            Mon 24 May 2027 01:51:23 +0000
asID:                     145648
IP address blocks:        240a:abb6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6a:22:59:01:be:9a:c2:b4:86:16:7c:8c:52:1f:1e:df:3d:40:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:23 2026 GMT
            Not After : May 24 01:51:23 2027 GMT
        Subject: CN=7304D155390F79DDB40DAF19F1B51A1D0DF35F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fd:ce:8f:de:9a:89:86:66:81:58:88:54:43:
                    13:f8:7b:2f:37:e2:e4:eb:68:04:f9:a4:0f:9b:cb:
                    40:24:c8:96:31:bc:08:db:a0:d7:0a:8b:83:f6:6c:
                    57:0c:cb:21:8a:53:2b:5d:44:af:5e:43:be:42:50:
                    bc:5d:3e:ba:66:a0:62:c3:9f:90:97:9b:e9:71:51:
                    de:24:9a:a5:bd:8e:01:6b:01:6a:b0:f1:f0:f0:e5:
                    57:df:bd:6a:52:21:0b:20:09:59:be:14:6b:81:4e:
                    d4:9c:e7:29:05:a4:8f:bd:31:f6:2b:4a:1b:b3:1c:
                    6e:08:8a:52:af:6b:3d:25:d0:63:26:fb:68:5f:ec:
                    af:e4:df:14:c4:fe:eb:55:e6:d9:9b:9a:8a:1b:11:
                    af:37:19:79:cd:6b:99:af:81:e8:c9:f2:b5:0f:b8:
                    f5:34:0b:84:cf:c4:23:c6:bc:2c:81:4a:bf:91:8a:
                    90:06:a2:0d:a1:ee:1e:d0:49:ce:1e:68:2c:fd:eb:
                    e7:ac:2b:f9:30:41:ad:ff:7d:5a:28:78:1d:d3:16:
                    80:55:d3:54:a7:86:e6:ad:4e:b6:ca:fe:dc:a1:ef:
                    c2:53:d4:15:8f:68:3d:70:b3:94:09:6c:82:46:a6:
                    6f:2a:3b:da:45:70:da:f4:da:8e:57:ac:51:d7:72:
                    58:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:04:D1:55:39:0F:79:DD:B4:0D:AF:19:F1:B5:1A:1D:0D:F3:5F:5B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145648.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abb6::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:a5:c6:72:46:cf:a4:1d:be:b1:6a:88:f7:7f:55:93:cb:cd:
         83:ac:96:ee:de:f0:49:74:a8:55:b9:e3:5e:54:59:d8:d4:a5:
         42:4d:dd:f5:55:98:cd:38:a8:50:15:a3:00:3f:74:aa:03:df:
         69:7e:6c:f6:fa:c6:11:40:3f:b2:17:a5:5d:e1:eb:3f:de:ff:
         49:59:49:98:02:7c:ed:eb:0d:c9:a4:a8:5e:92:3e:b7:da:f7:
         0e:b6:7e:fa:33:37:52:51:14:a7:8c:9c:bd:29:d2:61:c1:75:
         85:8a:0b:e9:28:80:c9:72:a2:f1:91:23:a9:5c:cf:b3:37:77:
         52:05:e7:42:8e:e1:7f:b3:be:98:a5:b1:a7:3f:e7:4a:40:d5:
         5c:10:45:cc:ee:43:24:7d:4b:75:d3:a0:1f:28:31:c5:1e:03:
         c5:fa:48:24:ee:b3:f4:1a:f8:34:64:af:46:b4:ac:8e:4e:a9:
         93:88:ef:70:c9:46:35:74:cb:1e:4f:31:73:d7:69:e5:ac:08:
         62:14:b8:68:96:6a:bb:ab:d5:cb:4e:2f:00:d8:64:28:f8:11:
         48:21:7b:e2:32:0f:70:e1:30:c8:c8:d1:b2:8a:ae:d5:00:c9:
         f2:cf:87:ad:d5:fa:a6:f0:80:9a:75:1e:1c:44:01:a2:5b:fe:
         e0:49:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:30 2026 by rpki-client