Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145776.roa
File:                     AS145776.roa (raw, json)
Hash identifier:          H2l7e/sV4kfr+KtqvnyQbTTgTj0wnsk/eVoI0XT40No=
Subject key identifier:   2F:48:13:7C:94:2F:2D:46:F0:8D:AD:19:14:1C:EB:A5:15:8B:00:E2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5DCBD873A809F798B999F1CCFD2F2471A738176C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145776.roa
Signing time:             Mon 25 May 2026 01:38:03 +0000
ROA not before:           Mon 25 May 2026 01:33:03 +0000
ROA not after:            Mon 24 May 2027 01:38:03 +0000
asID:                     145776
IP address blocks:        240a:ac36::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cb:d8:73:a8:09:f7:98:b9:99:f1:cc:fd:2f:24:71:a7:38:17:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:03 2026 GMT
            Not After : May 24 01:38:03 2027 GMT
        Subject: CN=2F48137C942F2D46F08DAD19141CEBA5158B00E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:95:e3:81:9e:37:2b:48:05:35:44:ce:0e:
                    89:f5:93:17:1e:c8:df:ce:6e:33:b0:f0:62:1d:6b:
                    f2:a6:b2:d0:71:2e:f5:b7:07:a7:31:df:7a:76:f8:
                    5d:e1:51:a8:7d:51:4a:c5:49:47:50:60:31:f7:9a:
                    06:74:8e:e8:6a:6c:7b:af:f0:a4:c2:33:5d:ab:80:
                    83:64:e5:82:b1:af:7c:11:0a:c5:02:c0:40:ef:56:
                    62:81:76:93:b6:7a:29:aa:54:22:40:3a:71:35:b7:
                    6d:d6:21:85:b0:2f:1e:1c:1b:bc:75:10:dc:27:5e:
                    c7:b4:79:a8:25:36:03:95:f6:39:83:d2:59:d8:f1:
                    9b:4f:e4:76:74:81:1a:73:2a:dd:af:d8:d4:a5:92:
                    b7:61:d6:41:8e:90:86:dd:23:dc:50:03:dd:b7:fd:
                    16:b4:21:77:69:e0:b6:f6:01:69:12:1c:34:42:27:
                    b4:63:e3:a7:fa:81:af:c7:0e:2c:7b:ff:c3:da:ce:
                    c6:fe:6f:bf:fd:1b:a9:36:33:b0:7e:da:00:c8:e5:
                    bf:1c:e2:23:e9:70:8c:53:fa:11:94:ee:5f:b4:10:
                    1a:80:f2:9d:2a:87:af:db:64:bb:48:77:01:22:75:
                    81:c5:a7:79:78:34:e5:fd:61:46:c4:3b:9b:3c:f8:
                    7c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:48:13:7C:94:2F:2D:46:F0:8D:AD:19:14:1C:EB:A5:15:8B:00:E2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145776.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac36::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:a8:0e:ce:ac:bb:62:ea:71:03:d6:61:6d:22:9f:7c:6e:78:
         a8:38:32:a2:9d:15:d7:6c:6b:f4:33:e9:b1:c7:63:c1:55:3d:
         0d:af:5d:f0:e0:3f:a7:ec:e4:cc:d0:95:bf:4c:d2:21:c0:95:
         78:b7:fb:0c:7c:c6:93:dd:a3:69:0e:c8:b1:16:42:29:83:d3:
         9b:fc:ac:98:23:96:78:db:69:d6:0d:78:ed:53:f3:28:4c:3b:
         d5:13:2e:80:44:bc:ab:93:ff:ec:e4:9c:01:18:b2:58:6e:56:
         58:84:f7:f0:b6:35:77:25:f5:de:47:6e:73:b1:23:ee:82:95:
         32:c6:df:0a:8b:06:a9:c7:63:1b:a0:12:55:67:4e:08:5e:21:
         6d:f2:da:82:43:db:c5:21:31:ba:15:8f:24:bc:29:f1:13:05:
         88:d1:d6:71:2b:69:d5:1b:5a:1e:a8:64:64:de:b1:7b:bf:65:
         c1:56:b5:36:d0:c7:f1:5d:5d:5f:05:47:66:82:5b:87:1d:9a:
         a7:d9:91:cb:85:a1:8c:82:21:af:02:e7:e8:70:9f:db:6a:e8:
         e6:04:05:5f:cd:2b:a9:28:05:92:85:2b:5c:c4:55:f1:b1:86:
         4f:0a:e8:67:7a:02:b1:65:51:b6:80:16:ca:e4:bf:e3:90:d1:
         aa:7b:e8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:01 2026 by rpki-client