Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145924.roa
File:                     AS145924.roa (raw, json)
Hash identifier:          TfORpD3PT4Zoe8fxXqxxmZlN56OWUgLDBVEHgkEv5cg=
Subject key identifier:   BB:D9:C7:41:1E:2D:A0:1B:8E:D7:22:58:CA:D9:4D:CD:58:00:1E:EE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       16397940793AF4759C57B91676891A384D98B861
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145924.roa
Signing time:             Fri 22 May 2026 01:50:37 +0000
ROA not before:           Fri 22 May 2026 01:45:37 +0000
ROA not after:            Fri 21 May 2027 01:50:37 +0000
asID:                     145924
IP address blocks:        240a:acca::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:39:79:40:79:3a:f4:75:9c:57:b9:16:76:89:1a:38:4d:98:b8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:37 2026 GMT
            Not After : May 21 01:50:37 2027 GMT
        Subject: CN=BBD9C7411E2DA01B8ED72258CAD94DCD58001EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:20:8a:a2:01:8a:68:77:30:39:c7:dd:a7:
                    d2:44:71:19:d8:bd:f5:13:dd:93:e2:6a:7b:d4:95:
                    e4:36:44:e6:e9:e9:bd:c1:d8:68:42:48:3a:29:73:
                    95:87:3d:be:28:48:de:d6:57:c8:13:3c:92:eb:d4:
                    79:ae:f2:9c:58:f5:62:4e:f6:af:88:5e:8c:c5:77:
                    e6:77:e7:9a:a0:c2:fe:d8:72:50:3c:34:17:8a:42:
                    96:df:01:9d:75:8b:6b:7f:3a:9f:90:5c:6a:ec:ff:
                    ea:51:95:01:59:75:57:ed:5e:f6:f9:ac:cd:a5:3f:
                    96:16:03:62:28:44:0a:0e:93:cc:bf:df:d3:8c:a5:
                    fa:35:87:cf:e6:26:dc:fa:aa:0f:6a:34:13:0d:7e:
                    06:ba:f5:bd:f9:4d:23:23:6f:a0:ad:d1:74:d7:ba:
                    a2:b2:fd:0e:52:94:1e:bb:16:e7:47:c2:7b:5f:18:
                    8c:c9:12:63:72:be:33:76:f3:02:e5:62:89:a2:ce:
                    85:04:df:e5:55:8b:98:32:7d:bc:12:2f:20:01:40:
                    93:eb:5c:d5:eb:b9:f8:c3:34:3b:2b:88:7a:bb:ee:
                    d2:65:0d:7e:9f:c1:f6:99:df:d4:cd:dc:93:61:cf:
                    8f:c9:7b:47:18:53:24:b3:5d:ad:53:91:8d:0c:90:
                    12:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D9:C7:41:1E:2D:A0:1B:8E:D7:22:58:CA:D9:4D:CD:58:00:1E:EE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145924.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acca::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:74:a6:53:02:81:c5:6e:79:d0:cb:0a:f2:f2:43:40:f3:13:
         f4:76:61:4c:b2:96:a9:5c:d6:02:11:12:71:95:45:43:1c:c8:
         91:ed:73:e6:2d:6c:05:ea:79:8f:0c:ab:1b:19:10:91:f2:94:
         19:8c:b4:4e:8f:e7:17:dd:24:24:d7:f9:9a:d0:a6:80:79:45:
         d5:13:db:31:1e:ab:29:df:1c:5f:09:cb:1a:74:05:d7:4e:cf:
         65:ec:7c:7b:83:f6:d8:0f:bb:31:86:71:f0:6b:64:1b:d7:60:
         6e:bf:6e:46:75:6d:be:cc:ad:27:86:36:83:69:f8:ca:31:0b:
         1c:bd:92:55:1d:73:0f:df:93:7a:e2:49:2a:a2:37:ae:72:ab:
         c2:61:56:3b:a8:30:3c:37:0e:29:69:ea:29:78:43:1a:d5:ca:
         4b:78:8c:9d:cf:be:9c:40:cc:b3:ba:e6:01:52:6f:4e:02:90:
         01:76:fc:2f:ac:e2:76:90:92:67:02:5c:18:c3:15:09:1c:15:
         2e:74:b6:de:7a:9c:a2:ec:9e:47:7f:d4:46:46:87:af:51:a3:
         dc:8b:f3:39:0a:d3:55:f1:8b:bb:48:56:21:87:fc:e7:5e:4c:
         2d:fa:31:4f:ce:b4:fc:c5:0c:c0:9a:e8:9e:11:4a:7f:68:6f:
         0f:5f:81:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:55 2026 by rpki-client