Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145546.roa
File:                     AS145546.roa (raw, json)
Hash identifier:          yusEstgFA4MbaSp9KiVa7rURAfJNtHCsQIeOKqxgQRA=
Subject key identifier:   0D:C5:1B:3B:07:9A:10:06:6A:2F:A7:91:20:A5:E8:73:93:CC:62:10
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7A31EBDB8FC9B6A4825A76387D677E7AB70D8ED3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145546.roa
Signing time:             Fri 22 May 2026 06:05:40 +0000
ROA not before:           Fri 22 May 2026 06:00:40 +0000
ROA not after:            Fri 21 May 2027 06:05:40 +0000
asID:                     145546
IP address blocks:        240a:ab50::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:31:eb:db:8f:c9:b6:a4:82:5a:76:38:7d:67:7e:7a:b7:0d:8e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:40 2026 GMT
            Not After : May 21 06:05:40 2027 GMT
        Subject: CN=0DC51B3B079A10066A2FA79120A5E87393CC6210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:10:43:7e:74:b9:56:cf:8d:33:c9:58:58:
                    dd:cb:49:fa:5d:3f:4b:d4:dc:8e:b1:20:13:7b:d1:
                    fb:5d:fd:c6:d8:d2:88:8f:14:bb:dc:f1:c8:47:8d:
                    a2:60:1d:fd:5e:c8:66:34:0a:79:62:cc:b8:8f:b4:
                    9f:2f:ec:0d:6a:16:19:4c:b0:58:e8:b1:cf:30:88:
                    14:6b:16:97:8a:72:76:04:88:3c:e4:71:55:3f:6a:
                    ce:7a:49:d3:d2:fb:71:e1:22:03:a0:7c:96:8a:95:
                    3d:b9:0c:1e:8a:80:9c:08:c3:95:24:ad:a7:70:98:
                    19:b6:0b:14:b5:7d:4c:fd:1b:69:c6:9f:31:da:c9:
                    22:e2:5c:9b:20:3a:e7:94:12:34:e1:8d:b8:3d:d8:
                    62:ba:59:95:1b:94:c0:3d:99:8d:02:73:22:37:2f:
                    f7:7b:9a:02:f8:aa:e4:fd:93:81:fa:28:93:2c:2b:
                    be:03:09:4b:77:44:14:92:40:8a:aa:3b:ce:f7:6e:
                    e2:dd:71:06:45:f5:77:b1:86:11:e5:5a:63:5a:4b:
                    2a:19:18:b3:fa:b0:ed:ed:ba:15:0d:b5:39:0c:c0:
                    7a:da:54:60:d1:4c:7c:20:31:39:2f:46:f5:8b:d3:
                    52:35:cd:dc:78:a2:ed:3c:b3:f7:21:5a:08:e9:30:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C5:1B:3B:07:9A:10:06:6A:2F:A7:91:20:A5:E8:73:93:CC:62:10
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145546.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab50::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:a1:21:79:96:2c:29:72:9c:37:e8:31:7f:f8:df:88:f8:72:
         90:8c:aa:77:e4:81:e1:7c:31:ed:4f:a8:a5:9a:6a:91:df:23:
         1a:37:99:5e:f4:4e:3d:b0:83:aa:ed:f0:0c:61:49:3c:11:bf:
         45:71:84:68:38:36:14:07:46:39:4d:35:48:24:42:7e:87:5b:
         a7:c0:45:8c:cc:f5:f8:df:14:e8:04:75:2f:44:e0:d9:8e:1e:
         ab:2e:1e:ee:78:4c:f1:26:a0:a2:a7:09:db:f5:0c:13:08:a0:
         24:f5:b2:bd:eb:1e:35:c6:6b:08:02:8c:8f:74:d9:19:8e:d3:
         2f:ea:4f:a5:f5:3e:c9:3a:62:a9:a1:1e:3b:7e:34:53:18:3d:
         cd:62:30:7c:b3:b1:9a:30:63:c5:81:bb:58:bb:71:92:e2:87:
         12:74:79:b4:c2:92:d8:3b:d2:c3:d7:bb:62:bc:10:fc:f2:6a:
         0e:79:9c:e8:bd:fa:65:6f:af:d0:12:50:56:cb:d6:e2:98:1f:
         64:f5:82:82:fa:4b:e7:fd:ee:76:95:4e:06:4e:50:08:30:f2:
         81:1e:5d:90:eb:84:91:ae:e1:fd:30:60:86:60:88:8c:81:67:
         40:f4:25:78:77:4b:e7:bb:01:76:0c:b7:ff:53:3d:73:b6:0d:
         4c:5a:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:18 2026 by rpki-client