Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145750.roa
File:                     AS145750.roa (raw, json)
Hash identifier:          mKMsPAT0+xl5WZvS/EbcuSRdfuGgEvhVYhtR3EU25kM=
Subject key identifier:   73:E3:B5:FA:7B:CA:E3:A0:57:38:65:73:42:F0:C4:7C:5C:16:E8:AD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       44C4B44CCE53DBFB6B675FF0A70F9C1D82CEB29B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145750.roa
Signing time:             Mon 25 May 2026 06:28:51 +0000
ROA not before:           Mon 25 May 2026 06:23:51 +0000
ROA not after:            Mon 24 May 2027 06:28:51 +0000
asID:                     145750
IP address blocks:        240a:ac1c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c4:b4:4c:ce:53:db:fb:6b:67:5f:f0:a7:0f:9c:1d:82:ce:b2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:51 2026 GMT
            Not After : May 24 06:28:51 2027 GMT
        Subject: CN=73E3B5FA7BCAE3A05738657342F0C47C5C16E8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:38:ac:02:76:a0:3b:33:44:cf:c3:d2:4a:
                    6a:da:c2:d8:11:76:53:d9:11:a4:08:31:b4:ab:35:
                    18:af:c4:cb:b7:9a:76:09:a2:9e:0e:46:7e:55:fa:
                    dd:3e:d8:a5:1e:f8:f1:55:02:34:87:82:12:8f:e4:
                    f6:42:08:71:08:5d:9d:db:f0:26:fb:55:74:9f:ef:
                    c1:dc:9e:66:2c:ff:ca:49:03:31:d7:29:66:0f:95:
                    7d:ae:2e:cc:28:88:9c:00:68:da:fc:7b:59:69:a4:
                    78:0e:78:d8:fd:2e:1c:74:4e:6d:fd:e8:a1:15:ef:
                    bc:2a:b9:12:0a:9e:c1:60:a2:7c:a9:c7:11:1e:05:
                    07:6a:45:a9:85:f8:1d:c3:7e:d2:74:cc:84:f9:08:
                    81:8c:67:ce:6d:11:fd:dd:1e:19:42:86:13:4e:50:
                    f8:30:93:33:5d:cd:2d:fc:aa:1f:ec:65:09:b9:59:
                    63:77:a5:db:ff:d6:c3:2c:7d:1d:af:7e:a2:75:68:
                    18:ce:21:50:47:c0:f5:46:82:19:de:98:5a:99:20:
                    a5:73:bc:63:7e:9d:d3:02:92:fd:95:7f:da:c2:b1:
                    44:5d:d5:dc:b5:29:37:28:84:ae:d8:ce:e3:75:4c:
                    be:cc:25:98:65:e1:58:81:4c:f1:67:73:42:18:d3:
                    6c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E3:B5:FA:7B:CA:E3:A0:57:38:65:73:42:F0:C4:7C:5C:16:E8:AD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145750.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:cd:82:97:eb:60:36:8e:09:ec:c5:16:41:cf:4c:8a:d6:63:
         1f:d7:e3:c4:d5:fd:3a:38:7e:20:bf:0b:39:1f:b9:18:54:2c:
         f9:36:39:f0:e5:2f:f4:ca:04:40:6c:52:4d:45:e5:14:9a:20:
         16:b8:7b:cd:24:63:ec:99:98:d9:ee:18:6e:12:a3:b6:17:ea:
         18:ad:67:23:ea:ad:43:f2:e5:06:a3:34:af:40:01:a1:99:18:
         3b:cd:bb:e3:4c:be:f2:ba:21:32:ee:c1:df:16:8a:84:c7:8d:
         c9:b2:43:e2:59:48:5d:63:35:9b:9d:a0:d7:3f:4e:3d:78:f0:
         4f:46:91:7b:a7:8b:12:c7:64:cf:8d:92:ea:a9:f5:5d:09:f0:
         63:4c:40:ea:8c:12:58:cb:32:32:aa:bd:16:b6:cf:fb:b3:35:
         5b:b0:e7:b3:b7:bc:5e:62:fc:e0:39:c6:a5:c6:7c:13:47:7c:
         64:6e:ed:55:6c:47:33:94:3a:44:1b:5c:7a:07:a1:96:75:36:
         0a:8f:6b:be:2e:67:47:82:5e:f6:5f:f5:14:72:b5:57:f6:71:
         6d:fb:84:d4:93:90:81:5a:c2:0d:93:c6:5b:54:8f:ef:4f:d6:
         1c:d9:1c:cf:22:bf:92:65:a6:7b:dd:c4:31:69:2f:40:44:3e:
         b6:b8:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:53 2026 by rpki-client