Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145730.roa
File:                     AS145730.roa (raw, json)
Hash identifier:          ZtPtJ+J09MJW9GaZsbDbZQevkOsWbAOE84dlAqTWmfE=
Subject key identifier:   85:67:18:93:50:A6:0F:44:1C:9A:C5:9B:47:ED:34:0B:45:21:11:2B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3F0678F51767FB027574B97CFC24F8B7D44A5EA5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145730.roa
Signing time:             Fri 22 May 2026 06:46:33 +0000
ROA not before:           Fri 22 May 2026 06:41:33 +0000
ROA not after:            Fri 21 May 2027 06:46:33 +0000
asID:                     145730
IP address blocks:        240a:ac08::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:06:78:f5:17:67:fb:02:75:74:b9:7c:fc:24:f8:b7:d4:4a:5e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:33 2026 GMT
            Not After : May 21 06:46:33 2027 GMT
        Subject: CN=8567189350A60F441C9AC59B47ED340B4521112B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:61:cd:cb:fd:09:e7:d1:c4:e8:b0:cd:5e:fe:
                    d6:50:75:8b:5c:fb:a1:70:85:17:e3:ad:c6:f5:14:
                    e6:29:00:dd:db:e1:70:13:8f:a0:33:2e:11:d3:b6:
                    a1:c6:bd:2c:fa:9d:7b:cc:b8:fe:c7:01:84:99:bd:
                    17:3d:e0:f8:6b:0b:f0:c5:c0:1e:b6:9f:52:76:3d:
                    69:bf:72:23:dd:43:6f:81:7e:0a:4f:ae:60:3d:54:
                    78:5a:32:b1:2c:f9:95:e9:ce:f9:56:8f:a0:96:e6:
                    7a:73:dd:09:85:cf:b4:5c:fb:e8:ce:b9:de:7d:89:
                    eb:d8:56:86:c4:20:46:e6:7d:c6:3a:12:4b:40:24:
                    6d:fa:c7:1c:ad:0b:3a:02:06:43:be:d3:f9:6d:51:
                    35:c3:fc:05:f6:81:43:cf:aa:02:99:e3:ec:28:5d:
                    e1:bd:57:ee:08:09:a6:8f:92:ed:30:39:bd:43:6a:
                    20:6c:82:39:05:54:81:3f:63:e3:2a:8d:e0:83:d9:
                    41:42:10:55:1d:bc:2b:b3:c4:a1:bf:37:d9:71:7e:
                    08:a3:dd:78:94:57:f3:4f:72:60:62:06:1d:1b:ad:
                    58:27:15:c2:17:d2:53:76:86:53:d6:d1:61:7c:f7:
                    69:70:0f:4b:4b:36:d8:6b:99:2e:db:1e:b1:22:aa:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:67:18:93:50:A6:0F:44:1C:9A:C5:9B:47:ED:34:0B:45:21:11:2B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac08::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:51:2e:89:c7:6c:59:d5:e8:af:d8:ee:41:7e:4a:d9:8a:68:
         c6:8b:c2:dd:79:f7:94:b5:ae:62:3a:62:ac:2f:a7:b6:ef:6e:
         cf:cd:26:ac:f1:80:7c:03:8a:89:8e:a5:0d:9c:cf:6f:71:e3:
         92:eb:81:83:4d:1b:8d:9f:58:87:6b:d8:ff:61:a9:37:02:59:
         ea:69:85:1d:84:67:0f:c3:29:5b:79:18:13:23:7e:f4:a6:5e:
         55:b0:84:ba:b0:77:e7:23:c1:3c:a0:d9:22:16:2f:1a:f6:9f:
         ae:19:16:6e:e0:31:98:28:01:5e:b4:07:78:ec:2c:d3:43:36:
         1d:2f:91:d0:d9:f9:bd:24:2b:da:dc:81:35:91:d9:4f:5f:ec:
         d7:b1:c7:b5:0d:5c:38:3e:ec:f4:f7:f9:9e:80:2c:8a:90:50:
         36:d6:6e:7a:8c:81:12:e2:03:9e:ae:74:d4:e2:37:e0:4d:38:
         ac:5f:45:68:c6:e7:ac:0e:44:c2:63:f7:59:d3:47:49:96:89:
         b1:35:ba:bc:55:cd:89:e8:21:b3:3f:af:92:bf:4d:ef:0c:9f:
         ec:78:9b:87:37:1f:5f:2f:00:57:80:df:f6:66:a4:1a:14:18:
         29:15:2f:5d:0f:e3:de:75:ae:07:b1:74:71:ac:5c:1b:d5:08:
         d3:82:9d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:08 2026 by rpki-client