Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145034.roa
File:                     AS145034.roa (raw, json)
Hash identifier:          GZalhZWOAy1oyKwzwzcSuQW/zj6X0bptLVwWbHu9MTk=
Subject key identifier:   A5:E0:F2:1B:DC:CA:23:A9:9F:89:55:70:CC:40:0E:52:69:79:DB:98
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       49C6971C2413C717159E96D3180686FD8C409734
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145034.roa
Signing time:             Mon 25 May 2026 02:22:46 +0000
ROA not before:           Mon 25 May 2026 02:17:46 +0000
ROA not after:            Mon 24 May 2027 02:22:46 +0000
asID:                     145034
IP address blocks:        240a:a950::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c6:97:1c:24:13:c7:17:15:9e:96:d3:18:06:86:fd:8c:40:97:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:46 2026 GMT
            Not After : May 24 02:22:46 2027 GMT
        Subject: CN=A5E0F21BDCCA23A99F895570CC400E526979DB98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:79:57:ed:e6:7b:be:f9:f5:5f:a9:75:36:c4:
                    94:93:20:5f:31:88:5c:81:18:36:0b:e5:b9:29:fe:
                    60:37:52:1e:a7:62:a9:12:79:bf:6d:24:28:00:09:
                    0d:13:56:d5:d6:10:c9:68:1f:da:57:06:db:be:95:
                    a5:dc:52:07:fc:9e:4c:79:15:a9:84:57:d1:48:d2:
                    9e:6a:71:69:bd:f4:45:2f:a4:c3:2e:60:fd:91:2c:
                    b2:f9:b4:e1:43:66:b2:bb:4e:ba:95:dc:8d:4e:e0:
                    22:f2:b2:03:d8:97:61:8f:99:af:e7:0b:4c:49:0e:
                    54:4f:1f:50:69:c4:88:5a:5e:d4:57:08:99:59:76:
                    62:be:38:5c:a5:d1:73:98:43:fc:aa:d2:16:8f:9f:
                    d3:d2:94:59:28:ea:37:a9:b6:bd:e4:3c:72:ba:13:
                    2d:9a:5e:bb:a2:8a:37:fc:bd:17:61:e2:06:07:54:
                    fd:e0:6e:98:4e:cc:4b:f0:9e:77:a1:f0:16:05:17:
                    61:c4:ae:99:a3:51:08:7a:1c:97:df:0d:f6:74:fc:
                    35:36:b2:c6:ef:a6:3f:ee:eb:cd:e2:60:24:5e:9b:
                    a7:d6:6b:d4:e7:ce:d3:5a:a7:a8:96:b8:41:a3:b7:
                    70:8b:78:96:fc:ae:c9:cc:ad:e4:c6:54:a5:b6:af:
                    5a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E0:F2:1B:DC:CA:23:A9:9F:89:55:70:CC:40:0E:52:69:79:DB:98
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a950::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:65:35:e8:bd:17:7e:a0:10:be:32:d2:e8:fd:b7:38:2e:cb:
         07:f3:e9:00:bd:64:ff:82:cb:f0:57:7d:86:56:94:0a:25:ee:
         b6:f3:52:aa:94:05:b1:9a:6c:ee:16:49:e4:71:23:28:9f:8e:
         58:c8:1b:0c:6b:e0:53:7f:41:3a:f7:0b:e2:9a:03:34:03:a7:
         cb:4d:ed:6c:54:89:08:5f:06:5e:04:1f:0c:6c:60:3b:b0:76:
         e9:a0:a1:d2:9a:a8:07:3c:4a:81:bb:6b:cc:d6:80:c8:49:6b:
         46:5c:bf:92:fa:73:59:5c:82:9f:ae:a4:43:04:d1:10:a2:e4:
         e9:0c:be:37:83:d7:dc:f9:fa:9b:d7:7c:34:52:33:55:aa:70:
         18:6c:02:d1:0c:ec:34:33:34:99:94:49:93:c9:d6:cc:73:c1:
         d2:ad:74:a1:c7:d9:81:c2:2d:0d:c8:67:8b:8a:7e:76:2b:97:
         b9:7f:51:9d:cb:63:fc:d2:73:ef:c5:93:46:47:e3:68:a5:5a:
         0d:f4:d9:f1:22:96:e8:15:a6:0e:6e:87:9e:2d:22:10:4f:ac:
         56:ac:7a:44:e4:e0:c9:13:d9:00:cf:8d:d7:8d:70:20:09:a7:
         c1:93:fd:60:77:67:d5:95:2a:9b:84:ae:81:8d:64:44:d2:3e:
         e1:96:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:16 2026 by rpki-client