Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145792.roa
File:                     AS145792.roa (raw, json)
Hash identifier:          YwTuo7KnExuJDk1jBLQg4fQ0FhV73CFo+QZYkClHoHU=
Subject key identifier:   18:E6:8F:00:50:F3:F4:52:B4:25:89:05:32:F3:53:3A:1D:07:A4:DE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2F5B2AF7B0363ECB6DDE1AA26FC7AE32C1F2B33F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145792.roa
Signing time:             Mon 25 May 2026 03:19:23 +0000
ROA not before:           Mon 25 May 2026 03:14:23 +0000
ROA not after:            Mon 24 May 2027 03:19:23 +0000
asID:                     145792
IP address blocks:        240a:ac46::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5b:2a:f7:b0:36:3e:cb:6d:de:1a:a2:6f:c7:ae:32:c1:f2:b3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:23 2026 GMT
            Not After : May 24 03:19:23 2027 GMT
        Subject: CN=18E68F0050F3F452B425890532F3533A1D07A4DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:f7:52:ab:fe:eb:d5:6c:c6:26:73:b0:18:
                    31:33:33:01:24:08:1b:ad:1a:55:1b:61:1c:04:46:
                    cf:ee:09:04:fd:eb:cb:1d:24:99:3d:31:29:89:b0:
                    03:b7:40:cb:b5:33:49:c6:1f:32:21:14:e0:f9:11:
                    34:14:ac:b9:0f:83:b4:05:3f:88:19:77:c9:66:cd:
                    9f:6f:e0:02:b3:e5:d8:34:47:a4:63:a4:1d:89:2f:
                    b4:2f:91:3e:97:79:6e:37:3e:6a:78:0d:2f:0a:cd:
                    13:5e:e4:df:1e:4c:1e:58:19:b7:15:2a:90:81:bd:
                    23:65:48:81:ba:62:05:ee:ba:d4:5a:90:71:73:e8:
                    ed:05:69:38:ea:68:9a:1a:8a:00:bf:12:60:7d:96:
                    37:e0:ab:dd:cb:35:c5:80:75:08:99:58:f5:80:b0:
                    65:39:30:39:f7:89:64:27:75:18:d9:f2:03:c2:d5:
                    0e:d2:83:4b:49:75:cf:b7:02:ce:8f:f0:13:29:33:
                    67:1c:91:93:a2:9f:43:f9:25:7d:bb:ce:90:16:15:
                    53:7c:60:39:f6:14:71:c8:e7:45:4b:34:d2:f5:ef:
                    f8:df:90:94:d3:b3:ab:6f:46:2f:1a:f2:e8:7c:72:
                    86:37:dd:1a:38:91:a0:3e:3e:87:32:08:4a:19:37:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E6:8F:00:50:F3:F4:52:B4:25:89:05:32:F3:53:3A:1D:07:A4:DE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145792.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac46::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:0c:2e:33:28:84:5f:81:cb:81:dc:29:04:1c:47:4a:61:e2:
         bb:84:ec:b1:7a:6a:7a:49:4a:a7:ff:5d:34:86:69:1b:0e:77:
         84:5f:65:9f:1b:52:09:c2:8d:5f:a5:49:c0:58:a2:ab:b7:47:
         8d:89:da:13:10:01:26:45:28:d9:55:87:34:2b:cd:c3:5c:c5:
         f0:f1:66:37:6e:34:23:88:01:b8:f1:e0:27:a9:26:fa:bb:77:
         f9:37:9b:b1:97:93:f5:12:ed:e1:c4:89:c0:28:36:f7:67:4d:
         78:93:04:db:ad:8a:f5:f1:28:99:6b:c4:b7:0e:11:3f:ea:bd:
         7b:80:b7:3c:87:d2:1e:af:a6:8d:21:ea:d0:ec:58:70:4c:c3:
         b8:f1:21:44:35:59:57:a2:57:a8:be:11:7c:99:ae:37:08:ad:
         b6:2c:f6:f0:5e:82:23:ca:16:32:bc:d2:d7:9f:7f:5d:89:e3:
         ef:54:bd:10:77:56:70:62:be:ce:d2:f6:82:cb:15:a1:11:d7:
         24:cf:3f:20:00:bb:38:f3:7f:9d:e2:38:a5:0a:d0:30:40:a0:
         99:8b:43:65:3f:f7:ec:e3:0d:8b:14:ad:be:ad:10:33:7a:01:
         d9:29:84:aa:7f:66:6a:55:8e:b0:44:43:b4:13:2e:12:7c:b3:
         e7:10:71:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:08 2026 by rpki-client