Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145416.roa
File:                     AS145416.roa (raw, json)
Hash identifier:          dPJnKIbpKw1brWmjzlydFOhm7vv9CwQLDGmvUU5Fz9s=
Subject key identifier:   0B:A2:3F:3F:B3:B8:0E:C5:98:9C:58:E7:DF:3A:22:27:84:09:F5:3E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0A967C86240C07ADC702475196CA10F07B11C9F0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145416.roa
Signing time:             Mon 25 May 2026 01:51:33 +0000
ROA not before:           Mon 25 May 2026 01:46:33 +0000
ROA not after:            Mon 24 May 2027 01:51:33 +0000
asID:                     145416
IP address blocks:        240a:aace::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:96:7c:86:24:0c:07:ad:c7:02:47:51:96:ca:10:f0:7b:11:c9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:33 2026 GMT
            Not After : May 24 01:51:33 2027 GMT
        Subject: CN=0BA23F3FB3B80EC5989C58E7DF3A22278409F53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:ca:bf:cc:72:3d:53:36:a3:ef:b1:08:34:
                    fb:c1:c7:e7:cb:cf:ae:17:8d:ea:df:c6:24:8c:99:
                    f2:67:d8:cc:d6:2e:0e:aa:ef:24:42:7c:fa:fd:c1:
                    ec:d4:78:28:89:ee:47:2f:c7:70:cc:7a:08:ba:a6:
                    74:83:ba:e4:62:28:71:cc:a0:44:fe:2b:bd:7e:32:
                    d6:f8:5d:f8:c3:32:8b:5a:f6:d3:a7:4e:eb:28:01:
                    7d:30:98:c4:0b:ed:1f:6c:69:11:46:92:31:65:dc:
                    4c:b2:43:a5:1f:30:0a:8c:f4:51:87:00:77:c2:47:
                    28:1f:f1:40:25:8a:6a:0d:b1:e1:95:7a:1e:31:d0:
                    f9:48:56:a8:30:6c:b0:74:94:31:71:bb:d5:33:27:
                    17:4b:3f:ba:ff:4b:c0:e5:0e:a7:ae:30:c3:4c:92:
                    f1:d8:6a:29:3f:a2:97:bb:a8:4c:07:3e:e8:27:b4:
                    c2:02:cf:4e:f5:35:73:8f:06:77:ba:47:bb:b5:59:
                    da:7d:33:bc:b0:f6:9e:6d:1e:22:87:5a:60:c7:21:
                    2e:8c:a6:7b:7d:de:7e:0c:6d:a5:c7:1c:c1:6f:f0:
                    da:69:df:54:6a:7d:fe:26:bc:01:11:08:9f:e2:e6:
                    06:cc:9d:1e:28:bb:a2:dd:42:19:c3:a4:56:0f:cb:
                    09:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A2:3F:3F:B3:B8:0E:C5:98:9C:58:E7:DF:3A:22:27:84:09:F5:3E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145416.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aace::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:a7:99:fa:cb:c2:42:b0:48:a7:bc:80:68:d6:4c:ea:4f:15:
         fa:9a:d1:d2:21:c8:c4:68:d9:f8:22:d2:04:91:92:7f:cf:c6:
         b3:25:4a:c3:6f:cf:53:de:86:1d:96:87:17:f3:de:ac:b8:80:
         c5:c3:af:79:ab:55:9d:08:88:3a:17:f4:f0:e5:a7:f1:aa:98:
         c2:a5:54:e9:f4:7e:88:42:3b:59:2e:01:50:3b:df:63:23:1f:
         f4:78:7f:77:e7:d4:97:ef:12:f0:9c:14:f1:f0:88:71:7b:b1:
         3d:c7:f7:52:c2:d8:76:c1:e9:56:12:27:29:3d:65:02:ca:31:
         2d:fe:1b:f1:4f:b5:57:bd:4f:85:6d:d9:fe:28:2c:22:bd:ba:
         d4:5a:ad:dc:0d:71:03:e0:96:a7:83:10:d5:54:08:29:44:e2:
         1c:3d:7d:2d:5e:a3:41:13:98:a2:42:e2:68:d6:f1:03:88:e2:
         7b:02:26:e5:e3:41:78:ef:89:76:02:e9:bf:bf:65:09:3a:fd:
         67:8f:aa:33:e9:12:80:c5:2d:7f:4d:fa:1d:92:6f:1a:35:31:
         dd:90:ad:98:d0:9e:59:7d:44:cb:10:82:b6:18:96:44:11:81:
         26:4f:41:49:fb:bf:4e:fb:ac:bc:05:92:53:e5:84:2e:3f:9c:
         6e:a9:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:09 2026 by rpki-client