Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145001.roa
File:                     AS145001.roa (raw, json)
Hash identifier:          EX2qoSon0nX71eiI+dAbfSOGTNZ7f+xyVGy7CuvVGd4=
Subject key identifier:   7D:9A:66:9B:A1:69:C6:C8:2C:18:0D:4A:86:7C:89:10:1F:28:71:66
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       635F4C0BEDF0B6BD6338E72A445163E43BFD55B6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145001.roa
Signing time:             Fri 22 May 2026 06:27:46 +0000
ROA not before:           Fri 22 May 2026 06:22:46 +0000
ROA not after:            Fri 21 May 2027 06:27:46 +0000
asID:                     145001
IP address blocks:        240a:a92f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5f:4c:0b:ed:f0:b6:bd:63:38:e7:2a:44:51:63:e4:3b:fd:55:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:46 2026 GMT
            Not After : May 21 06:27:46 2027 GMT
        Subject: CN=7D9A669BA169C6C82C180D4A867C89101F287166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:51:94:97:4c:f9:23:4b:c7:06:9d:99:59:
                    38:01:e6:d8:cc:c0:91:d9:4c:25:56:ee:e0:73:79:
                    9b:cc:e5:2a:27:3b:b9:e9:8e:a1:6f:8c:fb:20:70:
                    37:af:11:60:f1:17:c0:85:56:ac:e1:b0:59:c5:82:
                    ac:cc:a2:cb:38:54:1f:24:01:cb:05:3e:5b:36:b8:
                    2e:52:cd:a5:2b:3d:e2:32:2d:92:fd:30:97:2c:3c:
                    20:54:69:95:fc:5d:b7:8a:3b:9a:a4:b4:d7:bb:04:
                    5f:4e:06:75:b2:29:42:2a:07:a9:6e:f4:05:2e:c8:
                    87:15:7a:94:39:67:87:16:53:8f:40:51:78:d2:be:
                    6e:d8:67:b8:c3:ed:01:fc:a9:a0:8f:6f:3e:9b:20:
                    10:57:e3:c3:21:1a:f5:3b:cb:35:7d:90:b4:57:c2:
                    f6:d4:30:ca:d1:2c:0f:98:14:ae:3a:6f:b6:d4:7f:
                    a1:10:6d:45:62:24:ef:2d:57:04:0b:e6:e3:3d:90:
                    6e:5e:bd:8e:5f:f8:13:0c:5d:e6:39:b1:43:99:c9:
                    6d:c1:d1:da:ce:11:94:4a:86:7a:2f:b9:92:06:67:
                    6d:a5:27:fb:a4:7d:e4:71:dc:fb:42:72:d9:19:a2:
                    cf:39:5f:3c:7f:26:2a:8c:88:93:a3:23:4c:44:0e:
                    21:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9A:66:9B:A1:69:C6:C8:2C:18:0D:4A:86:7C:89:10:1F:28:71:66
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145001.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a92f::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:4e:f2:91:c8:6a:3c:44:d6:21:b4:87:34:21:6b:dd:b7:2f:
         33:d8:b7:f7:0c:f3:50:e5:a8:22:3e:27:3a:d6:f3:b5:20:17:
         1a:9c:8c:24:0b:a1:64:72:49:b9:2b:db:cf:a9:6a:8d:f3:b2:
         86:e9:50:f8:fb:4d:e3:e1:9a:c3:de:be:e1:cf:85:e8:26:73:
         77:56:a2:4a:23:52:7f:81:f5:15:7f:80:8c:e5:17:03:16:93:
         1f:97:40:29:6b:c0:d1:e9:fc:5e:18:bc:d6:0e:11:f2:b9:59:
         e8:b4:b9:f2:b8:1f:b2:60:b3:82:2f:10:b3:5a:0a:e8:50:58:
         4b:46:45:2f:9b:2b:e1:26:c2:37:f1:db:d0:71:1f:8c:75:3b:
         a5:4a:dc:a4:72:7c:6b:5d:ac:a6:2e:ab:53:23:ea:b8:b7:22:
         49:ac:80:64:5e:bc:d4:f1:59:24:a5:b1:c7:ab:69:02:e2:29:
         06:06:6c:e9:f5:aa:6b:46:ba:e1:bb:bc:05:c8:c0:65:3a:da:
         21:8c:1a:2e:76:89:d8:09:5f:1b:38:7d:52:c5:eb:08:68:ce:
         77:7e:ea:03:08:c6:b7:b2:06:21:05:05:3f:44:c2:0e:f7:3c:
         a4:2a:2e:21:e7:17:bb:e4:fa:7b:3f:e3:95:48:5e:3e:dd:67:
         e2:87:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:25 2026 by rpki-client