Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145483.roa
File:                     AS145483.roa (raw, json)
Hash identifier:          OG9eU6wijOTTZhxZuS01/r8cNvy3UgAv3GqjhPR7YkQ=
Subject key identifier:   E6:5F:86:EA:4F:00:99:F2:2C:AD:D1:F9:2D:AE:96:B0:4A:EE:85:AA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       048A10EB998DCD31FB05BA3161FAFA4834F27106
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145483.roa
Signing time:             Tue 26 May 2026 06:30:56 +0000
ROA not before:           Tue 26 May 2026 06:25:56 +0000
ROA not after:            Tue 25 May 2027 06:30:56 +0000
asID:                     145483
IP address blocks:        240a:ab11::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8a:10:eb:99:8d:cd:31:fb:05:ba:31:61:fa:fa:48:34:f2:71:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:56 2026 GMT
            Not After : May 25 06:30:56 2027 GMT
        Subject: CN=E65F86EA4F0099F22CADD1F92DAE96B04AEE85AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:1f:bb:c8:ba:0e:38:e6:9d:dc:05:9c:6d:
                    6d:2f:dc:1d:6b:94:e8:9f:08:a4:7f:1d:26:02:9f:
                    9c:8f:3c:64:6e:fd:cc:ef:83:d8:de:12:13:5a:7d:
                    6a:c2:b9:e0:5e:a6:f5:18:76:3b:02:1a:2b:4e:df:
                    26:d7:3a:c0:e7:c1:ae:6c:d2:61:d8:67:b6:ff:3b:
                    b5:ff:0c:6a:36:35:8d:a8:27:0f:91:09:d4:bb:69:
                    fe:77:d9:50:f7:73:99:37:be:d9:86:f8:cf:a7:b9:
                    76:3c:76:5e:e1:29:6e:67:6c:f0:a8:87:57:55:7b:
                    20:d4:4c:bf:ee:30:9d:6b:5d:cf:3e:e3:44:ff:b0:
                    20:87:be:8e:97:42:45:08:42:7d:2d:6f:0a:1e:88:
                    21:70:6e:f2:a8:70:23:ac:72:b9:ae:07:a4:c7:69:
                    ba:0f:51:e6:18:5c:86:35:48:b0:3d:e7:75:94:60:
                    82:8f:4c:e7:9d:9c:7b:c0:b2:ac:8f:c6:02:76:4f:
                    38:9a:fe:e8:9f:88:50:46:92:ae:f8:b4:a5:b3:9b:
                    7d:ad:2f:0b:0a:26:1e:4d:d7:14:f1:2b:81:d7:be:
                    2e:d8:a8:3d:c9:fd:6b:30:c7:0f:ba:97:87:b3:c0:
                    17:cf:34:ec:d4:83:75:73:82:fc:ea:70:30:a8:ce:
                    ff:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5F:86:EA:4F:00:99:F2:2C:AD:D1:F9:2D:AE:96:B0:4A:EE:85:AA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab11::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:07:45:1a:c5:9f:e1:12:69:0d:38:1a:21:32:28:69:ae:23:
         9b:b2:25:2c:b0:2a:ee:88:53:6a:de:89:31:27:5f:40:06:25:
         91:50:2d:18:0b:a9:22:ec:f4:48:d3:14:47:58:1e:0d:43:e0:
         cc:5b:d2:00:00:e0:6c:8c:67:f4:c6:b3:76:51:38:12:ec:eb:
         39:41:a0:67:c0:fa:f0:b3:13:c7:42:44:75:65:e0:cd:a5:de:
         30:db:db:e5:18:bc:49:38:a0:2f:d1:31:23:cb:5f:56:be:cf:
         90:ef:f8:bc:66:d3:04:f0:aa:b4:de:e8:91:16:e1:a3:cd:e4:
         43:2f:03:6b:75:07:16:14:b7:09:d2:f5:aa:3d:3d:71:04:cb:
         d3:66:99:6e:1f:ec:e3:f6:13:b2:fa:66:74:e3:c0:ae:1b:92:
         03:58:8e:07:49:a6:d5:5a:da:f0:b3:b8:5b:12:d0:d9:6e:7e:
         ae:af:a6:da:79:0d:6a:c8:03:35:f6:37:66:1a:8c:65:03:7b:
         f0:cb:3c:39:77:c8:54:f5:35:40:e5:cc:f2:fa:a1:a1:59:8d:
         da:5d:1d:f4:dc:15:66:21:58:69:c3:84:78:74:4a:bc:e7:03:
         ef:9b:a7:e9:8f:39:1f:f1:86:73:36:f4:5c:f4:45:91:f8:15:
         d3:20:da:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:20 2026 by rpki-client