Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145786.roa
File:                     AS145786.roa (raw, json)
Hash identifier:          h3gBMSyUhRCaM2m7RqAj6Z7XS5PRoP5sUD9r4ZdS2FM=
Subject key identifier:   BF:D7:8F:08:99:7F:AD:DA:5A:25:A1:92:33:36:11:A3:75:39:E7:89
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       50619132642A2CDA7F4BF6AAD0700135C62E8D65
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145786.roa
Signing time:             Tue 26 May 2026 03:17:14 +0000
ROA not before:           Tue 26 May 2026 03:12:14 +0000
ROA not after:            Tue 25 May 2027 03:17:14 +0000
asID:                     145786
IP address blocks:        240a:ac40::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:61:91:32:64:2a:2c:da:7f:4b:f6:aa:d0:70:01:35:c6:2e:8d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:14 2026 GMT
            Not After : May 25 03:17:14 2027 GMT
        Subject: CN=BFD78F08997FADDA5A25A192333611A37539E789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:90:13:d3:4b:9c:f2:98:19:03:1e:c8:db:
                    91:7b:11:15:37:86:c6:1e:c0:3e:08:1e:6d:4f:a6:
                    de:49:20:c1:fe:09:0d:75:0c:02:c9:f1:aa:12:f4:
                    f1:42:3f:2c:94:99:7e:9c:53:a3:41:0a:db:73:66:
                    92:31:0b:3b:cf:a8:70:b4:78:a3:9e:1d:a1:e9:6b:
                    db:1f:95:44:af:78:bf:9a:79:30:c1:e0:5f:8a:f5:
                    c7:25:a1:6d:b1:7f:b6:23:4d:fa:17:f1:f9:d0:a0:
                    9a:0e:a5:13:10:b3:19:84:2f:7d:46:3a:e7:1c:b0:
                    44:f8:b6:ca:5c:3e:00:93:ba:75:d3:3c:10:df:63:
                    ed:a8:de:9a:16:7f:bb:c0:0a:6a:7b:f8:06:7a:70:
                    06:67:cb:98:d9:8c:e0:aa:4f:60:89:9e:3c:8b:13:
                    a5:da:dc:36:11:15:d7:30:96:bd:85:41:d2:01:46:
                    f2:e8:45:d3:a3:9f:29:e5:6e:36:11:b3:eb:64:af:
                    37:d2:ed:23:39:ac:c4:a7:9a:d5:64:0a:7c:03:63:
                    59:1a:1b:49:dd:7f:be:5d:41:ba:4b:4a:92:c8:45:
                    cf:d4:b5:98:e1:17:75:54:51:ef:bf:5a:29:9c:db:
                    dc:5d:b5:58:fb:43:cc:b1:47:f1:e0:43:b1:ba:69:
                    b9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D7:8F:08:99:7F:AD:DA:5A:25:A1:92:33:36:11:A3:75:39:E7:89
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145786.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac40::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:83:6e:49:2e:ab:38:4a:f6:14:02:5a:46:0d:c8:8c:ec:66:
         24:5d:ca:4c:a4:2c:e0:60:86:43:cd:8a:8f:b3:75:4b:16:c0:
         24:5e:e4:bb:48:33:41:94:d0:4d:38:9b:6f:63:98:35:48:0f:
         93:f7:01:ad:b1:f0:0e:1e:f6:70:c0:12:a0:72:f5:4d:05:a8:
         b0:3f:e7:d8:93:0c:d9:b5:9b:4b:98:96:d9:c1:9a:35:ba:c3:
         5a:1b:44:d9:0e:e2:1b:8b:df:d4:5c:33:d6:df:dc:11:ff:ae:
         12:0d:f4:ed:4f:cf:96:6b:d8:9d:77:02:2a:d3:92:fc:d6:8a:
         27:a2:16:12:78:54:8f:a8:63:e1:f7:83:87:1b:20:f6:49:82:
         be:eb:ee:80:4d:16:fc:57:70:78:23:a7:49:83:60:09:ff:6d:
         de:1a:56:00:f4:99:f0:e4:9e:4b:fb:5c:90:2e:d0:56:12:44:
         f5:c8:ce:8c:ce:ba:6d:d2:79:c7:3c:60:14:37:b3:5e:5a:0c:
         23:0b:4d:03:8f:0c:d1:ab:a8:4f:38:07:f2:55:32:f9:f8:c7:
         df:00:9c:c2:84:f2:6a:ed:16:5f:b9:a0:67:0e:be:91:5d:f0:
         e9:43:e4:a2:bf:19:ac:5c:a3:5f:a9:90:3a:05:36:be:0e:25:
         f3:da:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:28 2026 by rpki-client