Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145713.roa
File:                     AS145713.roa (raw, json)
Hash identifier:          2uWCH/sqHhSRCLJ2rIueD4Kz4G1RQNEs25wcSOv/SbA=
Subject key identifier:   A2:D7:E9:92:55:AB:21:99:A7:A7:3B:6D:D7:56:EF:0F:D7:75:0C:CD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6F6D2FA072A1CCBC41F932C488683D1F1EE25DEE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145713.roa
Signing time:             Fri 22 May 2026 06:46:12 +0000
ROA not before:           Fri 22 May 2026 06:41:12 +0000
ROA not after:            Fri 21 May 2027 06:46:12 +0000
asID:                     145713
IP address blocks:        240a:abf7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6d:2f:a0:72:a1:cc:bc:41:f9:32:c4:88:68:3d:1f:1e:e2:5d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:12 2026 GMT
            Not After : May 21 06:46:12 2027 GMT
        Subject: CN=A2D7E99255AB2199A7A73B6DD756EF0FD7750CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:15:0c:a7:c4:c7:d8:21:4d:3c:38:4f:2c:
                    63:73:cc:b6:c2:3d:d7:e4:2a:36:37:d1:9c:60:23:
                    15:b1:92:1e:73:08:6e:6d:c1:f7:ef:75:d0:d1:4c:
                    90:ae:c8:19:11:46:6f:ea:3e:cb:7e:55:b8:79:36:
                    1e:58:5b:16:2c:ea:a4:5c:4e:03:21:f9:c4:1b:27:
                    06:f2:35:a0:aa:58:61:8b:a8:81:85:0c:ac:a9:90:
                    c2:88:03:19:5b:79:7f:92:83:fd:7d:f2:33:83:3d:
                    85:6f:f6:31:07:c6:b5:79:6d:96:6c:d0:ad:29:02:
                    de:37:b7:e0:ec:b4:e2:fc:ff:0c:fd:9b:9f:e6:ae:
                    45:c6:b7:52:22:57:f1:e3:e8:7e:e0:9c:44:c3:a8:
                    86:14:81:c7:fa:32:2e:58:f5:23:fd:1b:2d:63:d0:
                    bd:7f:8e:cb:28:6e:3f:f5:d9:bc:8a:f3:49:61:7d:
                    58:bf:b2:20:24:cf:2e:44:56:08:4a:9b:de:77:f4:
                    f6:85:a1:66:7c:8a:72:ac:84:19:fa:70:12:1d:9c:
                    61:5c:b6:e6:35:6d:ca:6c:db:db:a1:ec:3b:78:61:
                    c6:23:a2:6e:99:2f:91:37:9a:79:8f:c1:68:46:df:
                    fa:26:f6:97:3d:3a:bd:6c:95:68:1a:9d:0f:d2:b7:
                    f7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D7:E9:92:55:AB:21:99:A7:A7:3B:6D:D7:56:EF:0F:D7:75:0C:CD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145713.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:abf7::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:ba:29:e6:13:c2:08:3f:11:33:76:7f:6a:ef:c2:03:f0:32:
         16:fb:af:9a:c3:4a:57:bd:dd:7d:67:6b:2c:b2:0f:00:de:51:
         7e:b8:7f:0b:91:6e:0a:bc:1f:2a:bc:f1:b4:87:1b:12:f1:a8:
         c3:c8:72:05:bf:d2:d1:44:1d:3a:ff:01:2a:94:94:6d:77:d0:
         c1:54:a2:24:7e:9e:8a:9b:19:13:13:92:2f:eb:4d:05:22:86:
         6f:ee:30:4e:e5:95:e9:d1:19:3b:92:a5:26:84:2f:69:85:f5:
         df:d7:f4:49:86:c5:d5:ee:d9:5d:20:6d:9f:f0:fd:79:9d:9a:
         73:04:94:82:1b:09:7d:83:c9:60:59:ab:da:90:22:38:90:29:
         af:3a:1c:d7:16:09:05:88:a4:36:ac:0d:1d:1f:ec:b4:4a:8d:
         28:12:da:5c:29:d2:5b:bf:c0:06:67:2c:dc:fa:b3:9a:21:8b:
         e0:d9:c9:0b:3f:16:f9:d8:14:38:96:81:0b:c3:d9:71:df:67:
         0e:7d:00:dc:d6:34:3d:30:ce:c4:ba:a3:aa:2f:c5:11:7f:a5:
         8b:6f:46:97:8f:5d:7a:93:81:a1:58:e4:a7:41:e5:f7:78:c5:
         b8:ba:ea:06:a9:f5:91:b0:32:88:ec:6b:4a:6a:70:9a:ea:43:
         f9:6a:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:00 2026 by rpki-client