Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145689.roa
File:                     AS145689.roa (raw, json)
Hash identifier:          kXQjW4GhIKRGnN+h6HRpMoeno9p+lXAk6EX1Dr03jCQ=
Subject key identifier:   6A:D1:1A:23:D9:74:61:43:C9:34:08:A0:98:96:11:16:F2:4F:70:C8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       769FC7548FA65C4F3F1C814B1D9DF71E33C5022E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145689.roa
Signing time:             Mon 25 May 2026 06:48:47 +0000
ROA not before:           Mon 25 May 2026 06:43:47 +0000
ROA not after:            Mon 24 May 2027 06:48:47 +0000
asID:                     145689
IP address blocks:        240a:abdf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:9f:c7:54:8f:a6:5c:4f:3f:1c:81:4b:1d:9d:f7:1e:33:c5:02:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:47 2026 GMT
            Not After : May 24 06:48:47 2027 GMT
        Subject: CN=6AD11A23D9746143C93408A098961116F24F70C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:27:af:75:c6:6e:e8:3a:68:b8:9c:3c:11:47:
                    a3:6c:ba:5c:87:df:82:b8:8a:c0:5f:4d:07:52:d4:
                    1d:21:2d:a9:17:a3:f4:68:37:3f:45:b3:f8:6c:8d:
                    52:a2:b9:cc:bd:b7:45:e6:a6:2e:f8:a8:c0:af:aa:
                    d5:77:6d:86:bf:e2:3d:15:76:df:92:e6:2c:54:65:
                    6b:53:06:be:d0:29:82:1e:2a:99:d1:9b:b0:75:a9:
                    26:d2:d9:7a:44:17:6e:da:be:10:a8:fd:75:a6:bc:
                    20:b4:cd:a2:cd:8e:fc:e7:7a:46:f8:40:bd:5b:fc:
                    64:e4:8f:a4:3f:5a:06:ae:19:f3:c2:07:f6:da:b9:
                    4a:88:e4:15:31:61:7b:cb:fe:72:de:ac:26:e8:92:
                    13:d7:b4:14:37:bd:9a:a8:ce:05:97:05:85:70:01:
                    6f:52:54:6a:4e:5f:e4:32:1d:ae:c2:dc:64:02:b3:
                    ac:75:f3:2f:ee:e8:ab:c6:b5:f3:27:23:fd:d5:26:
                    eb:55:1a:aa:0e:63:1b:79:7b:86:d1:4a:1a:b3:58:
                    df:e3:ee:3d:94:7c:f6:f5:62:0c:9f:03:0a:7f:b9:
                    e4:df:7f:1a:c9:92:a1:1f:eb:d8:61:2c:75:66:14:
                    d7:27:30:b2:b8:13:0d:95:46:7d:7c:e3:bc:d3:97:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D1:1A:23:D9:74:61:43:C9:34:08:A0:98:96:11:16:F2:4F:70:C8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145689.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abdf::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:54:cb:9f:cb:8d:2f:7a:46:77:af:f1:51:97:0e:09:f7:fe:
         d3:bd:62:39:4e:8b:5c:03:27:59:05:00:e2:41:ab:da:ca:86:
         1a:0b:e9:62:5b:52:1e:a8:73:f5:34:78:ef:30:c8:1e:e6:8e:
         56:00:8c:72:92:44:fa:6c:00:97:80:ff:cb:d5:30:de:4d:b8:
         1d:17:d9:c9:47:d4:a4:1f:13:c7:d9:a9:a2:a0:8d:fb:e0:93:
         8e:25:8a:44:b9:20:07:b0:95:8c:0d:ad:bb:9a:8d:a8:1d:b8:
         cc:d6:13:59:3b:3e:11:81:7c:64:45:0d:28:c8:85:8e:4e:1d:
         e4:5d:c3:1c:38:d4:58:43:4f:f3:4e:ad:5a:93:06:40:b1:93:
         bf:a8:fe:d1:4c:b9:c2:be:19:31:e4:9c:ed:51:b3:f9:7a:11:
         67:f5:73:c7:60:f9:3c:df:74:77:1a:78:14:cb:62:24:65:30:
         56:35:06:0b:06:d7:93:2d:47:69:18:57:d2:21:a7:0c:4b:30:
         9f:5a:10:22:e5:c0:8a:5e:4f:5a:f6:51:c5:8c:fb:0c:97:82:
         35:69:d8:40:37:0a:7a:e8:22:fe:ba:e5:28:01:af:a3:21:d5:
         a7:c6:83:91:81:8f:d8:2c:2a:59:76:1b:29:97:3b:44:9c:ff:
         a0:b6:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:43 2026 by rpki-client