Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145482.roa
File:                     AS145482.roa (raw, json)
Hash identifier:          fz4huEeZCNhuHni7kiDBFb2zlaVSN13OgZoDUKVZwsA=
Subject key identifier:   79:71:EB:D5:70:52:36:E8:0F:A7:E8:0F:F1:09:54:ED:48:BE:B2:D8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7AAAE50A346AD5598C60EC73F20B28B941237B93
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145482.roa
Signing time:             Mon 25 May 2026 01:20:14 +0000
ROA not before:           Mon 25 May 2026 01:15:14 +0000
ROA not after:            Mon 24 May 2027 01:20:14 +0000
asID:                     145482
IP address blocks:        240a:ab10::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:aa:e5:0a:34:6a:d5:59:8c:60:ec:73:f2:0b:28:b9:41:23:7b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:14 2026 GMT
            Not After : May 24 01:20:14 2027 GMT
        Subject: CN=7971EBD5705236E80FA7E80FF10954ED48BEB2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:b4:c9:37:1b:43:1b:36:25:92:50:51:bd:
                    d8:26:97:76:f6:46:db:21:4e:71:46:fb:89:de:6b:
                    94:f8:b8:73:1a:dc:c7:87:e5:5b:fe:d8:0d:88:11:
                    33:ce:ad:44:c6:47:85:2e:2b:34:c5:73:cc:4e:81:
                    71:42:27:5f:8b:e8:31:55:b4:8e:9d:29:9b:da:b4:
                    41:b9:4c:2a:ff:39:08:f7:a9:99:12:3a:22:70:02:
                    6c:91:32:bf:e7:b5:80:18:20:21:0e:79:6e:f4:9c:
                    a8:22:63:e3:a5:fc:12:8c:c5:d2:31:b8:7e:6d:3a:
                    cc:4a:35:7e:37:42:be:a2:17:67:e0:93:84:ea:a6:
                    d7:e8:56:04:d7:3f:f6:50:4e:19:0b:1d:33:38:bf:
                    54:16:0b:64:25:d0:4e:ef:10:25:6a:ed:16:a0:77:
                    4f:65:05:a1:ca:53:07:5e:61:dc:a1:a6:af:46:9c:
                    09:7f:fa:82:2e:31:bc:be:95:e8:f4:40:37:f0:06:
                    ae:99:27:1a:f9:a6:c7:cf:04:7c:89:96:65:4e:b6:
                    80:7b:23:46:8c:ab:26:7f:5f:6e:8f:fa:e7:98:2b:
                    46:9f:51:37:59:3b:4a:84:19:79:3b:ba:a0:5d:90:
                    47:9c:75:be:d9:58:e5:59:0f:11:1b:66:39:32:0e:
                    73:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:71:EB:D5:70:52:36:E8:0F:A7:E8:0F:F1:09:54:ED:48:BE:B2:D8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145482.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab10::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:b3:ac:f3:2f:b1:60:73:79:3a:32:31:ec:0f:d5:4b:ed:68:
         4f:e4:f0:1f:bd:aa:e3:0d:55:64:08:c2:bc:dc:66:88:e9:38:
         25:63:5e:02:f5:45:1c:b1:1d:7b:e7:66:de:ac:1f:60:38:d9:
         a4:6e:10:9b:ce:85:9b:99:35:3b:1b:9c:c5:f6:54:4f:69:81:
         91:32:26:87:13:26:81:da:06:0d:85:cb:4c:94:2c:74:48:28:
         b5:c6:74:3d:3a:dd:f6:11:82:1a:78:8c:2a:6f:3f:92:62:7f:
         5f:e5:82:02:18:9e:e1:96:89:5e:48:2f:81:9e:bc:53:77:c7:
         34:09:67:41:5f:e5:79:eb:cc:0c:a8:7d:e6:3a:1d:b6:db:d7:
         56:b6:e4:1e:c6:0a:c9:0e:46:58:d3:ac:21:1f:bf:03:6a:6a:
         12:18:f6:b5:a4:a9:c0:f2:2c:1e:b8:c7:be:f1:b9:63:8d:73:
         6a:56:e4:e6:5d:cf:e2:e2:a5:4e:c4:4a:02:f8:e2:e3:8a:25:
         a7:7b:4a:69:a7:f7:c8:4f:c2:57:0e:d0:48:28:50:03:26:44:
         bf:da:6e:61:f0:ae:d2:53:23:9d:9f:f1:f6:e8:3f:76:d4:32:
         fd:52:b7:86:74:5f:22:b7:c9:f0:bf:af:90:a7:bf:14:aa:41:
         37:21:7e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:56 2026 by rpki-client