Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145769.roa
File:                     AS145769.roa (raw, json)
Hash identifier:          oCHU4zSwORGNSWKPrUFi3T7KlgbvKFiP/T1Ni2s81IM=
Subject key identifier:   D9:4E:C6:41:2C:17:85:C5:F3:BF:4F:19:AE:E1:A7:89:DA:C8:66:56
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0F7AEB97AB032635D114493E53D16840C6462BE0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145769.roa
Signing time:             Mon 25 May 2026 03:19:39 +0000
ROA not before:           Mon 25 May 2026 03:14:39 +0000
ROA not after:            Mon 24 May 2027 03:19:39 +0000
asID:                     145769
IP address blocks:        240a:ac2f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7a:eb:97:ab:03:26:35:d1:14:49:3e:53:d1:68:40:c6:46:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:39 2026 GMT
            Not After : May 24 03:19:39 2027 GMT
        Subject: CN=D94EC6412C1785C5F3BF4F19AEE1A789DAC86656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:83:ad:67:94:fc:aa:23:eb:bd:e5:ee:80:85:
                    e2:e8:84:73:eb:a7:dd:9b:69:ad:10:7d:03:44:8e:
                    b3:35:d1:95:48:f8:42:23:5e:8a:d9:4f:b8:20:47:
                    b5:16:92:e0:78:df:e6:6d:a7:41:ee:bb:80:91:30:
                    0c:a0:d6:8c:e0:86:4a:40:c2:54:8e:6d:e2:bf:5b:
                    e1:99:d6:6b:11:10:fa:a2:2d:94:16:41:5a:af:3a:
                    e9:29:33:29:13:fa:84:d1:9c:f0:30:36:ca:53:dd:
                    3f:97:68:fb:c7:72:4e:58:58:02:67:3f:32:3a:0a:
                    0c:7b:d6:0e:e1:79:d2:30:80:01:09:72:f4:98:cc:
                    3b:34:6b:9e:b6:0b:99:67:62:74:68:de:15:b8:41:
                    21:7b:29:24:81:24:e1:57:10:0f:07:93:3e:f1:2e:
                    c6:93:ca:54:78:95:44:33:8c:3b:d6:13:5d:db:95:
                    8d:d2:3e:07:09:51:7a:f1:5c:d4:b7:55:ed:1f:39:
                    05:cf:b1:6c:a9:d4:1c:b5:c9:68:74:2d:e8:51:6a:
                    95:2a:cd:b6:97:f0:bf:9f:98:68:c4:c8:8b:83:70:
                    62:69:55:90:64:a5:b9:90:fb:3e:6a:b2:a5:b6:29:
                    b3:22:31:6f:01:cf:b2:58:5b:df:d4:62:18:0f:47:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4E:C6:41:2C:17:85:C5:F3:BF:4F:19:AE:E1:A7:89:DA:C8:66:56
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145769.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac2f::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:15:c8:71:ff:a1:fa:c2:63:bd:09:f1:dd:33:76:d4:4d:16:
         8a:2d:67:ae:a6:7a:c3:14:5e:17:0f:8c:3d:2c:1c:23:1b:97:
         0e:bf:b4:0d:d4:d6:c3:ce:4f:5a:fc:b1:24:1c:aa:22:3e:f0:
         cb:5f:2d:84:3d:4d:2f:3f:a8:c5:eb:8b:ef:d0:5a:5d:4d:ae:
         dc:37:f7:da:40:aa:12:1f:ed:e1:4d:eb:38:ce:b3:4a:96:f2:
         c4:81:09:12:c5:54:56:c4:9c:35:b3:06:38:13:2b:43:ae:3b:
         47:c4:7e:93:d8:20:10:0a:29:7c:dd:2d:69:02:81:ad:03:30:
         7f:21:71:01:4f:1c:54:59:a6:d0:63:91:86:90:1e:61:a6:3d:
         e4:08:21:69:ff:b1:c3:cd:0f:5b:58:9e:ca:19:c5:6d:9b:c7:
         48:99:3d:73:a5:1b:94:90:bf:1e:64:c5:14:e4:f4:f5:e3:05:
         67:3c:e2:66:d6:0c:bd:8e:0d:cb:b3:d7:f3:9d:52:10:a9:89:
         15:85:1c:0d:b1:64:0d:66:43:cd:6c:cf:9b:e0:a4:e2:05:e3:
         90:3d:06:92:3d:28:e4:8b:69:b5:92:9b:e7:1b:ad:37:37:03:
         d7:5e:44:1b:14:98:6c:a9:31:6c:59:4f:45:8c:b3:89:6a:f0:
         84:86:a1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:07 2026 by rpki-client