Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145726.roa
File:                     AS145726.roa (raw, json)
Hash identifier:          cUnrvAlR7KSblSZUfkQSS6ZN4vzKbNu1KVQefe99PMc=
Subject key identifier:   AF:DC:6B:6D:AD:DB:3C:7D:99:51:7E:23:6C:D6:49:F3:6E:28:76:6D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5C5652442E2A69D0C4A549EDD8302AFDE181DB55
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145726.roa
Signing time:             Fri 22 May 2026 04:27:07 +0000
ROA not before:           Fri 22 May 2026 04:22:07 +0000
ROA not after:            Fri 21 May 2027 04:27:07 +0000
asID:                     145726
IP address blocks:        240a:ac04::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:56:52:44:2e:2a:69:d0:c4:a5:49:ed:d8:30:2a:fd:e1:81:db:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:07 2026 GMT
            Not After : May 21 04:27:07 2027 GMT
        Subject: CN=AFDC6B6DADDB3C7D99517E236CD649F36E28766D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:a6:58:28:eb:4f:c9:3d:5f:55:9d:f2:75:
                    da:92:47:fe:23:c4:95:5f:31:7f:5f:5d:7f:28:5f:
                    a5:2e:f7:48:c1:43:90:41:b6:91:35:26:a3:cf:a2:
                    b5:b4:f3:32:95:09:e6:a2:7d:57:aa:3e:a6:0c:1f:
                    6e:a4:56:92:14:96:c8:60:31:2e:1d:87:97:ab:6c:
                    66:7d:9f:15:88:d6:06:60:9e:26:36:5a:9a:8c:d0:
                    8a:50:9f:32:d8:52:85:ba:5a:64:2d:a9:3f:fd:ca:
                    1b:b5:fd:7b:4d:aa:af:a8:b2:b9:a7:ee:34:56:dd:
                    5d:03:5f:48:f2:cd:65:25:53:ff:3f:de:67:aa:63:
                    f3:e0:34:58:91:18:38:c3:b1:df:22:62:32:ee:09:
                    bf:21:ea:f2:7e:d0:1a:e1:14:c6:89:37:86:2d:15:
                    fd:de:00:00:d0:45:05:cf:36:fa:04:00:9d:27:89:
                    a3:77:a9:72:e3:0a:08:7a:d7:4f:bf:8f:6c:67:ea:
                    2f:fb:25:33:d0:3e:16:51:30:7a:34:d0:0c:95:28:
                    0d:27:65:98:85:3d:6e:fc:ec:56:42:70:f3:7b:42:
                    f8:88:9d:42:fb:e5:23:52:e2:e7:3c:61:0d:8f:02:
                    29:0d:08:1e:28:79:09:03:57:a4:71:11:d6:c1:f2:
                    00:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DC:6B:6D:AD:DB:3C:7D:99:51:7E:23:6C:D6:49:F3:6E:28:76:6D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145726.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac04::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:44:dd:4e:9a:41:ef:04:9c:84:4e:2f:7e:c7:d8:1f:02:ab:
         1b:cf:b9:37:c1:9b:03:f8:d6:c5:f3:1e:71:e9:f6:90:6e:c1:
         03:16:d3:dd:6b:64:59:cb:92:0c:a3:cc:12:be:98:a8:3d:3a:
         71:84:d4:e3:44:ee:a9:7f:30:3c:d6:3a:b4:c7:33:06:b6:a3:
         3d:fe:d4:b5:99:09:8d:d4:c8:73:1e:f9:55:e4:40:bf:f8:84:
         b8:bd:4d:76:e5:8c:9c:d2:a6:e9:b2:8b:8a:16:b4:85:3e:dc:
         ed:b6:ba:3c:5b:47:61:ec:08:51:9a:70:53:24:31:ac:8a:87:
         9e:61:0a:6c:13:56:36:7a:fb:e3:ff:1c:71:2f:4a:96:65:66:
         20:26:22:47:57:bb:eb:93:c4:45:b8:52:7b:c4:99:66:ef:2b:
         ca:60:f6:d4:a2:7d:8c:b8:47:71:fb:9e:78:ed:25:a2:1d:07:
         cf:4c:2f:9d:b2:7f:81:5d:87:0c:3a:4d:38:45:4d:0a:99:c5:
         c9:2c:99:7d:db:90:7f:cb:43:64:04:35:c2:cc:c7:98:a4:3e:
         6a:0d:05:4c:ea:69:86:0c:6b:ca:17:06:f0:bc:9f:03:74:e1:
         9b:fd:f1:7d:3a:d0:eb:ae:d5:5d:24:86:ee:d4:a7:86:f3:73:
         14:47:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:00 2026 by rpki-client