Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145516.roa
File:                     AS145516.roa (raw, json)
Hash identifier:          bjbKzDvZPTjcV3GwVBJsZGTPE+GgRfkkFdNmfTsh7Gc=
Subject key identifier:   BD:71:8D:EA:17:0A:E1:46:2D:07:C5:6F:85:CF:9A:2E:AC:E6:5A:7A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       716580FD1D422A8BD2813D0F2B9B6F90505B7327
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145516.roa
Signing time:             Fri 22 May 2026 07:32:12 +0000
ROA not before:           Fri 22 May 2026 07:27:12 +0000
ROA not after:            Fri 21 May 2027 07:32:12 +0000
asID:                     145516
IP address blocks:        240a:ab32::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:65:80:fd:1d:42:2a:8b:d2:81:3d:0f:2b:9b:6f:90:50:5b:73:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:12 2026 GMT
            Not After : May 21 07:32:12 2027 GMT
        Subject: CN=BD718DEA170AE1462D07C56F85CF9A2EACE65A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b3:85:6a:cd:5d:4a:2d:3b:cb:aa:52:b6:d2:
                    f1:ed:39:64:a6:67:68:e9:5b:f5:8c:0d:9e:dd:d1:
                    a7:f4:1f:84:82:2b:a5:ed:99:d1:6e:86:e3:97:43:
                    90:f7:14:8a:0d:97:cf:65:85:cf:66:e0:9b:33:0f:
                    38:a3:87:a8:ef:b4:1f:71:38:dc:b9:5e:f5:13:d4:
                    16:50:d7:74:6e:5b:88:69:f6:9d:2f:5e:af:6f:b1:
                    f7:9f:67:35:ff:09:f4:34:b0:36:65:50:11:4a:3e:
                    73:fc:ff:45:1c:ad:44:85:a1:d1:22:e1:56:04:18:
                    d5:b3:77:5c:60:49:d5:b0:80:19:7f:3d:66:6e:13:
                    43:9d:e3:70:5f:44:6f:e2:a9:79:da:32:83:dc:4f:
                    7b:47:68:62:2c:a2:9f:33:b4:37:fb:8a:6a:8b:a3:
                    49:76:5e:e9:c9:6f:02:57:34:dd:e6:5c:36:ca:16:
                    0d:a5:9d:68:8e:7d:9a:ba:6f:71:4b:c5:f4:fd:c7:
                    3b:94:72:8f:e2:f0:73:9f:80:b9:f0:53:38:33:33:
                    a8:3e:fa:fb:e8:6c:4e:e5:24:a1:59:9d:2a:c7:2b:
                    48:71:63:c8:75:e1:82:f7:aa:65:41:f8:7a:68:de:
                    69:06:6d:f0:22:98:56:1b:17:1f:14:86:12:45:4e:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:71:8D:EA:17:0A:E1:46:2D:07:C5:6F:85:CF:9A:2E:AC:E6:5A:7A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145516.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab32::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:4b:e8:31:e1:c6:9f:8a:b8:94:58:b8:ed:a0:a5:8c:86:5a:
         ad:97:1c:82:8b:7f:f8:7d:ff:72:b3:f1:b1:39:74:ab:02:a2:
         69:96:dd:97:05:cb:10:37:1d:0d:47:c5:7f:b0:93:54:48:20:
         5b:ca:43:b4:a9:dc:13:12:72:5c:15:4c:7d:0e:fa:04:fe:34:
         b7:72:ee:9c:f6:21:b6:39:71:83:07:0b:9d:5b:00:8f:63:c2:
         4d:b1:a6:f3:0a:ab:1f:a3:5b:2c:bd:2a:e7:e2:bb:84:73:4e:
         bd:32:b1:d1:ca:0d:97:45:8e:6c:7f:d5:84:3b:0b:37:e6:aa:
         59:02:1d:41:30:d4:a1:b6:a4:90:f7:d5:d3:0f:83:d7:fc:32:
         18:ef:9d:ad:d9:bc:6f:9f:47:bc:dc:3f:ad:09:2d:1c:cc:fe:
         8d:58:59:6e:99:85:b0:72:ff:2c:b9:c5:e2:2d:80:f6:14:90:
         e2:6d:9c:aa:10:2f:4b:d3:8f:f2:84:0f:50:52:af:62:15:60:
         fe:63:1a:9e:fd:dd:a1:66:c1:d8:9d:91:12:6b:88:16:19:65:
         9d:40:15:eb:96:02:77:db:31:b9:f9:4e:d2:04:1c:bb:39:c0:
         28:0c:ec:aa:9e:09:ce:14:68:94:02:1a:42:97:df:ad:da:5d:
         b3:e9:23:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:04 2026 by rpki-client