Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145110.roa
File:                     AS145110.roa (raw, json)
Hash identifier:          6QUJW5M3B/wy+JqQT+V+53dur9vqJxLDduAKQFtyhjU=
Subject key identifier:   93:A9:79:56:EA:C6:96:51:B2:4A:EB:FA:09:4A:CF:38:C1:9D:AF:6F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7A1CD6349CE4FCCABEF0CED61D7EBC0A954729EA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145110.roa
Signing time:             Fri 22 May 2026 07:32:34 +0000
ROA not before:           Fri 22 May 2026 07:27:34 +0000
ROA not after:            Fri 21 May 2027 07:32:34 +0000
asID:                     145110
IP address blocks:        240a:a99c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1c:d6:34:9c:e4:fc:ca:be:f0:ce:d6:1d:7e:bc:0a:95:47:29:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:34 2026 GMT
            Not After : May 21 07:32:34 2027 GMT
        Subject: CN=93A97956EAC69651B24AEBFA094ACF38C19DAF6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:41:47:8e:8e:0f:e4:bb:d4:0d:ed:34:1b:
                    61:a3:56:d5:f7:29:80:8d:bf:22:16:42:ea:f6:cd:
                    08:a8:ef:8c:1c:79:d6:02:8e:6b:d2:d2:3a:44:7c:
                    38:69:c9:5f:62:a2:c6:a4:75:d8:cf:7c:66:91:00:
                    14:94:86:d7:5d:53:0c:27:44:45:23:17:ae:65:98:
                    6a:c4:38:83:55:3a:1a:df:20:cb:ea:90:3e:0e:54:
                    92:b5:33:59:78:eb:b1:4a:c0:21:52:8d:6c:a3:49:
                    95:c8:8d:d4:85:3b:36:d2:94:77:7b:8d:af:ac:62:
                    3e:89:51:97:9d:d5:b7:c6:04:35:de:97:a2:27:0e:
                    90:b0:86:83:0c:5f:b5:50:72:ff:be:c0:79:36:eb:
                    ad:f3:35:5a:31:d1:67:7f:c0:3a:c7:5a:f1:85:33:
                    96:0f:36:b9:76:ec:9d:89:a9:65:3a:dd:80:de:75:
                    89:dd:9f:ea:47:e1:3c:db:95:3e:b5:14:e5:db:9f:
                    72:b9:97:09:82:75:08:99:b2:a5:42:6d:f9:e9:83:
                    ae:a2:47:9f:5b:fa:92:96:bd:a2:0a:25:84:fc:12:
                    90:bc:17:72:46:f7:fb:90:60:7f:38:8b:dd:ea:93:
                    04:88:27:5a:50:96:e0:82:7e:3d:45:5e:c1:94:00:
                    0c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A9:79:56:EA:C6:96:51:B2:4A:EB:FA:09:4A:CF:38:C1:9D:AF:6F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145110.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a99c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:ef:29:2d:75:4a:ce:ee:dd:4f:6c:9a:5b:d7:1b:45:3f:a0:
         27:ed:37:f5:5d:2f:55:0a:e5:bd:ce:45:bb:2a:53:c5:bb:7e:
         3d:58:64:ac:e2:08:c6:f2:08:92:4a:22:ab:5b:a3:3c:7f:d7:
         31:44:c4:5e:b3:73:bc:0f:4a:32:99:26:86:0c:ee:39:0c:03:
         37:c2:00:45:da:d0:f8:6f:61:eb:1f:db:f8:66:db:0a:39:a7:
         5f:fb:eb:16:cd:bb:1e:73:be:57:54:fe:4e:93:a6:b1:1f:06:
         3f:42:b8:4c:64:6c:12:ee:6e:8d:3b:d5:ef:98:7a:31:91:a9:
         43:00:e6:43:d7:6c:f6:3b:4a:8c:2e:b7:ec:77:cb:ba:28:f6:
         1f:2f:41:b7:43:12:8d:6e:bc:0f:1e:ac:6f:2e:ca:4d:ec:b2:
         9c:64:3e:03:85:5e:23:12:30:14:e5:fe:e3:f9:b8:32:8e:f3:
         de:c6:39:b7:e4:03:8c:ba:13:6e:0d:2d:7b:5e:41:68:67:33:
         db:a9:42:46:a0:0b:97:0e:58:b8:ce:48:8e:37:2d:70:34:38:
         11:ae:db:75:84:e2:5f:15:29:73:26:06:9d:11:f7:d4:f5:47:
         b9:2c:2f:6f:1a:bd:5a:74:2a:26:7b:c9:a2:d0:fd:b8:59:86:
         f6:0e:f3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:57 2026 by rpki-client