Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145593.roa
File:                     AS145593.roa (raw, json)
Hash identifier:          dMV09UlZkFPpEhedDNQCP3g/tP+QTlimW35Lw5GqZsc=
Subject key identifier:   37:C6:79:DE:AB:AB:35:A1:6D:75:E2:EA:6C:DA:C7:5D:AD:EE:23:E4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       16D53A073DD9678544369BE7F5A9804D5844740C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145593.roa
Signing time:             Mon 25 May 2026 02:22:11 +0000
ROA not before:           Mon 25 May 2026 02:17:11 +0000
ROA not after:            Mon 24 May 2027 02:22:11 +0000
asID:                     145593
IP address blocks:        240a:ab7f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d5:3a:07:3d:d9:67:85:44:36:9b:e7:f5:a9:80:4d:58:44:74:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:11 2026 GMT
            Not After : May 24 02:22:11 2027 GMT
        Subject: CN=37C679DEABAB35A16D75E2EA6CDAC75DADEE23E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7f:cc:83:93:47:bf:67:5e:8f:38:3d:fc:9b:
                    d4:41:ac:b0:51:6a:89:b4:c4:df:ec:ea:56:aa:39:
                    b6:04:d1:7a:43:78:24:f5:54:b7:72:3b:cc:a1:f0:
                    79:8e:c7:c7:92:21:f0:3b:4a:b8:09:03:13:5d:b7:
                    e3:fd:73:0f:e6:ca:cc:e4:49:83:6c:02:87:e0:84:
                    77:c2:6f:0c:04:ce:33:3f:a7:80:60:88:dc:5f:73:
                    74:0d:f8:9f:8a:8e:06:c0:36:a1:f0:05:7c:b6:e8:
                    a4:3d:fd:f2:7a:13:27:ec:8d:fb:d5:d2:b9:f0:51:
                    04:90:66:70:c5:6c:15:fc:77:57:fb:22:2b:7a:23:
                    34:b5:4f:c5:15:23:4f:23:f7:27:4b:97:c2:0d:82:
                    3a:d5:5a:4e:81:f6:dd:7f:00:5e:d7:42:2c:6c:d5:
                    6e:e3:2f:e0:ad:4a:43:30:69:2e:01:3d:df:95:02:
                    4a:78:15:ce:1f:00:f8:c5:5b:4d:3f:e6:81:58:19:
                    e1:ef:13:df:0a:07:00:45:ce:6a:83:cf:87:4d:93:
                    e0:b2:20:b7:48:7a:b5:e2:b6:b9:9f:55:c7:f0:fc:
                    0f:14:94:e1:72:2c:c0:e8:21:fb:ca:d4:bd:32:74:
                    bb:b4:80:2d:91:53:ca:4b:8e:78:3b:8c:1f:14:42:
                    35:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C6:79:DE:AB:AB:35:A1:6D:75:E2:EA:6C:DA:C7:5D:AD:EE:23:E4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145593.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab7f::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:06:fb:3b:93:28:98:c6:cf:4e:fd:cd:00:9b:b0:ff:6a:99:
         b6:df:e8:fe:d4:e4:bc:50:c0:16:d5:be:75:4d:a4:da:0e:c5:
         58:98:ee:79:4e:a2:7d:6e:83:64:e1:d1:8a:7b:5e:6d:e3:3b:
         ff:3f:5e:5e:ae:5a:d3:c9:94:6e:f2:2e:eb:76:65:e4:4a:c4:
         a9:ab:1e:60:7b:4b:96:51:7a:94:fb:f1:c4:9e:7b:c0:01:8b:
         52:7a:5d:3b:5d:b1:de:a9:01:60:9d:f1:ff:ed:d1:75:13:81:
         da:f1:2f:bb:56:9a:e2:04:6d:30:13:b6:09:62:f1:15:ab:16:
         65:f0:82:7d:d4:ac:a3:d9:29:b4:f0:4b:a1:b6:b0:6f:8c:e1:
         05:59:bc:75:42:74:17:05:4b:23:01:f2:9d:f3:ae:0c:56:53:
         24:d3:c0:29:ce:12:09:bd:be:e1:eb:4d:50:e4:28:b4:73:e7:
         eb:24:5a:51:c8:11:f1:08:9d:47:2a:a2:9d:c2:3c:a9:cb:78:
         52:83:19:9e:9a:fa:06:77:6e:6b:98:af:5a:73:dd:85:4c:cc:
         a0:75:71:1b:50:d0:f2:93:f4:ff:2e:1d:53:b9:e6:b6:68:fd:
         f0:89:12:a8:90:cf:98:f0:ff:c6:b9:b0:62:cc:d4:2a:ee:fe:
         49:71:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:16 2026 by rpki-client