Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145415.roa
File:                     AS145415.roa (raw, json)
Hash identifier:          Feb7WASOnfJHHEZndXVJ8kqTgNgldfeK0VfU6tD6ZOE=
Subject key identifier:   0B:0A:73:4E:5A:8D:72:2D:16:73:85:CA:71:EA:FA:2C:BC:34:D7:19
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       628E06A8DB17770742D187D52CA32D94B3DD8C34
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145415.roa
Signing time:             Mon 25 May 2026 01:51:01 +0000
ROA not before:           Mon 25 May 2026 01:46:01 +0000
ROA not after:            Mon 24 May 2027 01:51:01 +0000
asID:                     145415
IP address blocks:        240a:aacd::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8e:06:a8:db:17:77:07:42:d1:87:d5:2c:a3:2d:94:b3:dd:8c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:01 2026 GMT
            Not After : May 24 01:51:01 2027 GMT
        Subject: CN=0B0A734E5A8D722D167385CA71EAFA2CBC34D719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:52:58:89:79:88:ad:9d:55:85:f5:3e:c5:
                    02:f4:50:5b:ae:22:56:ce:d0:72:06:f8:82:3a:09:
                    f9:7c:9c:75:1a:c8:93:64:a3:be:e0:13:c3:8d:5e:
                    cd:da:84:fa:83:20:b9:ac:ad:d3:30:1b:45:90:10:
                    50:e1:8f:6a:14:83:2e:36:e4:5a:a0:61:4d:2c:9f:
                    76:ab:54:38:63:5e:93:b5:d4:a4:2a:3a:37:b0:ec:
                    6f:27:4e:76:92:f2:43:2d:9e:58:6a:c8:21:92:8b:
                    26:c1:3f:64:d1:14:b5:ad:ec:b1:84:31:cc:71:dd:
                    e2:17:7c:00:ab:2d:fb:4a:f8:44:25:9e:f0:d2:98:
                    45:94:26:25:ce:59:10:ad:2b:89:3c:1e:16:40:39:
                    e1:11:2e:ee:08:7d:0c:3c:46:7f:10:0c:4c:e6:41:
                    20:b7:f5:e1:cf:35:86:82:46:27:ff:6e:ba:52:fa:
                    88:96:e4:ef:e5:c0:55:93:f6:85:6b:97:4c:5a:47:
                    ee:27:ab:4a:11:ea:c0:23:1d:d4:ed:f5:a4:40:f4:
                    3d:e1:2e:6b:1d:c6:20:4f:5d:20:c4:11:4a:98:c8:
                    c6:42:01:2d:4c:71:e8:44:6d:ab:e2:88:93:bb:37:
                    1a:37:7c:b7:1d:cf:cb:14:86:54:4e:11:d1:d3:cb:
                    94:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0A:73:4E:5A:8D:72:2D:16:73:85:CA:71:EA:FA:2C:BC:34:D7:19
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145415.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aacd::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:bf:7c:36:b4:e0:60:ff:ce:ad:21:3c:12:a7:65:d8:91:df:
         8b:7c:07:7c:52:6b:57:08:8c:57:6e:9f:44:7b:72:ae:f7:47:
         40:44:c1:d2:73:2a:73:1f:9a:11:f1:f3:cc:1c:bb:8d:de:c6:
         40:84:18:c3:f9:9d:0a:a7:56:f0:41:a4:e2:0d:55:e4:5e:fd:
         12:e2:6e:06:74:6d:ff:f6:eb:30:be:e2:af:19:15:32:2c:4b:
         82:75:c4:06:b8:ea:bb:3f:26:36:9e:d8:c0:f6:9f:b3:0b:7c:
         83:79:57:5e:55:d7:b0:09:05:bc:fa:bc:ae:b0:56:40:7e:9a:
         5a:87:ab:c4:d6:24:d4:86:6f:40:a5:d8:ab:05:49:87:b7:ce:
         67:1c:f8:6d:4a:09:53:2b:18:10:32:af:7c:ad:f2:60:9b:d7:
         8b:d8:e6:f9:2f:39:c7:da:e9:4c:be:84:9a:e0:ce:b0:cf:28:
         6c:a1:a4:e8:6d:c5:12:ce:8c:9d:6b:70:13:d6:24:1e:ea:b7:
         e4:5a:32:a9:3e:f5:c2:fa:5f:7f:e6:66:5a:fc:ae:eb:62:cb:
         a6:6f:37:38:c5:15:8f:21:4f:75:c6:16:2b:87:a7:2b:8f:15:
         ab:0f:86:77:47:f5:36:ea:f5:63:30:1f:c9:c3:48:2d:cb:66:
         98:86:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:36 2026 by rpki-client