Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145178.roa
File:                     AS145178.roa (raw, json)
Hash identifier:          +3UOD5ily5hXz/D0HteH1jYvwtWyoxp8Eix62nTvQ94=
Subject key identifier:   1C:35:CA:FA:15:58:38:E9:10:9F:70:FA:FA:47:22:BC:3E:D0:18:EB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       761858AF4ED3C2BBA1C8439817DA4181D2CDA3A8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145178.roa
Signing time:             Fri 22 May 2026 06:27:40 +0000
ROA not before:           Fri 22 May 2026 06:22:40 +0000
ROA not after:            Fri 21 May 2027 06:27:40 +0000
asID:                     145178
IP address blocks:        240a:a9e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:18:58:af:4e:d3:c2:bb:a1:c8:43:98:17:da:41:81:d2:cd:a3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:40 2026 GMT
            Not After : May 21 06:27:40 2027 GMT
        Subject: CN=1C35CAFA155838E9109F70FAFA4722BC3ED018EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:9a:bb:ea:b7:c6:45:87:17:d1:79:39:29:
                    2c:30:b9:bb:3e:ef:a8:49:38:8f:97:5e:c1:60:82:
                    1b:03:18:96:04:fe:45:f4:5e:c3:b6:b9:7a:66:af:
                    c2:12:09:6f:ef:b1:89:2f:a7:60:02:33:2a:92:e8:
                    c5:36:1d:f2:8b:e8:68:fa:a8:94:53:86:b3:fc:d8:
                    d0:7c:67:c5:7a:32:f8:8e:52:cd:08:41:ad:44:6a:
                    da:76:f5:71:4f:f2:73:7c:b7:02:26:5a:72:4c:a5:
                    72:be:1c:58:32:5f:f9:06:51:12:2a:e1:86:b7:30:
                    6d:a0:31:38:eb:c1:d0:82:cd:69:42:5d:9b:3a:68:
                    35:eb:af:03:39:e9:a9:8b:22:22:fd:6f:dd:78:68:
                    6d:a8:0f:84:51:cd:d2:c1:3f:69:66:55:70:c2:7e:
                    dc:b1:5d:06:1a:f9:4b:48:a9:91:51:87:a3:66:4e:
                    cf:2d:b5:fa:97:3e:ea:15:c5:8c:59:d6:1d:bb:c7:
                    f4:bc:3b:0d:78:42:35:3d:56:09:ac:8c:c1:b9:6a:
                    75:31:59:17:8f:7a:ad:a4:1f:0f:5c:f8:c7:0e:33:
                    09:af:1a:c8:71:1e:00:7d:28:cb:9f:fb:d6:e6:a4:
                    35:2c:74:3c:1f:39:0b:46:11:d8:92:3e:ed:90:7d:
                    b9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:35:CA:FA:15:58:38:E9:10:9F:70:FA:FA:47:22:BC:3E:D0:18:EB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145178.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:98:3e:f4:7d:a8:09:af:6f:e4:2d:da:e3:67:72:e7:37:81:
         57:45:23:99:4e:dd:50:80:99:af:51:7f:a4:07:4d:c2:82:e4:
         b8:ac:d8:b2:7a:15:51:bf:8f:8c:29:2c:39:54:dc:3b:2f:95:
         f1:05:f7:87:d9:cb:ed:f9:4e:8f:56:1c:c3:b9:10:51:68:6e:
         26:86:1d:bc:b8:61:91:8d:83:df:fc:f5:06:85:9e:d2:3c:e2:
         2b:c8:d0:67:58:d1:19:cc:31:51:e1:1e:22:13:cf:d9:d9:40:
         66:72:35:ed:cb:22:1b:c0:33:ea:ce:ff:b6:0f:11:ce:17:74:
         7d:eb:6b:c0:30:00:1a:6c:f6:a2:bb:d8:bd:57:39:72:4d:18:
         92:da:c3:75:06:22:f4:4a:a9:1a:dd:11:b8:fe:ce:ae:eb:86:
         c9:28:b0:dd:6b:6f:8e:3f:2f:6b:5b:70:51:9d:33:63:34:24:
         73:d7:09:8c:92:5a:5e:25:31:5f:a7:f2:46:6a:c3:5d:50:58:
         8f:cb:c1:c6:b1:87:23:97:2e:05:15:b1:e8:c0:8f:25:b0:38:
         16:d2:cb:35:7f:8e:6b:64:44:4f:cb:9b:ee:0a:6d:4e:75:40:
         9e:30:d9:a0:e5:7b:34:bd:e5:25:f2:28:14:0a:36:48:d3:be:
         5b:46:bd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:56 2026 by rpki-client