Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145510.roa
File:                     AS145510.roa (raw, json)
Hash identifier:          CXxt94W9DEOtZ1Hs9ntQQxwNDJfXgeSJdUZuy6f9yU8=
Subject key identifier:   1E:14:F3:0B:97:E4:9B:F2:30:1B:CB:9E:04:D2:66:67:5F:99:E9:33
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       69A1EF713E1205CCA2015A0FC826DFB6E8F88472
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145510.roa
Signing time:             Mon 25 May 2026 01:50:59 +0000
ROA not before:           Mon 25 May 2026 01:45:59 +0000
ROA not after:            Mon 24 May 2027 01:50:59 +0000
asID:                     145510
IP address blocks:        240a:ab2c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a1:ef:71:3e:12:05:cc:a2:01:5a:0f:c8:26:df:b6:e8:f8:84:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:45:59 2026 GMT
            Not After : May 24 01:50:59 2027 GMT
        Subject: CN=1E14F30B97E49BF2301BCB9E04D266675F99E933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3b:18:8c:88:ed:83:89:75:1b:9e:64:71:44:
                    54:3a:ad:39:31:e2:d8:fa:91:9c:e8:d3:1b:09:6a:
                    92:46:d0:e4:d4:5a:06:87:59:cc:c4:03:fc:ab:2a:
                    78:a6:24:c2:04:d1:f2:af:a3:8a:8b:f1:ae:44:30:
                    ba:36:48:0b:1e:6e:1c:a3:ce:3f:dc:9f:5a:eb:07:
                    6f:00:54:69:5c:e7:06:18:65:3c:36:e4:4f:e4:02:
                    5e:66:92:48:9f:d0:98:0e:ca:a6:96:11:f5:84:64:
                    35:71:e8:36:41:96:68:25:52:4f:e7:43:6e:cf:3e:
                    a5:bf:d4:ea:fb:2e:ad:78:a9:0e:6f:2d:93:7a:f9:
                    b1:60:68:f8:28:dd:45:c8:85:af:ae:54:fb:a4:47:
                    87:04:e1:cf:07:bb:de:10:ef:cf:0d:60:a1:1b:e7:
                    a7:c4:f4:3e:aa:d5:64:c3:33:a2:6b:02:17:e6:b3:
                    81:2a:7b:51:dd:de:cf:1f:f7:ad:05:93:40:2e:07:
                    ad:b5:72:e0:c9:e2:df:24:be:9a:c4:e8:7c:e4:21:
                    d9:33:a2:4c:14:a7:44:50:23:47:3e:2e:ba:91:6e:
                    77:50:3d:fa:92:1f:62:37:9a:5a:2f:3d:a6:53:99:
                    21:67:3e:30:05:e1:0a:87:75:0c:3c:3f:6d:38:6f:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:14:F3:0B:97:E4:9B:F2:30:1B:CB:9E:04:D2:66:67:5F:99:E9:33
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145510.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:c5:e6:6b:1d:e7:45:b1:03:4d:b2:d9:a4:99:69:85:07:ae:
         71:5b:11:54:d8:e2:10:0e:2f:1d:1b:dc:ea:42:53:6e:4d:d1:
         72:2e:36:b7:b9:45:7c:f0:92:fe:21:8c:c3:e9:80:71:6a:25:
         e6:9f:b2:45:f3:8e:ac:21:8b:b4:6d:9a:c6:24:a9:9e:c5:76:
         68:18:13:4c:99:bd:8c:e9:f5:10:66:cb:8d:ca:8a:fe:ae:52:
         2e:86:dd:47:ff:26:c0:4f:3c:8b:ed:bb:cc:03:4c:16:f9:50:
         c3:f5:dc:95:e7:80:9e:5e:e2:52:e3:83:88:53:e2:74:e0:5e:
         74:e2:e4:95:fe:4a:c4:a1:97:65:01:70:38:d0:12:45:95:af:
         d3:a7:3b:91:d7:1e:fb:94:91:7e:1f:36:68:b6:c2:a8:23:2f:
         cb:6b:fe:0d:0c:ce:c9:a0:56:df:86:7e:72:3d:70:f2:71:84:
         ba:a2:eb:75:a9:29:2a:b7:46:c9:4f:a8:fd:fd:ba:a0:30:61:
         79:34:cc:02:b9:c0:d5:34:d1:ea:0e:7f:ac:09:b9:a5:f4:eb:
         fc:eb:4f:66:dc:56:ea:02:34:15:bf:bf:e8:e7:25:e5:2b:a9:
         ef:09:8a:19:e0:48:ea:9c:8d:c5:de:f9:18:b6:e2:0f:3d:e5:
         6a:de:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:59 2026 by rpki-client