Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145748.roa
File:                     AS145748.roa (raw, json)
Hash identifier:          HwhLxzj9bYxG+AVPyv7G+ECj4OheZhe09lpEpSzNnCk=
Subject key identifier:   6E:33:80:69:3D:5C:AA:69:79:16:15:B5:D1:EB:94:36:EE:59:D2:FE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       668E712050155829083DB32C0A0D16E098A81409
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145748.roa
Signing time:             Tue 26 May 2026 06:30:56 +0000
ROA not before:           Tue 26 May 2026 06:25:56 +0000
ROA not after:            Tue 25 May 2027 06:30:56 +0000
asID:                     145748
IP address blocks:        240a:ac1a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8e:71:20:50:15:58:29:08:3d:b3:2c:0a:0d:16:e0:98:a8:14:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:56 2026 GMT
            Not After : May 25 06:30:56 2027 GMT
        Subject: CN=6E3380693D5CAA69791615B5D1EB9436EE59D2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0c:7d:1b:4a:b3:20:91:41:dc:79:46:7b:6e:
                    e5:5b:90:fb:ec:21:4c:35:49:9a:91:eb:4c:c2:71:
                    3b:3f:95:22:ef:00:f5:14:bd:8f:b9:ac:04:62:cf:
                    fb:d1:d2:3d:60:da:9f:4a:09:eb:83:9f:58:10:36:
                    7d:40:8a:73:2b:1c:91:86:14:c3:39:45:a4:c9:96:
                    34:a2:46:cb:c6:ec:f9:9b:c6:22:e7:f0:c6:53:37:
                    58:63:78:88:4b:e2:bd:1b:08:ec:e6:2b:f0:6f:5f:
                    4d:a5:27:7d:1a:0a:ad:b3:7e:7e:8d:cf:a0:96:c3:
                    18:31:b2:83:09:3d:37:9d:60:7b:fb:4e:9f:9a:1f:
                    11:aa:24:8f:56:16:19:6e:90:51:05:88:5d:b5:60:
                    67:1e:4e:c2:ee:aa:22:3b:8f:9e:5b:dd:65:61:1b:
                    34:80:93:4a:c0:db:1a:f4:41:5a:53:ad:1c:ca:81:
                    2d:5d:07:71:36:2b:8e:97:b9:a7:10:75:83:29:d8:
                    27:61:36:fc:f3:96:00:8e:7d:f2:98:02:de:ed:3e:
                    10:62:da:37:8f:26:6d:d7:e1:2f:a6:5f:ef:92:20:
                    be:b4:4d:2f:70:d5:ac:25:84:14:13:27:ef:7b:fa:
                    ba:7a:d9:98:4f:34:97:4f:8c:9e:75:f2:e7:20:c2:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:33:80:69:3D:5C:AA:69:79:16:15:B5:D1:EB:94:36:EE:59:D2:FE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145748.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac1a::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:04:d3:fd:47:ae:7e:98:97:31:81:8d:25:95:ee:2b:8a:8d:
         a0:8d:bc:0d:dc:00:e1:f0:c5:ef:87:08:25:14:67:19:90:c8:
         38:8c:08:7b:49:50:bc:4d:b6:a1:e5:42:45:e6:ab:d2:5c:a2:
         f0:e4:fb:81:9e:54:b5:e4:18:e8:40:c9:64:26:3f:73:9a:01:
         67:8e:9e:0d:52:33:d0:b0:e3:8b:69:03:2c:f1:d5:74:fd:85:
         24:21:1b:2b:ff:33:03:f0:77:7d:a0:73:e5:8b:f3:97:fd:c8:
         82:be:b1:b3:f5:a5:34:78:82:63:d8:81:73:6c:37:27:76:a8:
         e5:82:dd:5e:71:91:93:be:ae:94:83:ab:34:bf:5b:1c:13:a1:
         e4:a1:9d:79:c6:7e:b0:e9:ad:8c:d0:9a:32:ce:85:6d:a5:9c:
         27:f2:c4:82:b4:bc:4d:24:31:95:c1:b7:2b:de:5c:4d:b6:4e:
         d7:1a:ca:8a:ab:df:2d:e3:b1:71:52:57:46:67:91:15:6b:74:
         a9:a6:dd:77:0a:ab:12:13:2b:1b:6f:8a:da:c4:c7:9a:19:61:
         45:ea:34:7c:0d:5e:b7:f5:df:dc:ca:16:e4:98:d1:1c:00:3e:
         a3:59:9a:66:07:04:9d:28:10:8d:7d:2e:f9:9c:62:06:1f:2b:
         48:64:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:12 2026 by rpki-client