Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145453.roa
File:                     AS145453.roa (raw, json)
Hash identifier:          85aivW4ez+V5bHTqd1B6OwxBKQNkZwRt/HCdZSTZVyo=
Subject key identifier:   79:63:AC:4F:03:71:B8:8B:60:0B:2F:8B:03:68:DE:DB:38:23:64:6F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1442944BDB739F43A84DD530EC9CD0A14BB10293
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145453.roa
Signing time:             Mon 25 May 2026 01:38:31 +0000
ROA not before:           Mon 25 May 2026 01:33:31 +0000
ROA not after:            Mon 24 May 2027 01:38:31 +0000
asID:                     145453
IP address blocks:        240a:aaf3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:42:94:4b:db:73:9f:43:a8:4d:d5:30:ec:9c:d0:a1:4b:b1:02:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:31 2026 GMT
            Not After : May 24 01:38:31 2027 GMT
        Subject: CN=7963AC4F0371B88B600B2F8B0368DEDB3823646F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:34:fa:57:5f:d6:13:24:3f:4d:41:79:e7:7a:
                    16:f8:d4:db:4e:f7:95:99:a9:72:99:3a:05:c3:08:
                    e1:65:7b:62:1c:a0:51:61:21:08:be:ba:4e:0d:c3:
                    0a:23:32:17:69:3e:55:ea:f0:cc:65:9e:27:8b:01:
                    fc:6f:ec:29:31:33:73:28:42:df:1b:d3:3e:e2:41:
                    79:8f:9f:72:36:ed:5a:c0:5f:1e:99:98:2a:a4:11:
                    e4:c3:3b:4b:60:4e:45:17:60:f6:29:49:9c:3c:e9:
                    bb:6e:f6:d8:08:61:b3:2d:f8:89:db:87:af:60:9b:
                    30:eb:3d:89:25:01:d6:07:b9:d7:53:86:db:3c:a5:
                    5b:a0:75:f8:c4:d8:cb:62:81:4f:b6:75:b7:48:a4:
                    d8:37:93:52:fa:cb:a1:75:df:e3:3c:0f:74:9b:b9:
                    e8:f2:e8:21:fa:bb:41:31:d3:ad:e8:d4:27:b9:b6:
                    4a:fd:dd:13:a8:07:16:21:03:c7:c7:1a:09:7d:0e:
                    e3:41:f0:69:a0:1d:01:2e:40:9c:12:95:a4:98:c9:
                    15:12:92:db:a5:95:5b:69:07:2b:ed:aa:bf:d2:f6:
                    8f:be:97:d3:77:22:a3:9e:41:ef:4c:83:47:cd:f0:
                    af:a8:6f:1a:b9:82:55:59:0a:4a:4e:18:52:79:53:
                    e9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:63:AC:4F:03:71:B8:8B:60:0B:2F:8B:03:68:DE:DB:38:23:64:6F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145453.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aaf3::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:45:fd:09:05:b8:27:b8:c9:34:11:5e:d2:ba:3a:a1:ad:e1:
         a7:f4:de:b8:d8:a9:e5:87:bb:16:5a:cb:95:d7:aa:5a:66:79:
         25:1a:90:c9:48:1f:58:28:3b:ff:52:a8:16:eb:88:60:e5:eb:
         15:7e:b1:59:80:fe:ef:55:14:cc:ca:7e:11:b6:a5:c7:88:8b:
         17:9a:46:95:5a:20:d2:a1:b1:71:4c:70:09:ba:d9:99:bb:6c:
         c1:66:53:a0:f7:0c:4d:1b:10:8a:e4:7a:54:cf:ef:73:63:8d:
         33:0d:16:75:b5:89:18:13:e6:66:44:77:ed:b8:8a:6f:5b:1a:
         ee:78:fd:e2:79:66:df:a8:33:96:a5:b3:1c:0c:8c:fc:db:d4:
         aa:e1:f3:10:f8:db:35:0b:10:ba:e8:4a:7f:69:d1:65:2f:d2:
         8e:00:68:10:26:2f:d3:c3:89:2b:40:f3:fd:bb:4f:9c:22:6c:
         bf:f2:f8:7f:42:c9:b7:59:5c:30:ed:a6:cf:6a:2b:b9:a2:43:
         e7:a4:1e:32:c0:31:79:9d:29:02:9a:54:14:5b:5d:e0:56:ab:
         ae:ad:57:33:6a:fc:8d:08:8d:9b:a9:37:90:df:6e:fb:a6:d5:
         85:0e:1e:a7:f4:fa:b9:f9:42:c1:34:b2:35:10:32:8e:7a:d0:
         5b:46:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:52 2026 by rpki-client