Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145581.roa
File:                     AS145581.roa (raw, json)
Hash identifier:          g/fA++3v4xGmsSug++7U5Aaleev2+xa4eBPq8yHnbII=
Subject key identifier:   84:07:32:A8:84:0D:66:30:30:A8:87:4F:4E:A5:5B:EF:51:D7:4E:8F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       60FF504F07789A2CF7E3150F4C5CEAFDCA667EE2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145581.roa
Signing time:             Fri 22 May 2026 04:08:04 +0000
ROA not before:           Fri 22 May 2026 04:03:04 +0000
ROA not after:            Fri 21 May 2027 04:08:04 +0000
asID:                     145581
IP address blocks:        240a:ab73::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ff:50:4f:07:78:9a:2c:f7:e3:15:0f:4c:5c:ea:fd:ca:66:7e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:04 2026 GMT
            Not After : May 21 04:08:04 2027 GMT
        Subject: CN=840732A8840D663030A8874F4EA55BEF51D74E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8f:00:60:19:11:82:35:58:e3:b9:dc:53:57:
                    d7:6e:1c:8f:c8:ca:9a:c6:90:7b:9a:05:59:67:f0:
                    9a:0d:39:2c:38:5d:37:27:2e:9b:b6:3b:3d:af:f6:
                    7f:82:d5:c5:19:5c:c3:7e:c4:7f:35:e4:c6:a8:c4:
                    53:1d:2f:dc:8b:eb:60:37:75:60:a2:9e:97:80:fb:
                    e7:06:31:82:2b:ba:f5:9b:65:db:4c:03:ff:91:df:
                    a3:99:76:92:db:24:0c:15:69:79:5f:a8:7a:c5:5b:
                    c9:06:2c:88:24:90:e2:e2:a6:50:5b:57:3a:e4:d1:
                    1a:b3:74:5e:c3:da:7f:28:61:73:17:af:13:91:b6:
                    2c:c1:93:2f:cc:69:43:10:71:1d:28:88:8f:0c:8b:
                    08:07:1c:bf:38:23:03:63:de:28:5a:7e:e7:7b:73:
                    44:fb:89:1e:b4:f2:9d:02:91:a4:49:0f:f1:1b:14:
                    2b:31:61:d5:55:4d:22:2a:32:9b:b4:6a:a4:8d:e5:
                    6b:24:90:82:17:a9:3f:13:da:7c:0c:b3:71:9a:98:
                    42:3c:46:6c:de:e5:02:bf:56:db:26:8b:cb:9f:18:
                    9d:da:59:fc:cf:6f:95:23:d0:33:58:20:4d:1f:05:
                    39:d1:9b:bd:d2:d2:58:3c:75:b4:44:bb:e0:5f:c3:
                    4e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:07:32:A8:84:0D:66:30:30:A8:87:4F:4E:A5:5B:EF:51:D7:4E:8F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab73::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:5e:85:86:ee:c9:21:0d:6b:45:23:17:55:2a:56:1c:d8:8b:
         c1:2d:2f:98:3c:5a:88:0d:fa:b5:a3:94:4a:fe:2b:62:86:80:
         ff:1e:8a:89:c3:b1:ec:38:3d:4b:c6:f3:ec:6a:cd:9c:30:53:
         fd:b1:cc:98:c7:b8:19:4c:16:41:74:44:8c:fe:6f:fc:23:11:
         a5:55:77:98:aa:c7:e8:e9:79:6c:f9:15:4d:98:6c:b8:85:4a:
         e4:dc:51:b6:6e:0f:ad:9d:d2:ef:9e:3d:75:98:f1:bf:12:40:
         43:5a:b5:2f:a7:cd:33:53:2f:13:85:43:7a:45:ce:02:45:b5:
         71:e7:69:9e:aa:c8:7e:eb:7e:ab:a9:05:d9:7b:f7:23:d9:a3:
         c2:4d:01:51:5a:5b:5d:6e:60:11:aa:2d:57:ce:60:c1:22:02:
         f8:e8:9c:70:ce:63:7d:13:63:af:27:c8:c4:87:12:71:c4:5a:
         b7:96:e6:20:ce:79:dd:1c:d3:e4:20:9f:bf:56:ab:31:ff:7a:
         31:40:b5:f0:44:b0:9f:96:1b:79:d2:c6:f9:af:3b:cb:20:07:
         ed:e6:9f:17:75:e8:f3:a2:57:7f:d4:13:39:1f:1c:ef:c6:27:
         35:31:aa:b1:f9:6c:7b:3f:d2:0d:af:f6:f4:05:d5:d9:51:a9:
         94:73:23:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:49 2026 by rpki-client