Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145806.roa
File:                     AS145806.roa (raw, json)
Hash identifier:          FHbknp+5edRIeawdAsGy0P2Qiwp9htJmiehYm+fWp8A=
Subject key identifier:   7B:18:88:E4:19:8F:BA:AB:E8:EE:10:10:D5:F1:3B:76:C2:72:5F:9A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6E539E987C4BD1B3BA89ED19338407A51587D60B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145806.roa
Signing time:             Mon 25 May 2026 06:28:31 +0000
ROA not before:           Mon 25 May 2026 06:23:31 +0000
ROA not after:            Mon 24 May 2027 06:28:31 +0000
asID:                     145806
IP address blocks:        240a:ac54::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:53:9e:98:7c:4b:d1:b3:ba:89:ed:19:33:84:07:a5:15:87:d6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:31 2026 GMT
            Not After : May 24 06:28:31 2027 GMT
        Subject: CN=7B1888E4198FBAABE8EE1010D5F13B76C2725F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:91:0f:6a:19:40:84:31:99:a0:f2:31:df:
                    df:32:7c:f8:d5:66:62:53:96:c0:64:c6:c8:5f:81:
                    92:0f:21:6f:0c:c8:84:ab:88:05:ee:60:4d:d5:23:
                    b7:81:57:0e:d0:47:49:e9:d6:51:90:95:00:2d:de:
                    0c:0a:68:59:50:b7:89:65:7e:ad:9c:a2:34:b4:91:
                    68:46:bb:d2:ee:5e:a7:16:b9:01:08:3f:f9:09:06:
                    f3:a6:84:23:5b:2d:34:f7:1d:6d:aa:fa:d7:9a:a0:
                    95:34:78:26:47:77:4c:31:2e:54:ed:9f:fb:0a:15:
                    5f:7f:e8:f0:ff:c4:4e:8a:34:ce:ec:c7:e2:0e:22:
                    d8:cd:3e:06:7a:7a:32:de:50:99:f8:e6:74:8b:76:
                    d8:18:a9:cd:69:0f:83:75:5d:4a:fd:dd:ac:32:34:
                    d8:98:d7:6e:f5:79:41:e5:73:a6:c6:76:fa:c6:c7:
                    79:06:42:1c:be:f2:9b:f7:84:50:55:08:34:38:b8:
                    51:d0:7b:d1:e6:e7:4f:4f:ff:45:e2:92:a2:cf:e0:
                    41:ad:7e:7d:d6:12:d6:ba:21:3b:af:02:1d:67:6d:
                    e8:35:06:2a:06:49:6a:b2:cf:79:c1:8d:c8:75:cf:
                    de:4c:cf:b2:25:1e:03:9f:fc:2a:20:e5:bf:88:06:
                    bc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:18:88:E4:19:8F:BA:AB:E8:EE:10:10:D5:F1:3B:76:C2:72:5F:9A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145806.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac54::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:55:6c:76:47:98:7d:11:c7:08:dd:ba:34:58:4f:ba:86:eb:
         fe:b5:d0:c3:64:91:7a:4e:6e:ec:b6:fc:01:dc:f5:ca:2b:29:
         d9:0e:a8:d6:92:f4:2a:29:d1:f4:1d:7f:09:2c:14:bc:87:53:
         97:67:f6:3f:69:6b:4c:a4:8f:71:c0:ae:7b:44:05:96:69:b6:
         48:26:02:e9:e2:92:b9:cd:99:c5:e8:04:e8:2a:7a:0f:50:f2:
         ec:11:db:de:83:f7:c2:be:57:3a:0c:24:73:90:95:c5:45:e2:
         b7:83:ea:8a:fe:f8:d4:20:c8:55:90:8a:99:14:e8:bf:66:08:
         b3:49:bd:24:f4:a2:bc:25:99:63:81:03:fa:22:5c:2d:68:5a:
         f6:80:28:d7:19:85:5a:5d:45:fd:0f:f7:ab:21:b5:01:85:44:
         69:37:6d:e2:b8:23:4f:d6:6e:3b:e0:a2:23:b1:5f:d7:17:60:
         6d:fd:df:8a:4b:02:00:35:51:1b:56:fa:ce:2c:8c:0d:81:c7:
         02:26:05:80:2e:da:8f:f0:f3:f3:f1:79:6b:48:b6:5e:f2:e0:
         da:1c:50:0d:1b:37:ed:0d:57:4d:00:f8:32:f2:42:c9:cd:9b:
         78:db:89:9d:5e:03:2f:66:27:05:2b:22:ed:b5:34:78:16:74:
         ee:a6:07:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:27 2026 by rpki-client