Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145796.roa
File:                     AS145796.roa (raw, json)
Hash identifier:          9rLxkhhQB8zbxJ0zxbBHRtj2b5SBKTbQbIdLmYJgeiI=
Subject key identifier:   7C:B4:81:AB:DC:9E:B5:36:14:64:57:2A:80:66:4B:9A:5B:EA:BB:F6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7478451516F1F568BA8288A6D05ECADBC35479A2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145796.roa
Signing time:             Tue 26 May 2026 03:17:17 +0000
ROA not before:           Tue 26 May 2026 03:12:17 +0000
ROA not after:            Tue 25 May 2027 03:17:17 +0000
asID:                     145796
IP address blocks:        240a:ac4a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:78:45:15:16:f1:f5:68:ba:82:88:a6:d0:5e:ca:db:c3:54:79:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:17 2026 GMT
            Not After : May 25 03:17:17 2027 GMT
        Subject: CN=7CB481ABDC9EB5361464572A80664B9A5BEABBF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:fd:2a:a5:72:b4:23:84:bb:7e:f0:51:cc:
                    a8:a7:5c:60:bb:93:c2:a7:e8:1e:f0:b0:98:26:d5:
                    db:9e:fd:03:59:37:1c:86:87:92:71:ec:b4:88:ff:
                    34:4f:66:37:3c:fe:86:68:a8:a6:29:03:20:9c:8e:
                    5e:21:fb:73:2d:1a:3b:56:cb:61:fa:3d:37:be:88:
                    89:33:55:0b:89:0d:52:b2:de:65:57:56:c2:4d:b1:
                    8e:3e:08:50:cc:5c:98:05:18:47:a2:ff:fe:72:fb:
                    ff:87:8b:a3:6c:76:2d:4e:97:fc:8d:52:23:54:8d:
                    1d:59:59:c1:2a:40:57:7c:c0:04:b7:65:55:2a:27:
                    39:94:c2:f6:f8:42:73:14:64:4c:75:26:04:64:0e:
                    be:ea:84:28:80:5e:ca:ab:0e:9e:c2:9e:eb:10:29:
                    ad:29:bb:c1:4b:34:51:ca:64:5e:19:ad:83:ee:62:
                    5d:c4:24:10:fa:37:ca:d5:e5:99:6a:2b:5c:10:73:
                    f3:dd:72:03:03:34:42:7a:31:14:06:79:19:2b:30:
                    19:9c:05:94:e1:13:b2:53:4f:4c:ca:e8:c4:ec:00:
                    43:cf:7f:a0:12:9a:fe:26:6b:0b:f6:fa:29:b7:6a:
                    a1:cc:50:d0:0b:85:20:f3:47:59:fd:f1:ca:f1:d9:
                    5f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B4:81:AB:DC:9E:B5:36:14:64:57:2A:80:66:4B:9A:5B:EA:BB:F6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145796.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac4a::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:95:a0:5c:3c:91:9f:f0:94:35:86:fd:99:81:f2:64:7f:bf:
         bb:d2:b4:11:2e:67:dd:32:39:4c:85:3c:d3:f3:9f:84:7d:ad:
         30:05:1e:34:b2:67:7a:2b:96:ce:4c:78:49:d5:62:9c:52:f8:
         76:e5:0f:7b:d0:61:dd:91:23:95:0e:e6:c0:f0:cd:41:e1:88:
         26:5c:83:60:8e:36:1b:5d:af:60:a9:2a:d7:9d:f5:31:67:56:
         90:6f:78:c4:b1:9b:6c:92:ed:db:7e:c6:8d:0f:ea:18:f3:ad:
         af:f9:b7:73:30:d2:86:5a:9c:de:4d:43:79:83:b0:57:39:af:
         4e:8c:c9:4d:35:38:6d:b5:70:b8:74:65:de:ee:5c:b2:a1:e5:
         8e:c1:b7:9b:88:8e:6f:a2:9d:70:73:b1:e8:34:3a:4d:fd:db:
         3c:43:2b:65:0f:e6:1e:b4:7e:34:12:86:b5:85:05:21:76:b2:
         b6:a0:91:f8:fd:5f:73:5e:dd:0e:1b:fc:d0:4b:a9:f8:1e:6f:
         7b:6a:d7:9d:d7:f0:09:2e:62:d6:04:58:7c:f3:1a:fa:dc:9c:
         0d:e6:d7:58:51:39:92:57:62:6e:95:52:56:81:94:f5:b4:3d:
         4d:6b:81:b2:79:96:5e:09:03:92:17:33:00:8e:3b:1d:96:d8:
         66:cb:ce:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:50 2026 by rpki-client