Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145088.roa
File:                     AS145088.roa (raw, json)
Hash identifier:          +6n/kjmS+sML4tSmk33fIqN23H9sedMN1D2yterJ6CU=
Subject key identifier:   22:45:50:E8:E8:AE:7C:3D:35:E3:D8:F5:92:19:25:BC:D3:66:42:E9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6A6193CA3D6478F57140F689F7FFA1F8C79A19C8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145088.roa
Signing time:             Fri 22 May 2026 06:46:29 +0000
ROA not before:           Fri 22 May 2026 06:41:29 +0000
ROA not after:            Fri 21 May 2027 06:46:29 +0000
asID:                     145088
IP address blocks:        240a:a986::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:61:93:ca:3d:64:78:f5:71:40:f6:89:f7:ff:a1:f8:c7:9a:19:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:29 2026 GMT
            Not After : May 21 06:46:29 2027 GMT
        Subject: CN=224550E8E8AE7C3D35E3D8F5921925BCD36642E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:e8:22:b8:6d:fa:01:98:92:df:a8:cb:f8:
                    bd:5d:48:c7:46:e2:5f:91:e0:17:ce:a3:a0:25:e2:
                    db:50:38:ed:4b:58:42:6a:a8:63:b5:30:6e:d0:19:
                    81:bf:ef:4f:56:f0:ed:d2:bf:34:97:7f:8a:2e:3c:
                    df:7b:37:63:d8:eb:a4:13:2a:41:f7:67:6f:57:e0:
                    71:94:3e:52:50:df:df:2c:65:1d:95:a9:d2:25:37:
                    b8:bd:25:9c:57:58:86:30:0c:33:97:60:af:ef:31:
                    cb:37:80:cd:34:87:c9:72:38:bb:3b:8b:d3:bb:ac:
                    b5:32:96:9c:9b:5d:d2:3d:27:85:c0:fc:88:79:ca:
                    55:95:19:a4:4d:1e:94:5e:d7:76:dd:24:89:f3:af:
                    b8:fc:2b:f3:0c:19:41:8b:ce:ac:a8:0b:a6:25:97:
                    f9:a1:2f:f8:22:46:be:b1:c4:d3:cf:68:57:de:76:
                    e4:65:35:a8:04:b6:30:a9:cf:d3:cb:e6:3a:8a:c9:
                    3f:68:f2:ab:ca:c4:0d:40:4e:68:83:45:c5:29:4e:
                    d9:2b:ed:a3:90:3d:86:c8:ee:dd:fc:de:9d:18:3a:
                    ec:73:26:5b:8c:a9:03:00:94:e1:6c:2c:33:d6:ee:
                    eb:0b:70:71:55:90:33:9b:75:eb:1e:26:59:cc:d8:
                    b1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:45:50:E8:E8:AE:7C:3D:35:E3:D8:F5:92:19:25:BC:D3:66:42:E9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145088.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a986::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:dd:89:4c:50:07:dc:5b:8e:f8:b3:5b:83:a2:52:45:42:8e:
         52:69:56:9e:40:1c:40:84:e1:bb:5c:4d:5a:bd:0f:64:7a:81:
         04:63:21:bf:f2:37:83:7d:35:66:ab:ee:75:89:d6:89:84:73:
         f0:4e:31:d8:7e:19:11:33:c6:cb:f2:48:4c:b1:ed:f4:07:72:
         6a:ad:55:7b:a1:8a:fd:10:8d:f8:48:94:e1:be:02:fa:96:c0:
         58:af:2a:60:57:fa:13:f9:92:a5:13:17:44:a9:60:e3:68:06:
         33:b8:4d:e7:2d:8e:4a:af:9d:ab:a1:a0:1f:2d:ae:55:26:c3:
         9d:33:f3:e0:c6:06:7f:73:c4:65:ac:20:ab:43:ae:dd:20:22:
         f7:41:6d:8a:97:a6:10:08:b8:39:32:c4:c6:a5:03:2f:f5:57:
         0e:f4:9d:98:be:bc:f4:3d:f9:55:15:0b:0b:be:54:38:a2:32:
         a6:02:6b:ca:f2:36:a1:c8:1e:4e:c5:81:76:88:b2:6e:50:c5:
         6b:e8:a2:3a:61:bd:71:34:10:c8:5b:cc:e9:a8:04:8c:a2:02:
         60:d0:61:f4:ce:b8:bb:46:d2:39:21:11:6e:e8:44:b1:2f:79:
         67:11:9b:1c:c7:e8:01:6c:3a:3e:cc:80:40:ad:1f:25:4e:04:
         fc:b7:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:33 2026 by rpki-client