Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145371.roa
File:                     AS145371.roa (raw, json)
Hash identifier:          Adq6LPOex4YlEtXo2Ne7m7Kyxt6iQesCS8xrWo52FUY=
Subject key identifier:   0E:8C:45:EC:07:2F:F8:A5:27:AE:7C:29:E5:9A:44:2C:40:68:2C:82
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       55D093117606B942ADC133C033280100AF8AAECE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145371.roa
Signing time:             Fri 22 May 2026 07:25:02 +0000
ROA not before:           Fri 22 May 2026 07:20:02 +0000
ROA not after:            Fri 21 May 2027 07:25:02 +0000
asID:                     145371
IP address blocks:        240a:aaa1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d0:93:11:76:06:b9:42:ad:c1:33:c0:33:28:01:00:af:8a:ae:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:20:02 2026 GMT
            Not After : May 21 07:25:02 2027 GMT
        Subject: CN=0E8C45EC072FF8A527AE7C29E59A442C40682C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:6b:93:87:3a:34:d3:88:17:0f:70:63:97:
                    fb:2a:da:91:10:e4:8f:49:d4:2b:cd:11:eb:17:88:
                    9a:c4:94:8c:a9:6f:87:25:3c:da:93:5c:47:41:cb:
                    85:2f:b9:a7:2e:f8:14:0e:e2:ca:70:87:e1:81:5d:
                    c3:9b:b4:88:a7:26:c2:cb:6d:d7:55:93:ec:40:52:
                    28:0a:82:31:85:70:2e:9d:21:c8:d1:fd:2b:f5:8c:
                    9a:8c:20:fa:ff:ee:30:44:9a:a6:c0:90:6f:65:fd:
                    8e:ab:7b:69:55:fb:02:d6:68:b9:89:76:cc:58:f9:
                    cb:5f:01:1f:9a:dc:fc:b5:26:95:82:e9:54:d1:d7:
                    15:09:2d:51:7f:85:18:11:27:f2:a4:d0:fd:70:1b:
                    7f:1d:56:1f:b6:e9:75:e1:ef:7f:a9:c3:4b:43:51:
                    0f:dc:a8:4e:e1:b4:c5:cc:33:cc:41:da:ba:f8:13:
                    3f:f6:ac:1a:6f:3c:0a:9b:be:36:96:8c:5f:9d:dc:
                    c4:a0:0e:a5:9b:29:e2:d1:24:ac:9b:b4:ac:8d:9d:
                    d9:ec:00:cb:13:cb:d4:82:33:70:3f:47:41:93:d4:
                    8b:db:3b:97:98:9e:d1:6a:80:a5:68:01:82:e7:b8:
                    8e:b1:9e:99:c7:51:57:fe:94:a9:1c:0b:f9:5f:1c:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8C:45:EC:07:2F:F8:A5:27:AE:7C:29:E5:9A:44:2C:40:68:2C:82
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145371.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aaa1::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:67:01:31:23:ab:20:66:5f:f8:07:6e:54:c8:52:c4:5d:ba:
         9f:c1:ea:98:51:75:db:05:35:b6:74:f7:2a:e2:ba:c2:87:a0:
         df:e4:3e:57:75:41:74:05:f7:8c:3e:5b:5c:dd:e6:84:9f:b9:
         17:6e:a5:18:f4:8c:43:04:c4:6c:1b:97:72:df:15:6e:ae:8c:
         8f:61:ad:a3:be:1c:6d:87:07:95:c5:7e:cc:73:e0:a5:ad:aa:
         a4:1b:04:e3:f9:24:5e:1f:7c:cf:88:49:03:76:07:52:94:48:
         e0:6a:dc:0b:76:b0:74:56:f7:fd:30:b3:33:76:e8:6d:6f:ab:
         f3:fe:0b:9f:1c:93:19:9e:6e:30:7b:fc:1d:10:73:90:cc:08:
         7b:d8:f0:13:4b:29:05:e7:ad:8c:28:11:0b:98:9c:f5:63:19:
         63:36:2f:f1:eb:82:8e:39:f1:bb:db:9f:5b:f0:f3:ab:b2:df:
         12:5b:6a:dd:8f:63:6a:56:dc:df:c3:94:b5:9d:47:e1:3d:81:
         7a:34:74:18:0e:54:ac:88:1a:09:1d:11:66:80:a6:ae:0f:2c:
         37:53:a7:77:5d:a6:89:a2:f9:eb:de:eb:f4:99:6f:74:46:9e:
         36:cf:68:df:45:cb:ba:44:b1:3f:30:8f:5d:8d:92:04:04:e6:
         6b:34:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:19 2026 by rpki-client