Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145582.roa
File:                     AS145582.roa (raw, json)
Hash identifier:          0Q2bwTVtqS+zzC0dMrTJZV3IAENw/UGboyQeoI8au3M=
Subject key identifier:   36:43:D7:2C:C3:21:FC:1D:63:47:27:33:F1:D5:56:10:5F:90:DB:C5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       45D5252639D628ADEFE59ADFCB5099A8A4C45E01
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145582.roa
Signing time:             Mon 25 May 2026 03:19:35 +0000
ROA not before:           Mon 25 May 2026 03:14:35 +0000
ROA not after:            Mon 24 May 2027 03:19:35 +0000
asID:                     145582
IP address blocks:        240a:ab74::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d5:25:26:39:d6:28:ad:ef:e5:9a:df:cb:50:99:a8:a4:c4:5e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:35 2026 GMT
            Not After : May 24 03:19:35 2027 GMT
        Subject: CN=3643D72CC321FC1D63472733F1D556105F90DBC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:c2:4d:9e:2e:47:27:c2:52:bc:12:c3:d3:
                    0b:0a:02:61:68:3b:26:39:96:1d:7e:b2:51:4a:56:
                    be:cc:f7:da:f0:cf:ad:92:43:01:40:30:b8:95:72:
                    21:21:97:d7:2a:d4:e7:1e:08:01:d7:c1:72:e5:9a:
                    c8:89:65:a0:91:02:a3:61:9a:04:6f:3b:38:49:5b:
                    98:cb:41:b3:a9:ee:89:bc:2e:bb:6f:cd:a5:50:c7:
                    14:bd:32:d3:d7:2d:a4:d9:b8:df:2b:f2:a9:64:20:
                    bd:72:4e:5b:f8:db:3c:8f:94:57:f1:98:45:da:5c:
                    19:21:33:46:81:b8:a8:bb:2f:dc:a0:a1:60:ce:44:
                    2c:89:eb:0d:f9:f1:c8:d4:79:23:8d:d7:da:e4:01:
                    98:bc:bb:a9:b7:8c:f1:de:36:5c:e1:65:cc:02:72:
                    a9:bf:b0:25:59:cc:7a:c3:fa:52:12:e9:1f:0d:d9:
                    33:72:e3:44:17:c7:c4:97:4c:87:a3:6c:cd:55:92:
                    6c:1f:52:03:9a:1d:8f:8a:57:9b:b6:63:4c:47:f1:
                    a0:41:b5:1d:c0:0c:94:8c:5f:d9:32:d0:b1:8a:45:
                    cf:5d:0c:e8:df:29:93:7b:ee:61:7c:40:23:ad:89:
                    be:8c:fe:20:d2:af:18:2c:0e:1c:aa:ad:21:98:cc:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:43:D7:2C:C3:21:FC:1D:63:47:27:33:F1:D5:56:10:5F:90:DB:C5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145582.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab74::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:b4:e7:1f:d0:af:ec:50:03:91:ca:06:fb:f7:73:d0:a1:ba:
         f7:fd:da:88:15:c7:f2:c8:33:62:c8:f1:b5:65:0c:22:00:c6:
         1c:de:0d:d7:0e:1f:8b:9f:76:6d:4d:3d:14:f2:92:f5:64:ad:
         ca:19:a8:d3:5c:b9:4c:63:27:cf:ff:aa:18:83:b1:b5:b8:23:
         bf:73:3a:82:98:b6:e7:67:fd:2f:f8:ce:de:77:2f:ad:b2:04:
         57:5f:a7:00:d3:7f:5b:81:51:5f:50:8c:9e:88:84:5b:ec:6f:
         c8:93:50:d0:af:be:09:c0:7c:0e:46:af:e3:34:8d:dd:20:bf:
         41:c9:17:ba:30:81:a8:6c:32:80:b1:de:6a:44:d9:f7:c6:2d:
         d4:d6:77:6f:77:ad:44:af:c4:dc:7f:9d:e1:07:e6:38:87:ca:
         49:cd:51:40:8f:0e:31:e8:29:cb:6b:26:cd:c4:6f:c9:8d:50:
         9b:dd:b5:80:53:2f:96:a9:8a:a1:c9:68:70:99:02:c1:95:a9:
         2a:d0:1a:23:69:92:55:6a:8f:aa:a0:4e:0e:30:7c:14:f2:1c:
         60:96:2b:94:59:a8:4f:0a:09:96:13:0f:cb:a3:29:50:b8:96:
         fd:69:6c:cd:1e:aa:36:dd:83:70:5b:17:15:05:2b:92:de:77:
         45:5d:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:46 2026 by rpki-client