Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145869.roa
File:                     AS145869.roa (raw, json)
Hash identifier:          kVrPaS5PtrEEezPg56Zw4Sfq4ZfbvXNiXBJJE6WeEvo=
Subject key identifier:   E7:36:52:33:44:AE:5E:60:53:61:F1:2F:6D:5F:96:E4:C3:2A:E8:67
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       53DF809AF16035AA8E206027B99207728EF06305
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145869.roa
Signing time:             Tue 26 May 2026 01:13:14 +0000
ROA not before:           Tue 26 May 2026 01:08:14 +0000
ROA not after:            Tue 25 May 2027 01:13:14 +0000
asID:                     145869
IP address blocks:        240a:ac93::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:df:80:9a:f1:60:35:aa:8e:20:60:27:b9:92:07:72:8e:f0:63:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:14 2026 GMT
            Not After : May 25 01:13:14 2027 GMT
        Subject: CN=E736523344AE5E605361F12F6D5F96E4C32AE867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:cc:3e:7b:b2:7f:2d:ac:7c:1b:6e:9b:08:
                    08:cc:e8:1d:7f:b3:45:68:28:87:57:13:1b:bb:13:
                    3e:bf:92:21:b1:6b:8b:f4:60:31:8d:21:c9:05:78:
                    cf:65:47:e5:e6:20:1a:a4:dc:33:7a:97:2f:49:19:
                    c2:29:ce:2e:ab:b5:31:a4:71:1e:76:08:ae:e8:d6:
                    e2:ce:c5:2d:8e:21:56:bb:ba:11:84:9f:1b:5e:e1:
                    b7:72:04:e0:5e:06:19:4d:69:4a:49:d0:65:33:52:
                    f8:c7:d8:5d:e7:e4:c3:35:18:47:c9:43:32:3f:15:
                    ac:89:6b:86:1e:34:e5:0c:25:ef:49:c6:b4:a9:5d:
                    73:7c:d3:32:9d:26:ce:a2:d8:ff:34:98:20:2e:fd:
                    7a:4a:c0:a2:c9:4e:0f:6c:0e:bf:d2:0d:47:ba:35:
                    eb:5a:b4:0d:ec:d3:61:8b:3c:43:d3:36:14:27:c0:
                    53:7e:42:63:c4:b7:b6:62:f1:8b:78:ec:d3:b5:e4:
                    21:70:6a:65:f8:11:e3:ac:bc:f9:8f:17:1a:2a:4e:
                    70:64:c6:a9:64:76:b9:f6:27:c6:29:d8:ad:92:aa:
                    fb:d4:03:43:1f:4e:9d:48:ce:37:63:73:72:93:56:
                    6b:51:50:3f:30:fd:c2:6c:7b:52:ea:97:7a:f7:74:
                    ef:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:36:52:33:44:AE:5E:60:53:61:F1:2F:6D:5F:96:E4:C3:2A:E8:67
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145869.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac93::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:9a:df:6a:aa:ca:bc:3e:95:98:9d:cc:5b:39:a4:7c:7c:39:
         53:da:59:01:7e:02:a0:cb:b7:c5:28:c6:15:e4:f8:12:65:59:
         d6:39:87:ec:f8:da:79:9f:f8:e9:80:bb:bc:82:7d:ec:ad:8b:
         92:a5:ef:c1:c6:a7:fd:8b:1c:ef:a5:d4:cc:8f:ad:b6:4a:b9:
         b7:c9:f7:00:30:d1:cd:a4:42:20:66:a5:77:1c:dc:71:c3:12:
         77:d8:3e:71:bd:d1:28:4f:c6:49:57:32:e3:a8:de:69:e3:7a:
         c7:98:1f:67:2b:46:ec:6f:26:95:ee:e3:65:76:89:5f:59:be:
         eb:0a:44:db:79:ab:31:a7:a8:17:31:61:31:69:c7:4e:33:43:
         1e:44:09:64:81:6b:13:fd:f1:47:a1:d4:e2:91:99:51:6c:9d:
         ae:8b:fe:62:2e:8c:46:ce:31:0c:88:12:38:62:f6:a6:d9:b7:
         8b:c2:24:12:47:6a:e7:2b:39:98:0b:00:93:61:af:9d:fc:fb:
         80:04:88:cc:91:6a:66:7d:c0:74:1f:3c:5f:3c:e9:46:b4:bc:
         6b:b7:65:82:0c:3d:07:12:74:9f:c9:fe:ad:5b:e2:83:0e:7c:
         9b:9f:8b:fa:fd:5c:5e:f8:66:9c:d5:f2:ef:d2:b2:6f:7b:a5:
         2e:a5:87:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:11 2026 by rpki-client