Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145614.roa
File:                     AS145614.roa (raw, json)
Hash identifier:          6cmbVOXsDsTsF6IABB7ggsYbmy3cJ5vl9n4bsQEcxGo=
Subject key identifier:   30:71:DF:C8:F0:2E:96:B1:76:73:C9:CB:7C:46:37:B2:C0:DA:90:02
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4A9D272EF9FF349067932F5FD966F6BDCA53EBBD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145614.roa
Signing time:             Tue 26 May 2026 06:12:46 +0000
ROA not before:           Tue 26 May 2026 06:07:46 +0000
ROA not after:            Tue 25 May 2027 06:12:46 +0000
asID:                     145614
IP address blocks:        240a:ab94::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9d:27:2e:f9:ff:34:90:67:93:2f:5f:d9:66:f6:bd:ca:53:eb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:46 2026 GMT
            Not After : May 25 06:12:46 2027 GMT
        Subject: CN=3071DFC8F02E96B17673C9CB7C4637B2C0DA9002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:0b:24:35:4b:18:f4:00:4c:6d:09:13:24:
                    9d:26:fb:0f:ca:49:72:c1:4a:d7:a6:1e:3c:47:b9:
                    76:bd:66:44:79:0b:1c:f1:96:97:d8:05:00:f6:00:
                    62:3f:d5:30:c0:d0:94:bb:3c:cc:ab:8f:9d:66:e4:
                    c0:f1:bb:cb:10:37:e0:44:9d:a6:be:72:eb:39:78:
                    6a:65:84:5f:73:51:ec:29:17:df:ab:68:ae:ab:66:
                    0b:5c:62:fd:22:7b:b8:d5:f3:84:79:d1:0d:ad:35:
                    ec:d7:57:6e:e9:76:0a:33:34:38:23:df:bf:1d:5a:
                    85:53:2c:c2:06:64:93:0a:98:f1:2d:94:ab:60:ee:
                    08:c6:9c:41:de:0e:11:ff:7c:db:a5:ab:f1:11:24:
                    cf:1e:f5:b5:3d:2d:f7:c9:a3:ef:9d:91:02:ec:f6:
                    dd:ce:6f:00:32:c4:6b:98:61:31:f7:0b:3c:ba:a7:
                    24:0c:6c:de:ea:d1:5d:08:c0:81:7c:02:fe:5a:42:
                    ff:d2:23:0c:f4:86:38:86:a0:88:27:82:97:7e:4a:
                    70:72:b8:c6:95:a3:8e:01:8f:b1:47:04:dd:45:04:
                    27:b6:f0:9c:67:0b:11:91:55:81:28:df:89:22:de:
                    07:55:b3:71:57:2d:52:a5:4b:0c:b5:ca:27:f5:c5:
                    cd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:71:DF:C8:F0:2E:96:B1:76:73:C9:CB:7C:46:37:B2:C0:DA:90:02
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145614.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ab94::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:6e:7e:a1:b0:49:6e:40:06:01:48:80:5a:21:92:c3:82:9d:
         7f:2e:c6:b8:01:b0:48:a8:b3:49:a0:54:03:5c:d5:10:22:c3:
         2a:4f:13:ed:3f:e4:24:22:08:b3:bb:cf:dc:50:2d:e9:a4:ba:
         ff:1d:ed:31:17:df:c7:f9:d4:1a:96:74:91:b7:00:ed:d0:87:
         18:d4:58:7d:3b:d2:a5:f5:c8:6d:12:70:e2:a1:bf:10:cb:d8:
         9b:c2:9a:14:8e:61:29:78:14:30:05:93:fc:43:5b:c5:bd:bd:
         c5:ac:26:a0:05:e4:0a:0d:6d:5d:cc:9a:5b:3e:aa:a9:0b:91:
         b1:81:9f:40:1b:87:40:c6:25:9c:1a:10:a4:54:15:9e:30:99:
         4d:ca:a4:ac:8c:30:3e:76:b2:61:e1:87:21:d8:7e:78:43:9e:
         b5:8e:80:7d:4a:87:25:51:f1:ff:8c:97:a4:1b:a5:ff:8b:52:
         15:fa:ca:7b:ba:b2:f0:b1:e0:97:cd:f7:0e:43:a5:f1:ee:39:
         87:4d:f0:46:66:9a:d3:e4:7a:43:e1:1d:45:b8:e6:e2:8b:9c:
         d3:38:af:33:f1:a2:82:5f:a0:c5:5e:5d:4e:f1:06:62:28:eb:
         41:eb:80:a2:cf:bc:60:a0:d2:1a:26:90:3c:c9:4d:39:10:3b:
         cc:18:33:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:49 2026 by rpki-client