Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145854.roa
File:                     AS145854.roa (raw, json)
Hash identifier:          xBPt+DfQQP7uQPKsvZWIEMZQIshKnf/oNh1GBcuaUhI=
Subject key identifier:   7E:34:7A:3F:6A:BC:25:16:F7:41:14:FF:CD:65:C4:53:A9:CE:69:97
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       453655CC1CB79FE879A6E0AEC90F984E2A61A58D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145854.roa
Signing time:             Fri 22 May 2026 07:24:58 +0000
ROA not before:           Fri 22 May 2026 07:19:58 +0000
ROA not after:            Fri 21 May 2027 07:24:58 +0000
asID:                     145854
IP address blocks:        240a:ac84::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:36:55:cc:1c:b7:9f:e8:79:a6:e0:ae:c9:0f:98:4e:2a:61:a5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:58 2026 GMT
            Not After : May 21 07:24:58 2027 GMT
        Subject: CN=7E347A3F6ABC2516F74114FFCD65C453A9CE6997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:2a:1a:93:c3:11:79:66:34:34:cd:fc:69:
                    d8:f3:83:e0:29:58:6c:3f:3e:ff:b9:45:37:cc:82:
                    85:c7:02:05:25:cd:78:96:ca:50:dc:22:f3:f7:aa:
                    6b:3e:0a:65:3b:35:59:7d:4b:a6:08:d8:23:62:ff:
                    56:ac:dd:23:ce:59:c0:87:a1:9a:cf:9c:6c:5b:0e:
                    93:d2:05:39:b3:55:35:1e:d2:1d:9f:ac:ec:9d:81:
                    c4:fd:cf:36:49:88:78:4b:ba:2a:10:cb:ff:8a:79:
                    9d:eb:94:ac:a8:97:37:d3:fa:71:9e:c4:5a:8a:74:
                    f6:5c:f6:77:17:2c:d8:e4:4b:fa:1f:59:70:8d:b4:
                    06:05:ed:cc:97:d2:79:a6:11:0f:5d:9d:27:ae:bb:
                    a8:b4:c1:bc:1c:19:c9:4b:3f:7b:df:3e:8d:69:69:
                    84:31:55:f0:d4:54:33:73:6e:b0:ba:93:0c:88:76:
                    70:1c:ee:99:b9:f3:1b:4d:f2:72:15:e7:aa:4b:45:
                    ce:d6:4c:63:a1:23:fe:59:58:ff:6c:7d:c8:e3:9b:
                    5f:29:d7:41:a1:f1:ea:fb:00:17:27:0c:1b:37:a2:
                    80:41:25:9c:12:42:48:11:6e:e1:ab:61:20:df:91:
                    8e:73:e5:17:9f:b4:21:b4:10:4d:a9:f1:40:26:31:
                    51:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:34:7A:3F:6A:BC:25:16:F7:41:14:FF:CD:65:C4:53:A9:CE:69:97
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145854.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac84::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:db:c3:26:fa:ae:6d:27:b9:a3:ab:d2:3c:74:e0:6e:08:eb:
         87:66:73:1f:a7:1d:93:7a:bc:2d:07:94:4d:40:00:7a:cc:58:
         02:cf:e8:13:5b:fe:18:66:8c:a4:65:25:88:29:cf:a9:43:69:
         32:35:fa:d1:f7:e1:d3:05:11:90:c2:dd:54:51:74:b0:b2:52:
         26:5f:59:76:20:c8:36:b0:9c:e1:64:cf:03:75:43:92:14:8f:
         6f:f4:ee:a7:7a:3c:ba:12:13:c9:a4:8c:1a:c5:ed:de:55:ff:
         7e:5f:12:02:0f:1e:29:27:6d:43:2a:59:1b:eb:7f:c8:7f:6f:
         c6:67:bf:1f:c3:18:9f:f3:8e:f0:5f:a1:58:b7:0d:81:40:59:
         49:57:d8:48:85:f1:b2:7e:33:01:14:d4:af:f7:5d:bc:90:4c:
         fc:b7:34:0e:89:87:4a:ce:e6:0b:4f:60:f9:ae:35:c6:89:0f:
         66:18:b4:c5:58:eb:09:ff:c0:d4:03:67:33:28:fd:5a:bc:0e:
         64:d5:0b:1d:a3:3a:91:40:9c:93:46:67:61:29:80:17:4f:5e:
         76:0e:dc:a7:74:45:0b:c4:52:e8:7e:55:51:0c:46:ee:43:3a:
         69:f0:c4:44:66:97:34:a1:29:ba:95:b7:40:06:4a:6d:16:62:
         f6:f3:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:02 2026 by rpki-client