Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145782.roa
File:                     AS145782.roa (raw, json)
Hash identifier:          yXC/2ScJBDatH2MX//6oQXxbzkSY5K7ITpzFPjEn8WM=
Subject key identifier:   F3:85:36:7D:0B:DA:C7:B7:99:EC:AA:46:B6:2A:F8:DF:BE:6A:14:09
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       45F08D04D0A805C0AF03FAB0806F94A311B87C36
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145782.roa
Signing time:             Tue 26 May 2026 06:12:41 +0000
ROA not before:           Tue 26 May 2026 06:07:41 +0000
ROA not after:            Tue 25 May 2027 06:12:41 +0000
asID:                     145782
IP address blocks:        240a:ac3c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f0:8d:04:d0:a8:05:c0:af:03:fa:b0:80:6f:94:a3:11:b8:7c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:41 2026 GMT
            Not After : May 25 06:12:41 2027 GMT
        Subject: CN=F385367D0BDAC7B799ECAA46B62AF8DFBE6A1409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:5c:52:dc:29:9a:5c:73:19:de:49:e6:d5:
                    26:d5:32:e2:47:24:d2:60:ed:c9:75:ae:06:d6:9d:
                    88:f4:d0:8e:59:f3:23:74:a0:1b:63:6b:f7:dd:9c:
                    7f:f3:4d:ff:72:b9:ee:16:56:94:1c:1d:5f:f4:ed:
                    a4:a3:e4:f5:63:c2:9f:d5:e5:9a:b5:07:ce:0e:6a:
                    e5:1c:eb:75:3c:2e:13:52:fd:4d:94:ba:6d:00:eb:
                    c2:e0:79:af:41:ae:b1:04:9c:01:68:36:d8:69:66:
                    8f:04:9a:0e:21:c4:73:0d:da:f3:18:f2:2d:1a:9b:
                    cd:80:82:fb:dd:fb:bf:3e:86:2a:a4:82:67:f2:3e:
                    0f:0b:2b:85:22:23:31:31:83:0e:73:62:c8:4e:48:
                    97:c6:b7:43:e3:49:d0:9a:73:7e:a6:db:c4:26:f3:
                    31:76:91:60:c4:4d:c5:58:15:9d:b4:33:92:50:90:
                    7a:61:ad:f2:92:5e:44:5d:6a:b9:33:48:be:2c:d7:
                    b9:8a:bd:b6:25:24:14:4e:2b:29:f5:02:db:50:dd:
                    36:a9:1a:14:36:3c:62:5b:de:07:49:9a:b9:05:d8:
                    f8:69:d2:7b:77:ce:21:ab:12:cf:47:08:e7:8b:bb:
                    54:c0:a3:1c:46:84:02:d9:e4:22:2c:db:1d:89:27:
                    59:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:85:36:7D:0B:DA:C7:B7:99:EC:AA:46:B6:2A:F8:DF:BE:6A:14:09
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145782.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:a0:e4:9a:1b:f9:b2:c6:64:05:eb:1c:0a:63:cd:56:01:6b:
         59:39:02:54:cd:cf:1e:0f:2c:7c:2b:15:1c:1c:99:5f:f7:2f:
         06:a7:49:95:8d:8e:3c:ec:3f:f0:32:64:fe:bc:01:96:0b:24:
         05:29:57:03:92:9a:e1:c6:b5:28:ee:f9:31:b4:af:2c:13:52:
         17:c3:99:a3:16:68:d4:3a:ed:b4:1a:a6:4c:86:5f:9c:ab:f6:
         35:75:c2:43:46:9a:ee:40:ff:99:48:af:bf:60:8f:de:ea:65:
         82:3b:6f:53:5d:94:0a:72:b5:53:af:67:44:2b:43:bb:64:3b:
         79:c7:33:e6:b4:86:e4:e8:90:40:70:15:32:f0:65:b9:7f:24:
         19:24:40:00:6f:79:70:33:9c:6c:a3:14:70:a3:a7:fd:2b:59:
         ed:36:cd:94:7a:3d:eb:54:95:02:f2:13:12:29:fa:6f:cf:81:
         1a:54:f7:f1:e5:f9:a3:82:39:fb:91:e1:1f:ac:54:4f:eb:ff:
         35:8d:21:c6:fd:b5:40:e9:0a:de:e8:73:86:99:54:df:c4:30:
         c0:5d:d6:2d:0d:63:09:b7:0e:d0:6e:b0:e2:62:56:06:69:7b:
         3d:e9:8d:e1:79:15:19:af:8c:fa:21:62:dd:34:05:c4:6d:88:
         f9:11:75:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:47 2026 by rpki-client