Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145339.roa
File:                     AS145339.roa (raw, json)
Hash identifier:          tXmLHNhCHCYmvy1WVtt43yBBPj413XlXpqZaXbO+YNo=
Subject key identifier:   EA:DC:79:FA:26:44:70:1E:A6:32:7C:B0:28:53:7B:60:4F:0B:24:16
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       059473430E9D45E3AE65B9B1575F6CD1DFDE3FC9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145339.roa
Signing time:             Tue 26 May 2026 02:35:28 +0000
ROA not before:           Tue 26 May 2026 02:30:28 +0000
ROA not after:            Tue 25 May 2027 02:35:28 +0000
asID:                     145339
IP address blocks:        240a:aa81::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:94:73:43:0e:9d:45:e3:ae:65:b9:b1:57:5f:6c:d1:df:de:3f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:28 2026 GMT
            Not After : May 25 02:35:28 2027 GMT
        Subject: CN=EADC79FA2644701EA6327CB028537B604F0B2416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:da:21:4f:41:92:dc:33:2a:8b:56:0a:2b:
                    83:8e:ac:82:5f:5e:e8:2b:bd:07:e7:44:ca:86:ec:
                    92:0e:14:d8:c3:2c:39:46:1b:2e:63:62:88:48:90:
                    98:94:ba:bd:d9:ec:01:fe:9d:bf:4d:d1:cc:10:db:
                    59:8a:aa:0a:2c:00:f7:ab:35:df:69:92:72:fc:f0:
                    38:97:0d:b3:5e:d6:a4:06:6f:8e:62:8d:6e:69:8c:
                    f3:5d:2b:6f:a8:ac:09:a0:9d:83:4a:95:c2:fb:a2:
                    1f:2a:39:0e:e3:45:fd:d0:ab:e6:c9:95:d1:53:17:
                    9a:67:06:db:b9:0c:23:06:09:c5:22:ba:9b:13:cd:
                    b7:ee:f9:f1:2d:66:ba:4c:73:47:d8:93:e0:4d:15:
                    cc:a2:e9:32:89:15:ef:fa:73:c8:cc:9a:fe:7b:f6:
                    8b:f2:f6:78:fd:dc:0c:65:8c:12:ad:72:86:24:bf:
                    24:ab:64:2c:78:81:a4:26:84:fe:19:d7:c8:cc:c4:
                    6b:ac:f6:11:81:69:15:d9:73:98:91:04:f2:94:e1:
                    ea:f6:d9:ca:fa:b3:85:3a:d3:bf:6b:d6:e2:20:0d:
                    15:f7:49:ed:72:65:6f:61:b0:0d:e7:ee:a0:6e:c4:
                    be:d2:31:d1:a0:d6:bb:f0:c3:72:50:25:42:64:ab:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DC:79:FA:26:44:70:1E:A6:32:7C:B0:28:53:7B:60:4F:0B:24:16
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aa81::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:47:22:ea:8b:41:3c:e6:84:79:d3:e9:b0:9f:b6:c2:28:e3:
         23:f0:f6:17:11:2f:84:b1:0b:3c:54:3f:73:01:e2:88:51:8f:
         63:8a:94:2a:56:6c:72:23:1b:7a:f1:23:57:84:7f:2d:1a:5b:
         46:ce:a9:58:c4:4e:a6:c6:61:d0:d8:c1:d6:47:86:61:83:27:
         a7:db:0b:49:07:c0:dc:c5:ef:b7:f6:74:83:0e:eb:6b:4f:25:
         62:ad:2b:b9:bb:fd:b6:2e:6b:11:ed:d3:bc:95:06:f3:19:69:
         59:31:e3:be:ed:74:4a:86:09:5f:35:a7:1a:c6:29:44:fb:fd:
         6c:a5:5f:0b:52:ee:45:60:6d:42:09:d4:62:6c:ce:4a:e2:2b:
         92:72:9b:e3:a4:57:21:4f:6e:91:ad:b3:35:e6:2b:52:8b:a7:
         8d:13:70:8b:77:92:34:94:5a:85:a8:fc:85:e2:6c:f7:b6:4e:
         65:6e:df:ae:52:4f:d5:40:2d:54:a0:a8:43:75:e7:3a:94:bd:
         6d:e3:c1:37:fd:19:25:5b:48:9f:e0:9a:ad:74:3d:1d:7f:cd:
         a8:a8:27:79:44:5a:4b:18:fb:2d:99:30:7c:67:2d:db:44:24:
         16:1c:f7:f9:80:71:1a:ef:84:b5:24:84:07:af:5d:13:6f:d9:
         9d:1f:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:40 2026 by rpki-client