Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145665.roa
File:                     AS145665.roa (raw, json)
Hash identifier:          /5wBlUL+aKo37O1l5zEqunjEZYsGHig2ht/3aIC4MwA=
Subject key identifier:   DB:06:3C:30:74:D3:BC:03:61:28:24:F5:D0:8B:3E:70:86:83:2B:A4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0642F00C97B6D55EF594A837A08E7C8422D1C7D1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145665.roa
Signing time:             Fri 22 May 2026 06:58:15 +0000
ROA not before:           Fri 22 May 2026 06:53:15 +0000
ROA not after:            Fri 21 May 2027 06:58:15 +0000
asID:                     145665
IP address blocks:        240a:abc7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:42:f0:0c:97:b6:d5:5e:f5:94:a8:37:a0:8e:7c:84:22:d1:c7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:15 2026 GMT
            Not After : May 21 06:58:15 2027 GMT
        Subject: CN=DB063C3074D3BC03612824F5D08B3E7086832BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:25:cc:2a:9d:4a:f1:75:8a:0a:52:0f:51:1b:
                    64:d2:11:fc:13:f3:5b:16:8a:16:11:18:b0:b1:47:
                    14:08:9a:99:f2:66:56:8f:fd:01:7b:dc:a8:13:47:
                    0f:85:96:aa:0a:7d:fc:e4:15:b3:bd:bd:2d:87:9d:
                    0c:5e:b6:7f:e2:62:15:e7:1d:0a:f1:ca:a0:27:f5:
                    f2:9c:70:ee:5b:d5:cd:4f:01:a8:46:01:79:15:c4:
                    79:b8:3c:b2:c5:55:ec:e5:36:a0:9e:43:ae:54:77:
                    95:82:bf:55:03:a3:b2:cd:eb:04:74:13:49:83:55:
                    33:15:6b:2f:35:08:ba:ec:69:ea:bd:bf:ac:3b:7b:
                    ca:ac:2b:75:f7:51:7f:af:2a:67:1e:57:20:45:43:
                    4b:b9:6a:9f:3f:59:1b:fb:7b:56:9b:41:fa:74:03:
                    c3:91:8f:a0:c9:f7:f2:a7:88:98:5f:42:88:4e:9a:
                    6f:53:53:5b:e7:5d:b2:bf:12:b9:54:8e:12:a3:94:
                    ec:c1:30:fa:d8:af:0d:3c:d8:d8:02:6c:26:bf:79:
                    fb:3c:19:6c:f8:de:99:f0:a0:2b:92:c7:09:fc:87:
                    78:60:59:ce:d1:7a:d7:6b:d2:63:80:29:1b:17:ac:
                    04:75:f7:a9:7c:94:c8:45:ab:a0:f0:42:3b:0d:9a:
                    1c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:06:3C:30:74:D3:BC:03:61:28:24:F5:D0:8B:3E:70:86:83:2B:A4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145665.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abc7::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:5f:20:a5:db:ae:b5:e2:16:f4:78:7d:ed:68:93:ce:f3:b6:
         f1:00:07:18:9d:b1:c1:4c:cb:8e:4d:e0:99:2b:f2:f5:aa:f4:
         60:95:27:49:6d:2d:48:66:84:5c:b7:f7:1d:fc:a6:fc:9b:0c:
         ef:8e:76:e7:9a:8a:3c:2b:2d:57:1f:a1:e9:aa:c3:64:0a:cb:
         db:5e:ba:53:f9:17:0a:3d:9a:de:9b:34:d4:51:de:58:ef:d5:
         5a:73:1f:06:15:96:c2:d0:fd:b2:28:00:8a:76:c2:b0:95:d4:
         4c:92:8f:21:a6:c8:e7:7a:4f:be:2f:39:48:46:94:4d:6e:18:
         59:2e:98:9e:92:f0:42:84:80:98:51:c1:48:f2:f5:b2:f5:78:
         fa:b0:f6:51:ba:2e:45:63:09:b8:9e:42:99:dd:20:95:ed:cf:
         14:3b:96:e5:9c:68:7d:8a:90:4f:ec:bc:e4:f4:10:c2:2d:f6:
         1e:f4:98:63:df:01:a8:50:15:43:7f:a6:d8:02:cd:ae:ea:8f:
         f4:ca:68:8a:81:60:c1:d6:82:49:23:57:9f:88:a8:fc:d2:5c:
         31:15:56:ce:c1:21:7e:b3:d9:b4:25:82:29:6f:26:50:fd:5d:
         72:13:2f:41:ad:7e:32:21:7e:6b:e3:f8:98:38:89:12:f0:b0:
         4a:92:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:40 2026 by rpki-client