Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145308.roa
File:                     AS145308.roa (raw, json)
Hash identifier:          P60O8fAvAEVf5gd3cO4KBRU5FKSXCMCHhPLNHS9LBY4=
Subject key identifier:   4A:14:CE:2F:66:3C:85:4B:83:FF:B5:9D:A2:83:B5:11:AC:A3:27:AF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4B8D132663636E4270C70193630145ABCA238DC1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145308.roa
Signing time:             Mon 25 May 2026 06:49:05 +0000
ROA not before:           Mon 25 May 2026 06:44:05 +0000
ROA not after:            Mon 24 May 2027 06:49:05 +0000
asID:                     145308
IP address blocks:        240a:aa62::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8d:13:26:63:63:6e:42:70:c7:01:93:63:01:45:ab:ca:23:8d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:05 2026 GMT
            Not After : May 24 06:49:05 2027 GMT
        Subject: CN=4A14CE2F663C854B83FFB59DA283B511ACA327AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:90:a8:94:c5:fc:9e:0f:dc:69:43:bc:57:
                    86:b6:53:c1:ee:45:be:53:d2:15:83:08:ef:0b:a4:
                    08:0d:b3:c2:b1:01:75:95:53:22:31:8e:31:b9:60:
                    90:a1:33:77:d5:34:4e:d8:3f:8a:2f:70:b6:7b:8f:
                    36:03:d6:a6:bb:7d:c7:79:a8:88:ed:61:06:a2:d2:
                    9b:14:e7:9e:43:cb:59:d0:d2:3b:a2:57:e2:aa:8c:
                    6f:31:37:c1:70:76:6a:f7:b0:d0:27:32:52:81:41:
                    54:72:4d:ec:72:20:fe:06:4f:b7:d3:7f:bd:59:52:
                    67:c4:10:5c:3a:26:09:b0:0d:ef:51:1a:95:b4:bb:
                    63:7b:cf:37:f0:2a:33:8f:bd:55:3d:b2:c4:7a:00:
                    5d:90:60:d2:a8:e3:4f:17:75:9a:cf:3e:ea:f7:b3:
                    40:2a:76:22:dc:55:da:f2:f2:0a:d7:e2:2c:78:ae:
                    df:b0:1d:04:a8:b2:da:00:a9:5c:f8:d1:aa:ea:a2:
                    f4:46:82:7f:75:c5:0e:0d:c6:eb:9d:70:90:d5:05:
                    1e:53:63:71:8e:68:5d:b1:cc:5d:bb:3e:c9:60:5f:
                    91:17:29:dc:49:75:9f:c7:08:ce:4e:80:33:00:74:
                    a8:c6:df:a2:fc:ef:5f:2a:5a:f9:9d:6d:64:20:32:
                    8c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:14:CE:2F:66:3C:85:4B:83:FF:B5:9D:A2:83:B5:11:AC:A3:27:AF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145308.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa62::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:db:97:73:80:93:8c:7b:b3:92:1c:c8:0d:f6:ec:6d:c4:2a:
         f6:c9:99:f2:ea:aa:0c:10:96:41:d5:73:94:25:8f:e4:20:6c:
         93:b9:1e:f7:26:c8:89:c8:0d:af:c7:f3:99:6b:28:15:5c:2d:
         8d:93:b3:94:90:e3:3c:be:e1:b9:55:e3:25:a4:71:27:ab:4f:
         60:b5:e0:21:8e:f3:fc:6d:a5:03:70:f4:64:b8:4b:13:e7:a3:
         80:43:91:59:9d:33:b0:69:c4:6c:c2:e9:97:2e:63:70:b5:74:
         a2:4e:05:5f:13:9f:eb:88:ee:6f:64:2b:fd:0b:4d:c8:f1:2c:
         b9:00:1a:57:84:6b:2a:fa:3f:a0:91:bf:cb:05:9d:37:17:03:
         72:39:e2:b3:a5:cf:81:c1:64:79:e4:2d:25:c8:99:ad:04:2b:
         db:6f:c5:00:dc:24:8c:9e:88:9a:54:86:96:26:a8:ff:c8:54:
         a0:eb:59:d7:c2:87:f0:73:af:c4:37:0a:f6:a7:9c:33:55:3f:
         28:c8:16:c9:ad:be:7a:ad:af:8b:b5:cc:b0:e9:56:f7:18:40:
         85:93:ac:39:7e:12:76:de:02:ec:dc:0f:58:7d:e7:30:b1:e7:
         8b:75:77:05:b6:9a:18:b8:9a:b5:29:b2:d2:43:85:36:7a:ba:
         c9:e2:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:43 2026 by rpki-client