Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145146.roa
File:                     AS145146.roa (raw, json)
Hash identifier:          e/KI5782eLfcGf9HiR8KXaL3cYMMRG6yvNxodp8N5QA=
Subject key identifier:   79:69:5D:B8:9D:BB:AB:13:65:96:EA:3F:BB:4E:2D:DE:1E:5A:67:76
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0973C0B761D33A8608455D801CFF12D7EECCF1C0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145146.roa
Signing time:             Tue 26 May 2026 06:13:02 +0000
ROA not before:           Tue 26 May 2026 06:08:02 +0000
ROA not after:            Tue 25 May 2027 06:13:02 +0000
asID:                     145146
IP address blocks:        240a:a9c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:73:c0:b7:61:d3:3a:86:08:45:5d:80:1c:ff:12:d7:ee:cc:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:08:02 2026 GMT
            Not After : May 25 06:13:02 2027 GMT
        Subject: CN=79695DB89DBBAB136596EA3FBB4E2DDE1E5A6776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:57:7d:12:a7:a8:c4:05:43:d8:e6:86:98:
                    c5:bf:95:e2:4a:59:db:b9:51:79:3a:ee:6f:f5:8c:
                    0b:b4:a8:04:7a:bd:c1:bb:f8:b7:79:4f:7e:4b:fe:
                    33:5b:94:80:12:6b:1f:40:4d:9e:7d:3d:4b:ea:5d:
                    8b:51:d3:36:e4:45:18:d3:c5:cc:a0:2b:cb:ef:d9:
                    73:1e:7d:c9:eb:0a:f2:b3:db:45:8f:25:1e:45:31:
                    bf:68:63:fa:72:6e:12:6f:21:b1:fd:59:d6:c2:f5:
                    44:e0:ca:62:36:e4:3b:f1:c1:93:70:d1:3a:da:4b:
                    ff:79:df:07:62:c1:78:07:65:17:d6:42:56:f1:ae:
                    83:f2:21:c1:fe:95:c6:ed:ac:03:e9:33:67:8a:88:
                    8a:e9:4e:0b:ee:84:45:1e:b3:54:97:58:e9:b0:ef:
                    13:ad:c9:d7:63:11:e2:15:96:2c:41:28:ff:2c:e0:
                    57:9e:9e:14:87:57:68:46:72:fc:82:e7:82:33:d2:
                    71:8a:e3:00:86:10:02:86:73:11:5f:5a:af:38:77:
                    9e:40:78:93:a9:3c:20:d9:98:ea:55:ce:4d:e4:53:
                    3f:70:36:93:c9:1d:d1:30:5b:ab:de:93:5c:3f:bf:
                    94:f7:1e:da:24:44:92:90:d6:9c:8c:a9:8d:0a:fd:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:69:5D:B8:9D:BB:AB:13:65:96:EA:3F:BB:4E:2D:DE:1E:5A:67:76
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145146.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:b1:8e:94:85:ce:a0:28:49:96:71:0c:2d:bb:1d:33:de:00:
         a2:92:6c:0a:33:39:da:28:75:fa:34:f8:3b:75:90:cd:8c:2a:
         98:a8:42:da:e6:52:f5:7a:c6:1a:24:b7:1e:dd:8e:3c:d3:d6:
         fa:59:a9:0f:31:7b:93:cc:9e:ce:55:8f:fe:e8:82:da:ed:40:
         76:8b:ce:e2:a7:e2:92:ef:18:d7:ac:43:a0:42:1e:e1:3d:ab:
         1b:44:85:48:48:fb:db:59:06:42:0f:e5:9d:f6:3b:7c:64:c0:
         8c:21:f2:07:f1:9d:3c:86:0b:fc:81:41:3b:1f:c3:de:7b:30:
         22:74:35:69:e0:3b:a7:5c:20:c5:78:77:cd:5b:e2:5d:66:79:
         2f:93:4a:6e:7c:fa:00:09:02:52:91:e8:cf:1b:d3:99:7f:9f:
         18:8a:c6:b3:17:3a:2c:fe:03:d7:37:d5:05:13:fb:59:3d:36:
         77:94:df:56:51:00:1c:ea:80:07:5c:96:c5:79:76:e8:98:5d:
         85:04:88:d7:80:7e:e8:18:f9:79:05:85:e4:a0:03:84:95:e9:
         a7:80:f8:e4:a9:84:f1:e3:a4:ae:4c:d4:fe:4e:35:aa:18:7f:
         18:64:29:ba:37:f9:47:b5:15:c4:e2:61:40:aa:3c:5f:b6:88:
         ce:56:c9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:36 2026 by rpki-client