Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145910.roa
File:                     AS145910.roa (raw, json)
Hash identifier:          bdJca7X0ci6Q7gaxjw4cy+Gx+xa4WXS8+yTBWqllLAE=
Subject key identifier:   E9:E2:45:FF:E5:3D:63:1D:EE:62:1F:F3:C6:7C:97:29:CD:A2:91:CF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       613DC71A82F63AB7653068DE4239296DB5397816
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145910.roa
Signing time:             Mon 25 May 2026 01:38:14 +0000
ROA not before:           Mon 25 May 2026 01:33:14 +0000
ROA not after:            Mon 24 May 2027 01:38:14 +0000
asID:                     145910
IP address blocks:        240a:acbc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3d:c7:1a:82:f6:3a:b7:65:30:68:de:42:39:29:6d:b5:39:78:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:14 2026 GMT
            Not After : May 24 01:38:14 2027 GMT
        Subject: CN=E9E245FFE53D631DEE621FF3C67C9729CDA291CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:27:33:6d:4e:7a:24:88:a5:8a:58:16:e0:
                    a9:57:23:9b:19:c9:02:3b:c4:a6:e3:db:bc:e0:77:
                    31:95:33:02:7c:e5:2b:0b:e1:de:44:86:0c:08:f8:
                    26:f2:da:76:61:31:2d:be:78:0b:a8:fc:7d:ef:c3:
                    4d:63:5a:ef:04:70:be:5a:f7:20:65:e8:aa:d2:65:
                    6d:68:33:c0:ed:d9:a3:96:5f:20:39:83:94:e0:e9:
                    dd:53:ef:ba:79:52:86:45:87:05:ea:e1:c5:2c:c0:
                    35:70:a7:6a:87:5c:bd:2c:dd:d8:5d:23:52:b1:35:
                    96:8b:d0:16:17:15:04:c1:88:c1:5a:13:1c:5d:7e:
                    0f:4c:5e:24:c6:00:3a:de:fa:f5:4c:31:d2:c2:25:
                    6a:a5:2d:22:d2:1b:ef:da:2f:73:6d:57:3b:c0:3d:
                    80:bd:4d:ce:01:0c:c2:ff:e3:81:63:e9:fd:68:d5:
                    77:c3:bc:0d:a8:bf:62:f8:6e:a2:c1:a5:66:8f:32:
                    68:d6:ab:ff:2c:97:ad:7d:2a:37:d0:40:d9:5d:1b:
                    77:d9:df:75:1f:8f:65:ff:86:16:bd:a6:29:eb:4c:
                    33:3b:5d:71:58:8f:69:54:30:c1:13:49:7a:96:57:
                    e7:4a:b9:3e:13:20:a9:61:f1:ba:37:35:9b:df:ac:
                    61:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E2:45:FF:E5:3D:63:1D:EE:62:1F:F3:C6:7C:97:29:CD:A2:91:CF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145910.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:28:95:2c:26:57:c6:ef:59:e6:57:7a:79:67:03:93:dd:20:
         f0:bb:9c:df:f3:3b:bb:42:33:6c:92:4d:ef:73:39:b8:c5:bb:
         91:d2:06:ab:8a:19:4b:82:66:62:bc:94:f8:35:4e:e4:f6:04:
         df:07:9c:aa:a0:77:76:9c:2e:6b:9c:ad:b9:3b:77:21:e3:94:
         41:c0:ca:8a:48:14:8a:bd:87:7d:4e:6b:90:de:21:e9:87:fe:
         83:cc:1a:b0:a0:ed:b8:91:05:30:7e:32:85:1c:bb:65:94:a8:
         19:48:75:ab:e8:e9:59:dc:70:aa:65:2f:dd:32:58:a6:7a:39:
         a8:e0:4a:c5:51:a5:fb:d7:fb:6a:40:9c:69:03:e1:8a:fd:57:
         6d:1c:cb:d7:df:6f:80:b3:66:f5:96:cf:75:f8:c3:da:7b:b2:
         9e:6d:ce:93:7b:0b:fd:9e:c9:d8:a4:0e:2d:9b:a2:eb:b9:14:
         29:dd:fa:e4:84:4f:b1:32:eb:0c:7d:4f:13:db:48:43:c8:ee:
         f8:ac:27:13:9f:cd:19:e3:9f:04:03:f7:e5:aa:b4:e6:95:38:
         32:a9:3e:54:7b:cc:4a:88:3d:1f:75:78:bf:db:40:9a:a8:c8:
         3a:b7:9c:3f:3f:d7:ec:45:dd:ed:f8:27:3d:9b:e1:d6:d5:20:
         8f:c7:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:11 2026 by rpki-client