Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145080.roa
File:                     AS145080.roa (raw, json)
Hash identifier:          yBJB0Fd3gAT9OnyAdA5q1+epZ5cKGUI8jKazjEv3RKo=
Subject key identifier:   C0:A5:C6:41:1A:7B:B7:03:1D:5C:63:ED:75:14:8B:D5:8D:B1:DF:D8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2E4994CDDEF94DB950697996C25F5FF196DA63C0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145080.roa
Signing time:             Mon 25 May 2026 03:19:43 +0000
ROA not before:           Mon 25 May 2026 03:14:43 +0000
ROA not after:            Mon 24 May 2027 03:19:43 +0000
asID:                     145080
IP address blocks:        240a:a97e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:49:94:cd:de:f9:4d:b9:50:69:79:96:c2:5f:5f:f1:96:da:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:43 2026 GMT
            Not After : May 24 03:19:43 2027 GMT
        Subject: CN=C0A5C6411A7BB7031D5C63ED75148BD58DB1DFD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:61:69:ff:82:a8:9f:1a:ce:17:e1:09:85:
                    73:49:96:4f:ef:14:ea:25:bc:db:a3:93:8e:49:cb:
                    8d:72:f1:da:95:d5:0e:91:c6:42:98:7a:3b:f2:c8:
                    8b:53:28:30:75:13:33:2d:1c:b6:7d:93:e2:27:58:
                    17:dd:57:86:17:7b:58:7c:63:e0:84:6a:25:1c:49:
                    5a:bf:4d:39:5d:47:63:b9:9d:cd:04:da:b0:1b:69:
                    d3:08:13:cb:8f:fd:2a:81:80:8e:5d:08:22:93:01:
                    b2:30:2d:fc:26:e2:35:b8:e4:04:62:d1:14:83:0c:
                    8d:79:f6:f0:ca:6e:96:2e:67:9a:be:eb:ce:a1:ab:
                    06:f1:ec:6c:ca:0c:70:df:2d:2d:65:49:fc:09:d5:
                    3d:f4:88:2d:58:3f:ea:80:fe:91:22:35:f3:ab:2d:
                    50:7f:0c:03:dc:6a:5e:df:e3:15:13:64:17:47:09:
                    c8:40:46:18:33:06:ca:06:93:24:d5:90:97:6e:b7:
                    98:70:0a:89:2d:4a:c4:69:dd:4a:63:75:09:b2:cc:
                    e9:8a:6e:32:a9:a9:83:fe:4d:86:6c:71:44:19:86:
                    18:1e:6b:6a:83:7b:bf:d5:e6:c6:e1:ab:9e:4c:d0:
                    4a:19:b2:d5:d8:f4:10:4a:0f:fa:e3:66:40:f2:1d:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A5:C6:41:1A:7B:B7:03:1D:5C:63:ED:75:14:8B:D5:8D:B1:DF:D8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145080.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a97e::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:3d:fa:06:53:2d:03:2a:e4:45:04:ee:d9:6a:3a:23:ee:15:
         21:95:f7:bb:6b:8c:b0:1d:d5:81:60:7d:39:f7:53:06:8d:6e:
         77:6b:b3:34:52:33:2e:75:ee:c6:51:c5:10:7c:f2:44:32:42:
         c4:46:3e:df:1c:6c:9f:7b:62:32:b3:f7:5c:1e:79:1b:f2:55:
         0b:8b:2f:fc:3e:1d:78:a7:cb:13:6c:ac:6c:2a:d5:c3:86:a2:
         ab:d5:12:05:69:d3:62:fc:53:4e:ca:6a:bc:4d:48:74:be:ad:
         dc:5e:84:40:7e:93:fb:4f:d5:8c:32:3b:9e:31:2c:53:8a:dd:
         63:f1:46:fc:2c:16:6a:d2:f6:4e:a6:75:f6:10:f7:18:f9:83:
         bf:f8:3b:ac:5d:33:79:43:c8:f0:79:92:6e:f6:b7:31:2a:f9:
         59:90:a8:ee:34:ec:a0:a3:1f:68:2a:d4:a0:63:4a:3d:7a:f7:
         06:c4:f7:27:9f:33:5e:37:c2:c1:1f:3d:e5:3e:62:be:93:28:
         a9:02:bc:10:ea:5c:7a:d5:b8:6c:e8:b2:81:8e:40:c2:b2:61:
         16:49:9a:04:bc:c6:51:eb:fe:9f:35:ef:b9:49:fc:58:d4:97:
         88:01:53:a5:05:87:5f:33:8f:4e:a2:53:1a:4a:f0:c3:b4:ae:
         86:59:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:18 2026 by rpki-client