Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145692.roa
File:                     AS145692.roa (raw, json)
Hash identifier:          ZBb2nd9oXCkyonVN6Y0bCGb3q4yPvHIKHn+e3y/i/6s=
Subject key identifier:   52:00:D7:D5:8B:9C:CF:76:F5:BE:79:FA:37:8F:2A:A4:8D:BD:19:DD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5ACB2C0A4E6D3E2998126EA29130560E1908E54A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145692.roa
Signing time:             Fri 22 May 2026 02:47:57 +0000
ROA not before:           Fri 22 May 2026 02:42:57 +0000
ROA not after:            Fri 21 May 2027 02:47:57 +0000
asID:                     145692
IP address blocks:        240a:abe2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cb:2c:0a:4e:6d:3e:29:98:12:6e:a2:91:30:56:0e:19:08:e5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:57 2026 GMT
            Not After : May 21 02:47:57 2027 GMT
        Subject: CN=5200D7D58B9CCF76F5BE79FA378F2AA48DBD19DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:b6:85:ae:d6:6f:5f:f9:d0:73:52:fd:02:
                    82:d7:f4:de:a8:04:c4:2c:d5:a7:ef:6d:15:27:65:
                    90:c9:8c:ac:67:fe:af:52:dd:36:06:4b:48:8b:3e:
                    38:1d:d3:21:a8:93:0c:a3:0f:48:2a:71:ef:97:04:
                    b1:a6:3a:5a:a4:66:7c:96:e6:8a:e5:0f:56:a8:fd:
                    25:45:a8:79:cf:90:4d:6d:3f:92:ab:b2:6e:2e:cb:
                    05:d6:99:09:83:0a:5b:4c:17:3d:01:fc:07:a9:25:
                    b6:21:96:47:1d:ee:12:3a:cb:33:cb:1f:28:96:4e:
                    82:6b:8b:6b:42:57:fd:7a:41:86:b2:56:de:d9:fa:
                    c7:6a:ab:31:d7:b1:41:d7:4b:3b:a8:3a:1e:10:3a:
                    a9:61:9a:60:cd:3f:0a:e7:2a:fe:57:bd:b0:8d:06:
                    9c:ef:c8:a9:04:54:05:0c:c6:1c:db:40:54:51:4e:
                    3c:80:22:d6:ea:f9:7c:2d:32:ba:b7:95:07:05:42:
                    98:fd:11:a0:fb:16:67:9d:5f:fc:bf:15:a0:18:2b:
                    23:9f:46:6b:dd:d9:f8:4c:d2:73:d2:fb:ba:09:02:
                    ea:c9:6d:7b:c7:47:75:51:cd:e1:f8:a4:08:37:32:
                    54:57:2b:43:a6:e0:45:8f:dc:c1:22:b9:9c:2d:5b:
                    76:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:00:D7:D5:8B:9C:CF:76:F5:BE:79:FA:37:8F:2A:A4:8D:BD:19:DD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145692.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abe2::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:c6:95:78:da:ef:73:5c:ec:c3:e6:f8:99:ca:8e:b8:db:58:
         5d:c2:77:1a:22:a9:3f:2c:72:15:dc:32:7d:f2:f5:59:a7:2a:
         0a:cb:76:be:1e:b2:bf:0a:f4:eb:6d:67:30:48:ed:5c:0a:bc:
         90:11:ae:2c:98:d7:02:de:6a:bd:b1:38:f3:69:c4:ea:3e:11:
         3c:df:d0:cc:cc:00:bf:c9:6f:fb:fe:11:8d:b7:cc:b7:5b:68:
         65:f2:6e:13:a8:4d:ba:9e:aa:f2:5c:fe:ee:e4:2e:8a:06:0f:
         cd:7e:20:bc:e4:b6:83:40:32:6c:bc:0b:98:38:0e:93:e0:42:
         b6:84:a6:8c:60:23:56:6e:c5:08:45:b5:03:b9:36:be:30:fd:
         48:92:dc:c8:b0:d5:44:57:6c:37:f8:f4:69:f9:23:0a:57:32:
         af:c7:44:0b:24:f6:ec:2d:ae:09:40:01:f2:60:12:88:91:70:
         68:72:40:0e:49:a5:a7:2b:e9:4c:df:5f:6f:fe:c9:44:91:ca:
         e8:7a:d8:40:57:ef:d4:5b:63:3b:6e:74:86:9c:64:db:29:5f:
         0f:83:21:f0:f6:95:2a:81:02:81:f9:fa:e2:7f:7d:f4:1b:3d:
         b0:d8:b0:25:22:5b:65:68:41:5a:a9:58:40:fc:fa:d7:95:5f:
         ea:c9:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:36 2026 by rpki-client