Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145441.roa
File:                     AS145441.roa (raw, json)
Hash identifier:          wiZeRMQ7n3MKCfIjTFVWrRPG8NDV2tuZIxNDmymStSA=
Subject key identifier:   45:35:32:25:39:24:FA:E5:DF:EB:AE:7E:1A:5F:A6:1E:FC:C5:5F:93
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7B1B2232B09394C38F41624BCD9920F8AB051FBD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145441.roa
Signing time:             Mon 25 May 2026 01:38:13 +0000
ROA not before:           Mon 25 May 2026 01:33:13 +0000
ROA not after:            Mon 24 May 2027 01:38:13 +0000
asID:                     145441
IP address blocks:        240a:aae7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1b:22:32:b0:93:94:c3:8f:41:62:4b:cd:99:20:f8:ab:05:1f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:13 2026 GMT
            Not After : May 24 01:38:13 2027 GMT
        Subject: CN=453532253924FAE5DFEBAE7E1A5FA61EFCC55F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:3a:b2:ec:d5:fc:6a:ef:96:50:97:7c:bf:
                    44:8a:29:b5:dd:1c:01:4e:a1:bc:ee:a2:cb:9c:4b:
                    9f:31:fc:db:ab:20:5a:c7:90:1b:ba:7b:56:f0:92:
                    48:4e:af:da:b6:75:5b:92:b9:ae:d3:c6:91:c3:d6:
                    c1:49:1e:24:59:2c:c3:27:81:22:df:5c:4d:de:d4:
                    ea:00:74:50:f1:b8:da:1c:09:3a:31:28:8c:2e:bb:
                    87:0a:8e:16:58:b5:0d:88:7c:ab:b3:10:de:85:91:
                    86:f7:4e:20:1d:78:0b:a8:67:41:a6:83:dc:32:f3:
                    94:71:b1:1a:56:3c:69:74:c3:5e:d1:1e:fa:1b:10:
                    a0:73:2f:17:26:b5:b4:88:a4:4f:2f:9e:2f:29:a0:
                    59:15:c5:2f:39:17:ad:0e:b9:e7:44:4c:2b:58:94:
                    95:17:6b:9c:c4:71:fe:c3:91:f7:1a:19:95:60:02:
                    b1:85:87:39:4d:4b:13:46:62:93:a3:ce:ab:db:15:
                    f2:40:3b:e2:82:64:d0:bd:94:99:0b:3c:87:58:b0:
                    18:82:71:73:17:d2:be:5f:0a:3a:24:11:64:c7:4e:
                    21:7a:38:d6:1e:2f:20:71:f2:72:d5:1c:53:e8:04:
                    b0:00:bb:4b:b8:57:9f:42:ea:78:c4:66:fc:71:78:
                    ba:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:35:32:25:39:24:FA:E5:DF:EB:AE:7E:1A:5F:A6:1E:FC:C5:5F:93
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145441.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aae7::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:7e:97:b7:70:b4:12:82:61:03:2a:48:fc:06:55:d0:bc:b3:
         89:f7:ea:6c:38:d7:59:da:a0:63:32:33:e0:d2:19:63:0f:92:
         1d:9b:55:35:39:f2:66:a2:de:da:21:64:16:c8:35:46:f1:fc:
         55:ea:d5:3e:db:72:a4:93:bc:5b:65:2b:4d:a0:9d:62:b2:66:
         73:66:5a:62:88:fb:f2:68:02:64:cd:de:30:b6:21:8d:5b:28:
         5a:55:99:7a:46:70:e7:9f:fd:98:40:1a:0b:65:1c:f8:10:4e:
         fd:c7:74:5f:bc:13:fe:4e:60:31:03:08:9a:4e:2c:f9:a1:e8:
         aa:df:18:57:07:b0:5c:30:0c:3a:08:54:60:4e:85:98:d6:d7:
         3f:23:e8:f9:03:8b:57:83:40:81:e8:e0:ee:15:20:d8:0d:85:
         16:75:de:bd:87:53:a2:17:db:a1:aa:b2:18:c2:14:2d:75:33:
         2e:46:d6:bc:85:76:8f:76:b7:f1:3a:c5:80:f9:9a:6f:fa:fe:
         8f:b8:37:68:85:a8:c7:d4:ea:b8:8d:f0:e9:ec:d4:c0:1b:6d:
         d9:db:56:95:b7:93:05:ea:3e:27:47:bd:d2:1d:4b:25:dd:7c:
         62:b8:64:76:82:44:50:40:78:27:8c:cd:3f:92:96:9d:0d:fb:
         8c:39:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:25 2026 by rpki-client