Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145694.roa
File:                     AS145694.roa (raw, json)
Hash identifier:          Hd414dSwcPIA67h0FS11Z5vycMn0JId6kS2jvwc1wYo=
Subject key identifier:   62:DD:BF:05:02:15:36:6A:6C:ED:2B:A9:00:C2:12:63:74:C4:EE:AD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       987BEB0F0E855962964671DD7D12008EA4492E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145694.roa
Signing time:             Mon 25 May 2026 01:19:59 +0000
ROA not before:           Mon 25 May 2026 01:14:59 +0000
ROA not after:            Mon 24 May 2027 01:19:59 +0000
asID:                     145694
IP address blocks:        240a:abe4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            98:7b:eb:0f:0e:85:59:62:96:46:71:dd:7d:12:00:8e:a4:49:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:14:59 2026 GMT
            Not After : May 24 01:19:59 2027 GMT
        Subject: CN=62DDBF050215366A6CED2BA900C2126374C4EEAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:03:c3:42:8f:df:85:f3:14:eb:ba:7e:6f:
                    53:e6:a4:c7:cf:b5:53:67:2a:77:00:37:a6:df:5d:
                    d5:ef:e0:77:fe:68:ef:61:6e:cd:ae:73:a5:f2:db:
                    c9:c7:73:5e:a4:0b:fb:82:ab:6e:6d:5f:24:e6:bc:
                    92:cf:cc:f7:fe:fb:95:79:48:8c:1d:d0:ce:90:3b:
                    df:4e:e3:3f:c0:4c:6e:93:5f:94:53:76:24:41:e6:
                    53:2c:cd:55:08:17:86:c9:73:22:eb:b6:62:bd:5a:
                    2c:4c:68:b1:e7:ac:8f:e8:97:21:f4:19:f2:fe:55:
                    b2:3e:6c:48:55:0f:55:70:bb:84:eb:3e:55:f3:b0:
                    47:ec:81:b4:a6:8b:63:2b:7a:f3:3d:d9:c0:5a:54:
                    2d:b2:04:ce:b0:bb:a5:fb:b9:fd:cc:b5:66:3c:d1:
                    7c:2c:67:37:4d:df:bb:60:3e:83:0b:d8:2b:eb:77:
                    c7:d8:a7:cc:b6:8f:bc:5f:f2:d4:b9:39:5f:ac:6c:
                    bc:59:cf:e5:7e:d4:6f:0c:79:57:c3:79:a2:75:09:
                    89:02:74:a9:24:1d:98:3b:b2:7a:de:00:7c:e3:c1:
                    8a:78:68:f6:e6:2d:ad:cf:75:db:6b:ab:c3:4e:74:
                    49:fd:64:09:b7:0d:49:82:2d:41:ab:2a:d7:40:cf:
                    9e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DD:BF:05:02:15:36:6A:6C:ED:2B:A9:00:C2:12:63:74:C4:EE:AD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145694.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abe4::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:e4:e6:f5:dc:0c:18:66:2f:02:0e:b0:37:d1:0a:14:02:08:
         6b:68:65:46:ba:bb:1f:56:af:30:07:14:a9:48:85:8b:21:66:
         50:02:19:44:29:79:41:f4:ac:72:a7:8e:0e:e3:2e:d6:5d:cd:
         e6:21:05:c1:64:2d:d1:77:80:d1:8f:10:ef:47:4a:51:07:96:
         34:1e:b0:36:8f:9d:b3:68:be:29:23:7d:ea:9c:9b:63:a2:54:
         29:bf:fe:b6:db:48:1d:8a:44:af:37:70:aa:4d:76:cc:da:7a:
         82:bf:42:d1:ed:dc:5f:27:a2:d3:2e:8f:ae:89:f0:7c:99:bd:
         cb:0b:d4:4a:73:b2:ed:47:27:a9:98:0e:49:e8:94:a3:ae:e5:
         bb:f9:66:ff:d2:12:96:de:d6:39:99:96:5f:d4:9a:22:2e:7b:
         6b:60:ad:da:76:7f:3e:0f:a2:1d:98:41:c9:06:3d:47:e2:92:
         85:df:bf:ab:a5:c7:e0:fb:fb:ae:3b:5f:14:1f:6a:ad:cc:6e:
         c2:39:71:6a:1c:f1:f1:8d:87:f5:70:44:97:81:78:97:91:d6:
         ce:03:1c:6f:21:5b:cd:c6:de:b9:b8:3c:d8:1e:37:20:dc:8c:
         ca:db:3f:73:e0:32:22:f6:dd:02:4c:68:ec:1e:bd:5e:8d:db:
         e9:51:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:59 2026 by rpki-client