Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145607.roa
File:                     AS145607.roa (raw, json)
Hash identifier:          eecFqoXkAPBgl4MoS2jyWOe46jBNpRzQsl4K7yj/1vE=
Subject key identifier:   02:76:6A:1A:49:EB:42:8B:04:E8:1F:06:53:9E:80:86:24:23:A7:99
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       201D3BF0B1D7B2AB45B6642F32271C910D250FCF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145607.roa
Signing time:             Fri 22 May 2026 07:24:57 +0000
ROA not before:           Fri 22 May 2026 07:19:57 +0000
ROA not after:            Fri 21 May 2027 07:24:57 +0000
asID:                     145607
IP address blocks:        240a:ab8d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1d:3b:f0:b1:d7:b2:ab:45:b6:64:2f:32:27:1c:91:0d:25:0f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:57 2026 GMT
            Not After : May 21 07:24:57 2027 GMT
        Subject: CN=02766A1A49EB428B04E81F06539E80862423A799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:9d:d1:da:0f:c2:3c:07:a3:dd:c3:4e:f6:
                    a8:1a:74:b0:c0:e1:31:74:d4:20:30:42:5b:da:27:
                    39:bd:7b:86:4c:81:9d:4b:b2:af:e6:ec:33:ec:81:
                    21:18:59:27:78:6c:8f:8b:02:e3:1a:81:28:b9:59:
                    0d:50:7d:38:cb:83:4a:f4:d7:c8:39:59:d2:70:ef:
                    36:37:f2:60:35:34:5f:5a:63:5a:6b:47:d4:bb:11:
                    6a:39:9e:be:08:1d:84:2a:4b:14:51:39:bb:81:76:
                    77:64:7a:3f:61:23:d6:61:c2:63:98:0c:36:d9:f6:
                    43:89:7a:9b:ef:69:9b:ae:ee:d5:3c:d4:c2:4d:75:
                    64:db:72:b0:23:c0:c2:58:1e:2d:5d:ec:fd:ea:59:
                    23:0e:2f:6a:15:c0:95:9f:0f:69:45:f2:84:54:ea:
                    fa:9b:a6:cf:70:b3:9c:37:2b:14:20:23:b8:1d:0c:
                    0a:46:7d:40:65:7b:73:86:14:c9:0a:8f:9a:49:dc:
                    b2:f4:89:75:96:ba:06:ed:a2:22:bb:32:6d:d3:1a:
                    cd:37:f4:ad:ba:55:46:51:27:5e:51:5c:1d:cb:32:
                    e1:65:2d:be:20:80:90:e5:4a:05:73:fd:2d:cb:e4:
                    cf:d2:3f:95:a5:ee:3d:a9:14:34:2e:91:94:d7:f6:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:76:6A:1A:49:EB:42:8B:04:E8:1F:06:53:9E:80:86:24:23:A7:99
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145607.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab8d::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:fb:75:3f:01:54:2e:c7:b9:de:a3:c8:0f:b8:c7:ec:c4:12:
         a8:1c:01:6c:05:54:61:6c:76:4a:22:e4:c3:9f:72:64:4d:b7:
         c4:b7:51:da:7a:bd:1c:b0:59:55:04:6b:60:d5:96:15:57:2e:
         05:b9:6f:26:d8:d5:8c:95:3c:b9:71:0b:f7:65:70:4d:dd:b2:
         b6:ed:dd:6e:ce:29:7b:24:2c:bf:3c:eb:2c:9d:40:38:6c:d4:
         7f:5d:d5:a9:4d:96:d7:f3:95:79:2d:28:9b:f8:07:05:58:1c:
         5a:04:4c:d3:94:33:2d:2f:c5:c5:e3:99:60:c9:33:fe:2c:a1:
         2e:2b:5a:6e:39:12:91:6c:08:c8:16:66:5b:bb:9c:da:c3:2a:
         3e:4f:50:82:e8:84:1d:4d:6c:f0:62:88:aa:50:e1:66:a2:22:
         b8:6c:64:0d:f7:59:29:3d:f5:d1:ec:32:0a:58:09:2f:a2:44:
         c5:3e:36:65:d4:cb:43:40:5a:14:d3:ec:26:7a:82:b6:d1:ab:
         f7:e2:36:a5:25:9c:5c:f1:69:df:4c:43:d8:17:93:0c:4e:5d:
         3b:54:40:f2:6e:1d:71:ba:91:3c:ff:a4:bc:01:4f:c8:b4:48:
         ea:d1:49:66:81:21:fa:7c:be:94:5b:a0:4a:7f:5a:d7:0f:7f:
         1e:30:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:37 2026 by rpki-client