Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145050.roa
File:                     AS145050.roa (raw, json)
Hash identifier:          SYYXGvRrTaDh82MGSmhJ8tAZMrQdPCXSl5e6ccYW6uc=
Subject key identifier:   C5:15:32:A6:C8:84:6F:EC:4B:D1:6A:77:ED:87:19:B7:0F:7B:EA:08
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       25504598E558004C82EC147365713ED18057CBEF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145050.roa
Signing time:             Tue 26 May 2026 01:13:12 +0000
ROA not before:           Tue 26 May 2026 01:08:12 +0000
ROA not after:            Tue 25 May 2027 01:13:12 +0000
asID:                     145050
IP address blocks:        240a:a960::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:50:45:98:e5:58:00:4c:82:ec:14:73:65:71:3e:d1:80:57:cb:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:12 2026 GMT
            Not After : May 25 01:13:12 2027 GMT
        Subject: CN=C51532A6C8846FEC4BD16A77ED8719B70F7BEA08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:15:c2:7d:2f:3a:12:dd:aa:5c:37:18:b8:5b:
                    b6:0a:6f:50:98:9e:4c:25:6e:f7:bc:fe:df:41:35:
                    d4:b7:05:4f:9e:59:fb:c1:f7:91:3c:9e:24:f5:16:
                    50:cc:dc:04:c8:8d:d5:ee:f9:e9:a5:a1:2d:99:e5:
                    8d:4e:38:34:1d:06:6c:f5:ee:e3:35:5e:74:d3:e1:
                    f6:4a:ed:0e:a4:30:50:2a:fd:f8:69:f6:fb:bb:1f:
                    9b:d4:99:5f:58:59:09:95:b9:03:b3:b8:79:71:33:
                    bb:d8:f0:3e:09:50:ca:fb:14:84:84:a1:74:15:cb:
                    1a:88:c8:85:c2:48:ab:95:b5:4a:b1:7b:9d:90:1f:
                    77:03:4b:c5:9e:e7:7b:9f:c9:95:3b:15:54:b2:ae:
                    2a:ae:a4:f2:bb:bf:29:7f:2f:4c:23:3a:c4:89:65:
                    b9:77:e2:72:53:51:c6:9a:15:32:8b:83:68:e7:fa:
                    f8:f2:9b:28:25:3c:99:3c:d2:47:6d:13:4f:01:30:
                    81:88:02:ea:cd:7b:2c:2b:53:45:5b:57:ef:36:7b:
                    f2:10:88:ab:58:59:73:e7:39:a4:b5:a6:bd:7b:81:
                    f6:30:a9:dd:41:eb:7e:f0:d4:a5:64:47:a1:61:3b:
                    f3:e6:29:2a:6f:91:c2:31:e2:bf:46:90:24:6a:f0:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:15:32:A6:C8:84:6F:EC:4B:D1:6A:77:ED:87:19:B7:0F:7B:EA:08
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145050.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a960::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:81:c4:27:6d:13:d0:f4:be:1e:9e:db:76:df:fa:e7:b4:e0:
         0a:a0:d5:a0:b0:f7:74:91:86:44:22:40:b7:da:54:25:bc:68:
         43:0b:f7:01:45:d5:1c:42:ca:c9:fd:7c:2f:3d:bd:33:b3:11:
         de:b0:ec:c1:05:70:93:bf:c1:6a:ef:e1:7f:19:27:43:18:c3:
         11:74:14:5b:64:56:f1:6f:28:68:01:cd:53:4b:c9:29:ef:c1:
         27:dd:71:3d:7a:81:cd:74:01:9c:6a:39:fd:df:76:2c:37:a9:
         02:4f:a8:9a:dc:19:b6:50:16:f4:4e:dc:c0:6a:2c:df:ea:22:
         80:fc:92:6e:cd:09:58:a0:7a:ad:3d:b5:e5:c9:32:7e:18:b8:
         89:04:6e:0a:5c:81:7d:aa:59:2f:4a:01:f1:f3:cd:0f:a9:7e:
         2e:92:c7:01:3d:2f:e1:a6:da:dd:f1:35:e8:43:7d:09:b6:b5:
         9f:c5:df:a9:da:34:7b:1d:a3:0b:38:58:67:f2:bc:69:d5:7b:
         bc:b3:97:ae:f7:32:58:c8:47:57:67:e5:78:77:64:57:b8:3b:
         6a:f8:3d:7c:1c:45:06:88:a3:f3:26:aa:8b:d0:43:e7:f3:16:
         1d:03:70:2e:95:b1:91:ad:a8:fd:e5:82:2d:3e:4f:85:9e:a1:
         15:0f:08:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:49 2026 by rpki-client