Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145817.roa
File:                     AS145817.roa (raw, json)
Hash identifier:          PDFVJm2/V1sUxLFe5JwjC0Wm1OG0eQUX2xlpKTKyAGM=
Subject key identifier:   FE:C7:6E:B0:97:60:60:2C:CD:F4:E9:CB:1F:78:D6:64:90:CF:CE:2B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       475BEB1A4CEB014552CA66157112A289E22274E4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145817.roa
Signing time:             Fri 22 May 2026 06:58:46 +0000
ROA not before:           Fri 22 May 2026 06:53:46 +0000
ROA not after:            Fri 21 May 2027 06:58:46 +0000
asID:                     145817
IP address blocks:        240a:ac5f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5b:eb:1a:4c:eb:01:45:52:ca:66:15:71:12:a2:89:e2:22:74:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:46 2026 GMT
            Not After : May 21 06:58:46 2027 GMT
        Subject: CN=FEC76EB09760602CCDF4E9CB1F78D66490CFCE2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:84:cb:07:1b:50:33:83:cf:7d:14:e9:91:
                    3d:0a:4c:b7:9c:58:e2:e2:13:ba:60:aa:8c:e4:54:
                    74:1f:14:87:0a:f9:cd:ed:1d:67:e5:7f:e1:62:6b:
                    c7:db:ef:17:1e:e9:de:35:02:67:95:79:98:bf:62:
                    c5:1e:02:99:df:bb:4c:41:0b:b4:b7:49:10:e6:34:
                    85:a7:89:88:e7:cd:44:8f:7c:95:69:81:d8:e2:66:
                    5f:44:56:01:99:bd:7d:2f:db:45:a1:24:9b:f1:22:
                    f6:9a:16:a1:f3:21:56:80:35:98:14:79:0f:f1:29:
                    ea:8c:85:01:27:21:df:ef:f8:f8:43:ea:b7:3c:ac:
                    da:af:5a:30:33:0b:64:ff:fa:93:94:be:76:29:ad:
                    bd:25:e5:f1:60:f2:a4:85:d6:ab:35:03:eb:e7:1e:
                    75:79:4e:a8:ea:3b:2b:60:7d:dd:f6:48:44:76:ab:
                    e3:21:9a:82:06:0e:d0:bb:df:33:87:8a:d3:83:89:
                    d9:3b:a4:69:ef:02:0e:0c:93:48:5b:fd:59:21:09:
                    43:b0:79:66:59:a9:54:c6:66:44:39:33:78:7c:c5:
                    c5:60:bb:a6:cb:7a:bf:f8:ba:44:44:67:94:98:57:
                    1d:8d:27:b3:91:71:62:fe:8b:0d:17:7a:c3:a4:06:
                    f0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C7:6E:B0:97:60:60:2C:CD:F4:E9:CB:1F:78:D6:64:90:CF:CE:2B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145817.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac5f::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:38:83:d7:ca:52:8e:21:74:e9:7c:2a:ca:a3:8b:d1:0f:de:
         d6:40:1d:c7:39:cc:3b:f3:8d:21:22:ff:f1:87:1f:c8:6b:df:
         90:fd:e4:ff:86:f4:3f:bd:e2:df:25:45:e5:2a:a6:e4:ea:a3:
         bc:5f:59:91:8a:62:a1:bc:cb:09:2b:be:5c:a1:2b:cd:8a:cd:
         b2:81:7d:bf:49:74:c8:d9:cf:bb:79:01:94:48:e3:fe:cf:9b:
         84:13:b7:0f:95:4f:6c:b5:c0:0c:5d:35:9f:f8:60:16:3c:29:
         09:7b:8e:ff:f5:56:ac:9e:18:f5:c5:b2:d2:76:62:b3:df:cc:
         f0:03:ff:b9:25:ea:78:2d:62:78:5a:83:af:e0:8e:0b:68:31:
         0b:e0:eb:c2:2f:5d:cf:90:7a:05:88:dc:43:11:1e:6d:6b:cf:
         a3:1c:ac:3c:39:82:b9:8d:d8:92:5d:b1:fc:28:f4:ff:bd:e1:
         c9:e3:3c:a3:07:1a:d3:ae:cd:c2:c3:3a:dd:17:f9:16:11:19:
         bf:2c:83:6f:8d:c5:1d:46:05:9e:3d:72:eb:3b:2f:98:c2:85:
         a0:35:6f:b4:4c:06:f8:6f:73:22:65:26:e3:2c:d3:af:9d:6d:
         9a:3c:ae:8d:67:5d:5c:09:0a:03:6e:d3:98:4d:16:64:b2:aa:
         68:21:9f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:55 2026 by rpki-client