Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145780.roa
File:                     AS145780.roa (raw, json)
Hash identifier:          00FV5vtrB/mQuRGSgAt624OjvvtrwLZvXs6ZfuP/m90=
Subject key identifier:   89:EB:C7:27:9C:61:A9:6E:61:CD:F5:72:42:2E:E8:31:09:5C:AC:8F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       24E7804F65AB860C5CA95CD8C1EB11A015C23FC2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145780.roa
Signing time:             Fri 22 May 2026 04:08:26 +0000
ROA not before:           Fri 22 May 2026 04:03:26 +0000
ROA not after:            Fri 21 May 2027 04:08:26 +0000
asID:                     145780
IP address blocks:        240a:ac3a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e7:80:4f:65:ab:86:0c:5c:a9:5c:d8:c1:eb:11:a0:15:c2:3f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:26 2026 GMT
            Not After : May 21 04:08:26 2027 GMT
        Subject: CN=89EBC7279C61A96E61CDF572422EE831095CAC8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:b7:5e:d6:5e:83:1d:9c:21:1a:f9:b2:dd:
                    e6:88:0c:c0:01:33:85:bb:ba:bb:b0:98:67:a1:3d:
                    16:d5:e0:f6:b2:e7:2e:2f:ab:2c:9c:9c:37:20:a5:
                    df:df:59:d7:08:91:a2:d5:58:42:77:2f:08:5b:41:
                    fe:b9:8d:87:b8:e8:d9:74:de:ff:38:88:c9:00:a8:
                    44:fa:9e:b8:08:6a:6d:07:d1:88:d2:82:67:8e:03:
                    bf:18:d6:5f:35:8b:cf:4b:ca:17:1c:d1:10:f5:f0:
                    0a:90:73:99:59:cd:e0:b1:fb:90:b3:71:53:79:7f:
                    5c:5e:27:eb:0b:9e:4d:0c:64:a1:f8:48:cf:c3:10:
                    18:65:01:0d:bd:cd:ba:1c:84:ec:d6:ed:8b:c1:44:
                    4e:2d:91:92:23:db:3f:a7:74:b9:1d:70:39:cc:03:
                    41:4c:9c:8d:54:23:c7:2b:3e:52:a0:f3:5f:a8:36:
                    6c:1b:9a:70:2e:43:f7:03:92:9d:da:77:49:87:ee:
                    9e:e1:c7:98:c2:e3:59:ef:bf:2f:01:8b:74:ae:ea:
                    4f:75:72:8b:4f:5e:dc:d1:71:6b:fe:b9:b3:e3:88:
                    e6:e7:35:4f:c1:40:72:4d:e1:88:6c:32:7c:3e:e3:
                    5e:18:f0:58:d2:37:3e:27:bb:e1:d2:8e:88:e8:2b:
                    34:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EB:C7:27:9C:61:A9:6E:61:CD:F5:72:42:2E:E8:31:09:5C:AC:8F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac3a::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:43:c8:72:8d:47:82:45:4d:64:1d:ca:ed:e9:79:67:e5:de:
         f4:c9:73:cd:89:70:7a:08:9b:38:7b:fb:af:e4:bf:a7:bd:df:
         c3:10:6d:34:ea:c8:13:81:0f:c8:de:c6:22:7c:ce:85:61:0c:
         b4:1d:40:9f:04:d1:d5:99:12:78:8e:c6:8f:bb:0f:61:fc:01:
         e4:16:36:fb:1c:a6:5d:ef:20:b6:ba:d4:cc:fa:63:ed:57:5a:
         76:92:e5:c0:98:b9:70:e7:f4:fc:5f:f2:9f:30:05:19:f7:c3:
         5c:c1:6c:e8:a5:cb:09:42:7b:71:e6:68:69:26:88:03:79:4e:
         b1:1b:36:62:01:49:46:5f:20:bd:16:09:91:ae:00:8f:b6:d0:
         32:55:be:54:d5:13:a3:c5:57:ea:c4:59:bd:7c:8d:91:41:3a:
         56:07:a1:cf:83:27:b2:5e:71:5a:5e:47:ca:dc:4a:78:ae:11:
         11:35:68:37:d2:6e:c8:7a:47:1d:b4:b7:03:bc:2c:f2:bc:4d:
         1e:b6:d5:d4:05:e3:f7:40:8b:48:8f:e8:59:6e:31:54:62:00:
         dc:a4:3f:bd:ad:dd:b9:3a:8c:af:3e:38:a0:fc:99:4a:51:99:
         68:72:37:4f:7c:fa:b4:8c:71:8e:04:49:6d:89:76:66:72:82:
         c9:e2:e3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:55 2026 by rpki-client