Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145402.roa
File:                     AS145402.roa (raw, json)
Hash identifier:          JwpCDGk04MIuRI26pKfeVs7Rmgg5bI9YoI2AfpFaxM8=
Subject key identifier:   A5:E8:35:2D:D1:92:59:7F:D6:89:57:20:18:12:33:29:A1:65:20:7B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       368194FA9BFB6AE8C2E78F2701602AD40D9C0B6A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145402.roa
Signing time:             Fri 22 May 2026 06:05:47 +0000
ROA not before:           Fri 22 May 2026 06:00:47 +0000
ROA not after:            Fri 21 May 2027 06:05:47 +0000
asID:                     145402
IP address blocks:        240a:aac0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:81:94:fa:9b:fb:6a:e8:c2:e7:8f:27:01:60:2a:d4:0d:9c:0b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:47 2026 GMT
            Not After : May 21 06:05:47 2027 GMT
        Subject: CN=A5E8352DD192597FD689572018123329A165207B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:68:36:6b:ce:7c:5f:93:49:aa:13:28:56:e6:
                    b9:31:ae:ce:3a:66:02:05:92:2d:29:66:62:0b:2a:
                    48:91:1e:cf:44:98:c5:a3:b0:37:1f:46:15:ff:0d:
                    1f:ab:94:29:f4:40:ac:7c:c5:bd:ba:c5:04:6b:a6:
                    f0:25:a5:47:d8:e6:a6:57:b3:09:b3:58:15:20:5b:
                    22:71:cc:65:a3:a4:bd:80:5b:2e:9e:5f:c4:97:86:
                    a1:bf:14:6f:10:0b:60:b5:b4:e3:37:2f:e1:cf:0c:
                    86:41:ef:74:11:e2:6d:69:79:9e:33:93:8d:5a:e7:
                    b5:a1:f1:79:8b:31:d3:49:c4:df:52:e4:a7:ac:66:
                    e4:a6:5a:47:8b:dd:ff:33:fd:26:9c:90:80:df:ca:
                    7a:bc:d0:f6:d6:b1:5c:ea:05:83:ed:3c:f1:74:4a:
                    be:7d:da:03:f1:a4:7e:9e:67:47:07:00:59:79:99:
                    75:6e:f0:6b:fe:27:c0:a2:97:5b:93:63:fd:77:dc:
                    cc:1e:19:ba:14:8a:b5:95:00:8c:0a:63:88:63:b5:
                    f8:c2:95:9a:c6:bc:06:9b:df:e0:e2:6c:80:3f:ee:
                    80:38:d2:33:6c:4f:6a:89:9c:76:cd:94:54:ec:0c:
                    30:d9:35:6c:21:a5:1f:7a:1d:60:98:78:99:66:95:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E8:35:2D:D1:92:59:7F:D6:89:57:20:18:12:33:29:A1:65:20:7B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145402.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:8c:07:e2:da:95:45:9b:eb:b6:c0:73:df:87:88:46:38:6d:
         a3:a8:87:ca:d4:71:e8:1d:81:23:69:54:1c:0d:cb:bc:03:94:
         d2:cf:0e:a0:f2:c6:46:8e:c2:29:83:30:57:7a:6a:39:00:e9:
         0c:69:ae:6b:b6:1d:0b:c1:f4:8d:d5:38:e1:27:f8:e7:d3:e2:
         db:62:e5:53:1e:70:8f:14:09:bd:b5:38:c3:f9:2f:a2:c3:57:
         aa:e5:17:f9:2a:6e:42:e7:86:8b:2d:f4:d1:94:cd:20:9a:3b:
         2a:d5:3d:6c:87:fe:c6:3f:01:5a:fd:15:c5:93:a9:48:af:53:
         78:a9:c7:7a:73:f9:50:f9:72:56:a1:99:c8:08:ac:d7:b7:18:
         64:96:b5:96:ab:c9:67:1c:f1:2b:5a:8e:29:af:61:ff:d4:1c:
         5f:89:83:27:6d:30:8e:26:2a:53:47:69:5b:63:4f:c7:da:d4:
         bf:68:2b:2a:8d:d4:3c:f8:f5:90:92:fa:8b:b6:cb:0e:f2:60:
         8f:e5:9c:e6:6b:74:42:21:a9:97:22:98:47:41:5b:65:38:49:
         1d:19:a4:53:10:6a:21:a9:37:87:30:ea:f5:ba:c8:86:3f:f2:
         f3:8c:56:c7:52:3c:41:df:80:56:a8:7d:25:b8:67:af:7e:b7:
         d0:34:7d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:31 2026 by rpki-client