Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145464.roa
File:                     AS145464.roa (raw, json)
Hash identifier:          LMLc5osFm3/i1fWLu4RRfIZ52G82nuOSJss/9210Uls=
Subject key identifier:   76:1F:39:AA:1E:C6:F9:EC:78:23:C6:08:16:1E:0B:B1:76:37:C0:12
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7D442C257F031CC596C0EDBF92B51DA33F818AAC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145464.roa
Signing time:             Fri 22 May 2026 04:26:49 +0000
ROA not before:           Fri 22 May 2026 04:21:49 +0000
ROA not after:            Fri 21 May 2027 04:26:49 +0000
asID:                     145464
IP address blocks:        240a:aafe::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:44:2c:25:7f:03:1c:c5:96:c0:ed:bf:92:b5:1d:a3:3f:81:8a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:49 2026 GMT
            Not After : May 21 04:26:49 2027 GMT
        Subject: CN=761F39AA1EC6F9EC7823C608161E0BB17637C012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:d8:e7:20:08:0b:c9:dd:c9:41:b4:2e:a5:
                    16:60:77:d0:17:7d:a8:d4:a7:a1:9f:67:f3:ca:38:
                    09:7e:f1:26:92:f1:88:f7:b7:59:49:99:21:51:8f:
                    51:85:00:e5:9c:f6:8b:5f:07:1c:3b:f0:ce:c5:d5:
                    37:53:c8:07:8b:cf:c7:ac:4c:c1:7e:18:3c:65:55:
                    c7:23:f9:0a:75:2a:eb:ec:ae:63:d1:fe:bf:d2:7c:
                    5c:6a:56:07:6e:be:cc:d8:93:b1:2a:b8:85:01:10:
                    94:8a:3c:57:e0:1b:9f:55:23:82:8c:ff:8c:ac:b5:
                    f2:41:3d:92:4b:87:1d:9c:be:09:74:91:45:ba:e4:
                    73:5c:a3:13:a5:7b:dd:50:92:5d:6d:71:ba:b7:10:
                    e2:4b:ed:ba:ae:f6:c9:91:8a:1b:c3:56:fb:33:ab:
                    45:11:91:f3:48:b9:da:4d:da:d8:07:4f:50:6e:6b:
                    13:42:30:c3:02:cb:84:66:89:65:f6:60:e8:4c:b2:
                    1a:6a:c9:c5:22:36:a7:11:4b:ee:09:3a:f8:5b:92:
                    72:1c:7f:36:74:ed:1c:6f:72:45:fa:44:3f:eb:79:
                    f2:83:01:92:da:40:58:9a:19:ec:99:f4:04:66:86:
                    d9:02:b4:46:ad:1e:07:6b:20:df:f5:ef:76:21:fb:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1F:39:AA:1E:C6:F9:EC:78:23:C6:08:16:1E:0B:B1:76:37:C0:12
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145464.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aafe::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:1c:de:a6:00:38:86:c1:56:13:16:eb:01:97:b9:e4:1f:61:
         ca:b8:98:89:31:7d:cf:ed:90:e8:43:22:90:30:78:8b:b8:46:
         b6:c0:04:a7:64:4f:11:0a:a1:56:03:6a:57:49:d7:57:ef:c9:
         34:f1:24:b3:c2:ac:6a:f7:e2:eb:66:6c:7c:65:4f:6b:e9:3f:
         d4:46:b7:5d:e4:e1:4a:d5:e6:4a:26:e7:6b:8d:a7:98:a6:4d:
         91:7c:22:bb:55:ba:f4:fb:a7:f5:8c:1d:16:fe:21:f2:ac:b1:
         e4:65:bc:51:1c:30:75:71:2d:bc:e0:7b:35:5d:90:80:b8:7c:
         1a:45:3a:71:9d:bf:ec:ce:6f:14:95:2f:ad:25:9f:c1:7b:50:
         50:e1:c0:02:b1:74:28:95:7f:14:00:38:c5:58:e1:f3:90:77:
         52:07:02:30:be:76:22:b4:37:71:af:65:93:5a:39:6a:86:cf:
         fa:f1:8b:33:34:65:8b:07:f9:27:4b:3c:6b:e9:2e:0d:bb:8e:
         09:23:10:54:2f:05:5e:53:93:e0:68:d6:fd:7c:94:81:d5:98:
         1c:17:a8:5d:5e:e3:86:8e:c7:5b:ee:26:02:82:ce:46:74:03:
         a1:58:45:a9:8c:ef:43:ce:75:55:b3:26:59:36:c0:27:6a:60:
         33:63:20:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:08 2026 by rpki-client