Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145062.roa
File:                     AS145062.roa (raw, json)
Hash identifier:          jRbzsSFhR9OnpBoe7nIuYkGkNhABJivpfk5CaTG6TuQ=
Subject key identifier:   5C:31:85:F9:1F:DE:54:0E:B7:C4:62:14:32:B7:30:FD:1F:73:A5:7D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       23B2EA6F4170C02A9EBE598D9748D58515A9ED9A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145062.roa
Signing time:             Fri 22 May 2026 04:26:57 +0000
ROA not before:           Fri 22 May 2026 04:21:57 +0000
ROA not after:            Fri 21 May 2027 04:26:57 +0000
asID:                     145062
IP address blocks:        240a:a96c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b2:ea:6f:41:70:c0:2a:9e:be:59:8d:97:48:d5:85:15:a9:ed:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:57 2026 GMT
            Not After : May 21 04:26:57 2027 GMT
        Subject: CN=5C3185F91FDE540EB7C4621432B730FD1F73A57D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:3c:94:97:02:3f:e8:e4:b2:1c:c1:7e:e2:
                    2d:40:69:18:7d:7b:61:15:84:f3:70:69:df:f7:8d:
                    f9:3c:f2:83:58:97:46:c0:f0:b3:bc:d5:8e:38:96:
                    7d:88:0e:f6:5e:4e:88:6d:54:d9:be:d9:68:98:a3:
                    02:00:e7:eb:6f:af:4f:45:12:a3:8b:81:93:ed:ac:
                    bc:44:47:61:3c:d5:0a:dd:31:0f:42:10:1b:83:13:
                    ec:9a:3e:d9:c5:af:aa:3f:05:cc:94:8e:ee:87:ab:
                    0c:88:c8:b5:3d:f6:e8:2d:af:2a:ff:3f:92:32:b0:
                    ae:f1:a7:32:d1:48:f6:bd:f3:52:b0:0b:af:6d:16:
                    1a:33:04:26:7b:c1:85:26:26:69:c3:34:1b:4e:c0:
                    e0:2e:a7:92:dc:ae:39:2d:23:fc:a5:7d:d8:a8:8b:
                    2f:f7:e9:72:a3:f4:f6:ff:6e:36:7f:5d:67:5c:fc:
                    46:da:56:be:67:b3:db:d7:30:be:a6:4e:66:ff:57:
                    d8:db:f3:a9:7e:73:76:58:4c:7e:3a:0f:e9:22:0a:
                    5b:36:38:19:19:f2:a8:59:36:bc:c8:e0:2a:63:c2:
                    bd:35:2e:09:72:74:54:e5:34:fe:27:bc:56:9d:30:
                    62:b6:f1:cf:84:17:8f:b9:66:3d:e2:66:35:64:60:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:31:85:F9:1F:DE:54:0E:B7:C4:62:14:32:B7:30:FD:1F:73:A5:7D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145062.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a96c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:9d:ff:21:d1:69:dc:34:23:c1:cb:48:84:22:3c:53:a6:0d:
         51:4b:49:13:68:9d:b8:cb:fc:4d:fe:fc:ee:db:5a:78:bf:cc:
         a8:78:6a:5d:b3:df:f5:22:9d:93:31:99:0c:17:60:02:35:70:
         45:58:af:2a:48:8e:a5:71:2c:f7:fb:7c:6c:87:ef:02:06:f0:
         51:1f:5f:a5:24:80:e0:83:e0:45:ef:2c:9c:79:ee:7c:e3:74:
         4c:07:52:fe:1e:d4:97:1e:54:57:ea:37:81:f0:bc:cd:c9:6b:
         3c:b3:f0:19:0a:03:b3:c6:34:21:ba:db:2f:a5:4d:b3:75:ec:
         cc:c0:79:b5:d3:e4:13:22:bb:fd:f1:35:2b:cf:e9:b4:75:ae:
         0b:fb:02:ef:84:66:85:d7:08:a1:1b:56:ed:d0:9d:cb:0d:f0:
         6e:2e:6c:e2:61:ff:7c:b3:bd:af:7e:7a:fe:7a:54:3d:d4:05:
         a5:6f:03:5c:df:31:b3:65:4d:0c:7d:5a:53:e9:ec:a9:5b:4d:
         7c:15:b2:ce:7d:e2:3a:3a:37:72:bd:44:bf:49:54:a3:30:58:
         59:f8:34:f3:4c:f9:0f:1f:bf:1c:a7:3f:43:ee:a6:f2:89:6e:
         11:57:b4:37:f2:31:c9:d8:db:37:b9:d2:f2:89:cc:f2:8d:6c:
         b4:3e:64:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:18 2026 by rpki-client