Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145818.roa
File:                     AS145818.roa (raw, json)
Hash identifier:          DHqnu1wbgr3IBhpM/3HftpGcEmdS9GO2p43HFl1pkcI=
Subject key identifier:   61:93:67:EC:A9:3D:0D:C8:4A:A5:4E:FF:03:F7:1B:A7:81:7A:A1:B9
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       052287B8F44043C21CF4A0F5CFD679DBD3171B06
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145818.roa
Signing time:             Mon 25 May 2026 03:19:40 +0000
ROA not before:           Mon 25 May 2026 03:14:40 +0000
ROA not after:            Mon 24 May 2027 03:19:40 +0000
asID:                     145818
IP address blocks:        240a:ac60::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:22:87:b8:f4:40:43:c2:1c:f4:a0:f5:cf:d6:79:db:d3:17:1b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:40 2026 GMT
            Not After : May 24 03:19:40 2027 GMT
        Subject: CN=619367ECA93D0DC84AA54EFF03F71BA7817AA1B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:4c:af:0c:5f:51:91:e6:d6:d2:b5:50:2d:
                    41:a1:62:76:03:38:d8:98:4c:8d:11:c2:85:25:f4:
                    1a:0c:36:dd:2e:63:81:6f:a7:fd:e6:91:ac:8d:11:
                    ef:8a:98:10:9a:31:f1:f7:2c:0e:f1:2e:69:fe:54:
                    63:bb:0f:01:ec:9b:83:85:2f:76:14:d2:fd:06:30:
                    ce:39:2b:03:c0:70:4a:28:3c:7d:a7:15:d7:d8:2e:
                    a8:15:1b:67:12:99:12:02:09:da:69:a3:d7:bd:a2:
                    1c:b7:f3:54:0d:3a:25:28:44:49:9c:99:ed:95:b5:
                    47:4b:8b:36:87:75:65:b5:7a:6f:ad:e6:e1:79:4a:
                    13:cd:78:84:2f:96:8c:d8:2c:7c:d1:bc:89:69:19:
                    73:8e:d6:63:e1:ac:0f:95:b6:82:a1:81:89:3d:ca:
                    01:a5:7a:65:0b:0b:c7:1f:a9:29:42:8e:5f:54:33:
                    ed:d2:8f:d4:d5:7d:00:09:c1:8f:bd:af:15:ff:59:
                    53:ac:96:23:4c:dd:ff:42:6c:3a:f3:48:36:9c:83:
                    8b:35:1d:84:ef:6e:81:fc:b3:94:18:57:da:2f:dd:
                    4b:4a:c2:e5:fc:bd:e8:37:f2:5d:c9:6e:1a:20:73:
                    61:7b:eb:6b:6c:e6:eb:b2:eb:cb:ae:52:ca:42:83:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:93:67:EC:A9:3D:0D:C8:4A:A5:4E:FF:03:F7:1B:A7:81:7A:A1:B9
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145818.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac60::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:1d:16:c9:eb:15:df:53:cb:2f:28:4b:56:c2:5e:28:19:2b:
         e2:e5:e3:e6:95:f0:93:e7:aa:62:f6:6e:51:d4:9e:3a:32:c2:
         5f:09:d9:c6:72:30:67:f2:69:25:dc:9d:21:dc:bc:0c:92:4e:
         bf:89:87:87:7c:3c:41:16:14:b6:98:45:fc:8c:32:49:b0:18:
         4d:4c:55:56:48:e9:a0:10:da:1b:8e:19:1b:a5:6a:3d:ce:9f:
         f2:18:b5:a6:23:5c:b6:46:8a:ea:af:fd:42:28:6c:fd:59:7d:
         2d:fc:f7:af:e2:cc:42:80:1a:68:7a:77:8c:a7:47:9b:c8:46:
         b7:63:a5:fc:a6:ff:b6:04:17:3f:af:0c:68:55:99:20:ed:98:
         c4:b7:26:ee:2c:47:c2:8c:46:98:b4:3c:aa:6e:10:fc:d8:23:
         5e:7f:d7:f6:be:fa:9c:79:48:b7:20:0d:4d:d2:a1:1a:7e:a3:
         79:ef:35:c1:c2:4b:f3:c9:69:72:65:1c:af:6d:88:69:70:a0:
         81:d1:24:a5:91:ea:5a:1b:35:25:61:7b:cc:24:31:d3:7f:a6:
         62:96:1d:bc:f8:e2:b3:82:9c:a9:c4:99:b6:3f:d7:0c:14:55:
         45:20:ed:8e:b8:0b:4c:a1:43:20:e1:06:88:38:3a:f7:24:66:
         ec:ff:cb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:58 2026 by rpki-client