Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145532.roa
File:                     AS145532.roa (raw, json)
Hash identifier:          eLxQzN79H+7soV/WT5KmEbLqLzOLmdI53Mc5Bm1o+7g=
Subject key identifier:   89:F7:ED:C6:24:3E:35:0B:23:16:88:18:89:FF:4F:90:89:C8:94:E6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3D8EC8E704C39BDAAF3581ABB1EC5BBE10F97190
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145532.roa
Signing time:             Mon 25 May 2026 06:49:07 +0000
ROA not before:           Mon 25 May 2026 06:44:07 +0000
ROA not after:            Mon 24 May 2027 06:49:07 +0000
asID:                     145532
IP address blocks:        240a:ab42::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8e:c8:e7:04:c3:9b:da:af:35:81:ab:b1:ec:5b:be:10:f9:71:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:44:07 2026 GMT
            Not After : May 24 06:49:07 2027 GMT
        Subject: CN=89F7EDC6243E350B2316881889FF4F9089C894E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:66:84:a8:e0:ca:eb:62:03:52:f1:e5:f8:21:
                    2b:51:3f:b0:0d:9b:7f:75:1e:4c:4b:af:5e:68:bc:
                    74:b8:de:3a:b4:79:f6:86:c9:31:c1:1f:df:cb:11:
                    b9:44:1d:c0:dc:15:6b:13:30:10:ce:91:e2:07:7d:
                    f8:8a:a2:8e:06:d1:26:1b:ee:93:e0:95:c6:d5:6d:
                    c2:53:24:88:a5:96:6b:0b:64:8a:c9:de:3b:21:98:
                    f0:9b:58:96:6f:b7:d4:8f:15:52:54:3b:a1:4a:56:
                    87:d3:30:d3:69:dd:4b:db:68:07:64:b7:ec:51:51:
                    b7:e9:7d:b0:79:b6:7f:78:a6:a6:6e:28:40:35:9d:
                    ff:93:c1:d4:53:db:42:2c:a7:da:e5:31:c1:01:88:
                    b4:ea:bf:91:54:69:db:a9:44:a4:8b:9a:40:4e:23:
                    64:0d:35:89:2e:c0:1f:88:be:12:aa:71:2d:90:86:
                    b2:b1:97:de:d6:64:53:86:b7:82:f7:63:66:3c:2d:
                    4c:1e:a7:41:e3:d4:f2:b7:62:d2:80:2e:ab:ed:8b:
                    af:c8:37:77:da:5a:95:d1:e4:00:d9:24:fd:cd:3d:
                    8a:32:3e:05:b8:8f:e8:53:5f:9b:3d:0c:51:25:42:
                    e4:e1:d5:31:8c:d3:1c:8b:05:f7:be:28:0c:92:23:
                    c8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F7:ED:C6:24:3E:35:0B:23:16:88:18:89:FF:4F:90:89:C8:94:E6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab42::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:4b:08:9b:ca:34:ef:d9:67:ba:64:c7:90:bc:5e:d4:af:15:
         7e:e9:70:ba:63:a9:e8:d4:46:95:c7:d5:12:ca:8d:2e:73:47:
         3d:6a:82:df:2b:a0:af:cf:1a:e2:09:1c:39:97:b1:1e:3c:66:
         32:b4:3e:d1:f0:4c:94:80:63:38:16:2f:c7:06:3b:6c:9c:83:
         a6:60:37:6d:20:da:14:d0:e8:82:70:5a:c4:23:a1:87:6f:81:
         5f:22:b8:68:77:07:ff:5d:29:0c:52:89:84:41:55:e8:d1:67:
         2f:2a:66:c7:fb:94:7c:94:d6:96:03:c5:c7:4b:89:02:e0:39:
         a1:ca:e6:dc:88:1f:40:0a:e6:c1:62:97:a4:eb:22:d9:a6:cb:
         36:5a:03:4e:3c:c2:f5:b0:b9:d0:7e:23:f6:c9:bf:46:f8:2d:
         8c:90:85:40:3b:8e:4f:c9:05:56:b0:65:fd:da:90:4b:b6:9d:
         7e:09:08:b5:d0:8b:9c:d9:d7:a2:86:51:ed:a0:60:b6:bf:f0:
         41:77:b7:60:98:e6:71:8d:e4:75:e4:78:e8:cf:06:d6:97:68:
         d3:9a:4e:ba:35:d5:c1:94:9a:a2:61:b1:34:ff:38:4e:8b:ae:
         56:2b:57:ba:81:10:2a:d6:e4:36:d5:8e:d7:0a:4a:e2:87:91:
         6b:47:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:50 2026 by rpki-client