Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145801.roa
File:                     AS145801.roa (raw, json)
Hash identifier:          xCV419Q6WYXco5xDnCEPEGB69XkflHPAbfCNKaFB4YA=
Subject key identifier:   A1:AB:63:26:45:E9:DC:DF:A8:33:E2:B8:BF:BF:F7:78:3A:03:97:C3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7BACF008CD33F0CA8D43CDC51EB047268925196D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145801.roa
Signing time:             Mon 25 May 2026 01:38:03 +0000
ROA not before:           Mon 25 May 2026 01:33:03 +0000
ROA not after:            Mon 24 May 2027 01:38:03 +0000
asID:                     145801
IP address blocks:        240a:ac4f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ac:f0:08:cd:33:f0:ca:8d:43:cd:c5:1e:b0:47:26:89:25:19:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:03 2026 GMT
            Not After : May 24 01:38:03 2027 GMT
        Subject: CN=A1AB632645E9DCDFA833E2B8BFBFF7783A0397C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:19:9a:bb:54:56:70:92:b1:3a:f2:c0:f1:
                    2f:a3:52:43:e9:a5:f7:56:df:f5:56:12:75:38:ec:
                    bb:d9:2b:5a:34:f8:9f:44:f1:68:30:a2:2e:28:9a:
                    aa:a4:1c:8f:e8:0c:6c:0c:a7:f3:69:da:bc:37:d7:
                    82:6d:b3:c3:c4:a0:58:9e:fe:b5:ab:25:83:f2:5b:
                    a9:9f:40:39:5c:00:8f:bf:c7:36:d4:4a:d1:30:3c:
                    5e:52:96:04:f5:28:3f:26:8d:2a:b4:23:75:38:df:
                    52:61:ad:8b:04:8e:71:88:3f:ce:f0:cb:27:ca:46:
                    6a:10:98:b1:24:5b:f0:a5:b7:99:87:9b:f8:85:19:
                    0a:1b:d6:40:72:47:1b:ca:21:eb:1c:52:f5:0c:37:
                    84:8d:f2:a9:3a:5e:07:97:4f:74:2b:54:44:ad:a6:
                    ec:7b:8e:ee:a5:52:f6:6c:a3:0f:a8:da:dc:17:35:
                    40:57:ef:07:5a:63:bb:97:d0:d5:bf:5b:fd:b4:53:
                    c0:a0:a6:bd:dc:b5:56:80:d7:a0:27:5d:e8:3b:73:
                    1e:30:cd:75:7c:d4:34:37:27:be:5d:3c:b6:a7:a4:
                    c2:ea:04:a0:de:43:6b:9f:d1:05:5f:e7:93:93:63:
                    5b:71:13:02:18:7d:68:56:bb:ec:86:7d:81:19:e1:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AB:63:26:45:E9:DC:DF:A8:33:E2:B8:BF:BF:F7:78:3A:03:97:C3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145801.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac4f::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:63:5e:23:19:f5:de:bf:77:28:28:6b:58:10:c2:25:81:e3:
         ea:df:c8:0f:59:82:8e:2c:e2:7d:09:db:bc:88:e8:a8:04:8d:
         8d:f6:e7:3a:36:1e:df:06:89:94:79:cc:55:32:6a:11:f3:a8:
         67:11:73:ac:ee:d3:96:2f:19:a2:a8:e9:63:9a:d2:1a:cc:2b:
         4c:41:fd:66:a0:9f:8e:48:43:40:81:6b:1a:36:bb:c1:c2:f4:
         31:c2:4d:35:d9:51:d6:56:7d:8c:05:a9:ed:0e:56:bd:81:16:
         03:7f:ed:6c:86:17:a0:0e:5e:19:59:ff:8a:e2:ec:36:da:23:
         1f:25:c9:49:5b:ae:de:25:58:d6:87:5c:d4:68:e9:47:e0:cb:
         2f:f2:74:e1:e9:af:c2:86:bb:57:ea:b5:c5:d8:5e:ea:40:e5:
         3a:07:2f:02:4a:91:c2:20:5e:1e:b9:fd:84:17:97:f0:6e:ed:
         d7:f6:b6:21:a9:61:19:af:7b:9c:cf:73:db:33:d7:50:11:ae:
         44:7b:2a:25:53:2b:ee:31:38:a4:ea:88:20:3e:cf:42:a1:84:
         3e:f9:3b:24:f4:8e:82:c7:f0:78:7c:05:d5:28:c2:66:c3:ec:
         6b:fd:89:c5:50:96:85:d9:93:36:50:db:40:49:37:4f:c8:f1:
         32:4c:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:46 2026 by rpki-client