Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145288.roa
File:                     AS145288.roa (raw, json)
Hash identifier:          H0MvMhnWU2d4315WnkvIhmX+AXnui+QH53YQJPOih30=
Subject key identifier:   1B:EB:88:34:73:E9:8A:21:E8:D5:05:61:80:5B:FB:CC:C6:2F:96:46
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6BB668917A73298794254A5031EDA2132B84317F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145288.roa
Signing time:             Tue 26 May 2026 03:16:53 +0000
ROA not before:           Tue 26 May 2026 03:11:53 +0000
ROA not after:            Tue 25 May 2027 03:16:53 +0000
asID:                     145288
IP address blocks:        240a:aa4e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b6:68:91:7a:73:29:87:94:25:4a:50:31:ed:a2:13:2b:84:31:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:53 2026 GMT
            Not After : May 25 03:16:53 2027 GMT
        Subject: CN=1BEB883473E98A21E8D50561805BFBCCC62F9646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f7:20:03:0e:6c:a3:39:98:36:91:b1:10:37:
                    e2:5a:05:27:f6:6a:6c:a0:76:c1:16:ff:74:63:81:
                    6a:0c:5e:5c:d4:62:81:73:9b:7b:95:8e:23:5e:ef:
                    f3:46:22:77:fa:20:2d:98:cb:0e:c1:21:70:ed:a9:
                    43:a1:6f:06:47:a4:c1:f1:d0:23:28:4c:ca:f7:d5:
                    19:95:c7:85:1b:40:ba:2e:95:5a:c3:1a:80:74:af:
                    77:07:38:82:28:04:82:8d:a6:9d:3b:eb:cd:db:bb:
                    74:59:fa:90:92:c0:b6:e9:9c:7d:b5:17:04:0b:02:
                    84:ed:2b:31:8f:69:cf:68:98:a4:ac:03:ff:1a:e9:
                    46:38:41:53:d2:53:4c:d4:20:90:ad:42:f3:eb:40:
                    23:b0:e1:12:4e:5f:14:8a:26:3b:cd:b6:2e:bf:3d:
                    a4:e9:b8:31:9c:d6:58:2f:65:92:d2:be:63:f8:91:
                    c5:ca:c1:f8:89:20:a1:2c:67:ee:fa:b9:28:d2:91:
                    5e:d1:7a:78:8f:60:06:04:e5:df:1a:d5:8d:f1:6d:
                    74:8e:fd:23:b6:14:31:f9:07:eb:77:1e:f3:18:51:
                    8e:a1:5b:d2:8b:af:37:ef:a2:91:af:76:58:ed:69:
                    e1:3c:e8:41:b2:42:52:6f:ce:7d:90:5b:c3:3e:82:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EB:88:34:73:E9:8A:21:E8:D5:05:61:80:5B:FB:CC:C6:2F:96:46
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145288.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa4e::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:cd:a9:88:99:b5:4e:f7:7b:25:bd:ab:cc:09:a1:4e:5e:0c:
         fd:64:43:51:a6:c2:7b:a3:59:0d:46:c4:0f:83:d9:49:f0:e0:
         08:cd:cd:0a:9a:12:bb:e3:af:ca:37:f8:ad:ce:71:be:45:a7:
         97:89:44:6d:ba:59:82:bc:6a:78:75:c7:bc:45:b1:cf:b3:6d:
         87:92:a5:a9:8e:fe:0a:60:b1:e3:1d:ec:e6:0f:c2:2a:e2:ee:
         8d:59:19:f4:c6:95:27:fc:4f:d3:51:e0:6a:d6:c3:cc:ae:3a:
         60:bd:05:08:e2:58:0c:21:9a:f9:eb:d0:89:0b:9c:a7:a4:e3:
         05:46:8c:8a:7e:79:4e:fb:b7:ed:f9:92:04:a4:f5:01:93:32:
         8e:ea:e1:08:15:c5:c5:90:80:3a:a7:d5:85:be:53:d5:11:03:
         be:73:7f:09:8f:da:c8:12:20:1a:b2:87:cc:9d:31:1a:03:2a:
         25:f5:33:62:37:3b:d2:8c:cc:56:34:da:06:84:fe:09:96:ab:
         f2:42:f8:52:1d:3a:8b:8d:87:23:a0:d8:58:01:09:7b:72:7a:
         4b:29:f5:7b:ac:61:12:63:51:fa:eb:4c:cb:0c:ee:13:18:d8:
         d9:43:7c:ed:86:9a:26:29:30:75:d3:b6:d8:7d:83:45:21:81:
         54:63:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:45 2026 by rpki-client