Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145480.roa
File:                     AS145480.roa (raw, json)
Hash identifier:          QOsO047qGB4os7K0FpFTmIcIbpUOKZ7O5CxZ1/otIa0=
Subject key identifier:   BB:81:2F:16:5B:FA:6D:7C:C3:EB:77:47:FC:EF:8C:5E:9D:73:02:AC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       125D2193763F1BC6A7C5A8A0E01A27DB61AF9163
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145480.roa
Signing time:             Mon 25 May 2026 06:28:35 +0000
ROA not before:           Mon 25 May 2026 06:23:35 +0000
ROA not after:            Mon 24 May 2027 06:28:35 +0000
asID:                     145480
IP address blocks:        240a:ab0e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5d:21:93:76:3f:1b:c6:a7:c5:a8:a0:e0:1a:27:db:61:af:91:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:35 2026 GMT
            Not After : May 24 06:28:35 2027 GMT
        Subject: CN=BB812F165BFA6D7CC3EB7747FCEF8C5E9D7302AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:d9:a0:cf:36:dd:68:c1:8b:0c:46:34:d0:
                    a1:0c:c4:ef:d6:6f:7f:bb:ac:ac:3a:40:1c:32:91:
                    b4:9a:82:0a:8b:5f:ad:4f:50:0c:89:2c:e4:b7:89:
                    06:5d:99:2a:3b:b5:a2:9a:83:00:8e:dc:eb:1c:a3:
                    11:b1:d2:15:97:a4:5f:74:93:8f:9a:5d:48:a4:7e:
                    a9:4d:77:e0:48:8d:09:f0:59:87:4e:b6:21:a1:b6:
                    52:5d:93:4c:6c:68:ee:d0:36:d4:13:e4:19:07:40:
                    e2:e5:bf:70:8e:0c:ae:a1:04:02:87:dc:59:ed:67:
                    f1:f3:19:4d:c7:da:4e:3e:21:ac:24:4a:ca:0b:6b:
                    18:e9:84:fd:26:6d:f6:b4:7d:b2:b2:cf:ff:b7:82:
                    1c:a3:5a:63:20:c8:22:d2:37:64:a7:dc:53:aa:55:
                    bf:bb:5b:2a:d1:d2:f9:60:b2:c8:c2:53:2e:a0:6e:
                    d7:c0:93:7c:e7:a8:08:bc:f7:fd:94:2f:4d:8c:20:
                    3f:e9:82:5d:a6:8e:40:bc:81:15:db:b0:34:2e:6a:
                    33:eb:86:0e:8d:81:61:e6:3d:e0:e3:13:24:92:8d:
                    90:16:a3:00:0c:b1:00:ba:7e:0a:99:df:d9:cb:c8:
                    6c:bd:79:6a:66:13:b9:d2:ea:5a:2a:76:8a:22:66:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:81:2F:16:5B:FA:6D:7C:C3:EB:77:47:FC:EF:8C:5E:9D:73:02:AC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145480.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab0e::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:00:94:c2:d9:03:17:ac:f0:ba:db:b2:0d:d4:47:42:95:a7:
         f8:bf:cd:0e:27:e8:68:74:18:0f:18:2e:6a:cc:26:46:f1:a4:
         35:25:4a:7d:6b:b0:3f:f2:18:e3:7f:12:a5:de:99:4c:20:2d:
         a7:65:31:de:53:46:e2:ea:9c:16:8e:83:b0:e2:a9:ed:08:66:
         89:13:ea:e0:35:48:f9:60:2c:07:78:cd:62:a8:b2:75:7a:f8:
         19:08:f4:e2:b7:d6:74:27:e2:71:7b:85:dc:6c:e9:dc:25:47:
         ec:70:b2:95:41:e8:09:e2:8f:ab:25:06:95:5d:4a:86:cb:c6:
         1c:f0:dc:11:8f:db:79:fc:0d:01:25:d0:fb:f9:47:cf:62:81:
         0e:ec:2c:ec:08:79:18:bc:28:ea:3c:35:cf:ef:f9:c2:2d:79:
         37:5b:48:cb:05:5d:93:5c:bc:5c:0c:ea:80:05:72:8c:29:74:
         f6:80:23:0c:28:71:9b:af:8a:46:a0:7c:ba:b1:df:ec:2f:68:
         21:78:1e:c6:da:fb:91:b4:78:b1:f7:c0:ae:41:74:c5:5b:5a:
         6e:c2:3c:bc:46:01:a4:67:da:e5:6b:98:ac:57:85:10:2f:03:
         d4:cc:f1:f3:c2:96:02:c7:81:e6:1e:30:63:3c:ef:1a:bc:d9:
         ec:7a:de:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:20 2026 by rpki-client