Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145092.roa
File:                     AS145092.roa (raw, json)
Hash identifier:          jlewpTufkgoOaVLL77OiDQmu7HidX9rwtqeTvpcr/PU=
Subject key identifier:   91:71:38:6C:D2:C6:8C:CD:54:25:23:44:25:A2:9B:10:AE:9E:3A:85
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7BF628D6B6CDE3751CF0FBA8CDF39972D6EBC41C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145092.roa
Signing time:             Tue 26 May 2026 06:12:44 +0000
ROA not before:           Tue 26 May 2026 06:07:44 +0000
ROA not after:            Tue 25 May 2027 06:12:44 +0000
asID:                     145092
IP address blocks:        240a:a98a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f6:28:d6:b6:cd:e3:75:1c:f0:fb:a8:cd:f3:99:72:d6:eb:c4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:44 2026 GMT
            Not After : May 25 06:12:44 2027 GMT
        Subject: CN=9171386CD2C68CCD5425234425A29B10AE9E3A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:c4:43:c0:d0:bf:2a:5d:2f:cc:7d:41:a2:
                    e9:48:e5:d0:b3:5f:bb:bb:15:dc:f3:21:57:98:1f:
                    3e:09:c5:00:70:38:96:56:2e:ae:15:c2:f9:4f:8b:
                    cd:81:2c:7f:8b:74:ae:96:1e:b4:80:00:b6:6c:24:
                    a1:26:55:09:e4:63:c0:0e:aa:10:07:27:5d:10:67:
                    bf:fb:f4:6b:b1:1f:79:bd:01:50:be:10:b1:d3:ea:
                    87:76:5e:0c:19:1b:0b:75:34:06:ad:2c:f4:13:6d:
                    3b:91:62:0b:ad:25:11:dc:12:5f:c1:b0:5e:15:51:
                    56:c6:d9:91:4d:37:c7:8c:db:bd:ef:da:07:b9:a9:
                    10:80:95:68:31:e6:0c:ff:a7:ec:d8:c9:21:08:3e:
                    4e:8d:b5:fb:0c:7b:fd:3a:da:ef:61:28:90:c4:f9:
                    1b:b2:e5:ba:ac:87:cb:8e:3b:e3:90:0e:51:40:ad:
                    31:4c:ea:b4:fb:d1:96:a5:46:bd:e1:0e:65:51:53:
                    ee:3a:39:95:71:2d:e3:77:2c:6c:99:50:e5:90:2d:
                    82:00:13:c3:35:b1:af:7f:62:43:4f:6e:0f:eb:b2:
                    ad:b7:eb:22:3c:43:21:70:3d:4e:73:41:bd:64:e3:
                    53:c7:92:c7:7f:f6:ea:74:3f:eb:0d:46:f7:a7:e3:
                    89:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:71:38:6C:D2:C6:8C:CD:54:25:23:44:25:A2:9B:10:AE:9E:3A:85
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a98a::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:3e:d1:c0:3f:62:8d:e7:b9:ec:ce:d2:ed:d8:de:d2:9c:4d:
         9f:d1:eb:e3:bc:cc:68:ab:8a:a8:62:a0:aa:77:ed:5d:42:6d:
         9a:3b:57:3a:61:9a:2f:0a:5e:56:e6:f1:a0:10:e2:17:68:3f:
         c2:58:3b:b6:ba:1e:88:f4:ac:3d:df:75:3f:fb:59:a7:9f:62:
         bb:67:ca:50:53:b9:7a:38:b2:bf:99:94:b6:39:a4:e5:40:43:
         50:cb:c6:08:d6:28:c6:b4:fd:db:fd:ef:56:bc:f8:aa:13:bc:
         4c:ff:69:b5:82:b4:0e:28:5a:12:00:58:48:69:d3:f4:1b:d1:
         8f:44:29:66:e5:44:b0:21:e7:32:54:bb:29:02:33:c6:67:af:
         26:06:a5:33:24:79:21:cd:41:04:16:e4:78:32:e8:c3:db:88:
         01:95:94:cf:cb:27:ab:f8:ca:8e:62:49:46:fd:b4:f4:af:1f:
         28:1b:22:cb:0d:52:4d:45:af:63:53:11:0d:5b:f9:0f:c2:0e:
         c0:dd:e4:8c:be:4f:c2:fa:45:2e:8a:58:89:89:9f:a3:77:46:
         b4:a1:76:9d:34:c5:f2:36:1c:4c:c7:b2:e6:60:a4:34:c2:5a:
         93:f9:60:11:ba:df:81:29:d7:a1:89:5f:74:be:dd:55:cc:cc:
         ef:75:80:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:33 2026 by rpki-client