Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145824.roa
File:                     AS145824.roa (raw, json)
Hash identifier:          8oUqQ3T3ozijAGIrwAPkcJO9hZwdYZZam1YLresKSbg=
Subject key identifier:   A8:64:A4:BA:25:87:D8:28:95:D6:52:65:80:29:97:2A:16:A1:B8:78
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       71C64F8AB9155757D8E67B0DEB78550789610F61
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145824.roa
Signing time:             Fri 22 May 2026 06:05:40 +0000
ROA not before:           Fri 22 May 2026 06:00:40 +0000
ROA not after:            Fri 21 May 2027 06:05:40 +0000
asID:                     145824
IP address blocks:        240a:ac66::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c6:4f:8a:b9:15:57:57:d8:e6:7b:0d:eb:78:55:07:89:61:0f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:40 2026 GMT
            Not After : May 21 06:05:40 2027 GMT
        Subject: CN=A864A4BA2587D82895D652658029972A16A1B878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:2b:ef:7e:2b:fc:c5:74:46:89:76:a6:0b:
                    fe:c6:43:27:20:ff:5f:4e:be:75:87:0c:c7:94:bf:
                    77:5c:0c:d7:a5:5c:fc:7c:fe:24:4e:d9:63:9d:9f:
                    87:00:ab:3f:93:1e:07:02:7e:55:3a:af:88:1d:bd:
                    85:f1:15:94:e4:fb:71:7c:52:c6:3a:56:8d:03:21:
                    a2:1e:9d:71:eb:cd:88:f6:a0:88:20:1f:3f:56:77:
                    7f:c5:38:6e:d4:4c:86:fa:de:d7:2d:da:79:38:8f:
                    3a:3e:cc:42:91:b8:99:9c:17:04:c9:1c:52:cf:ff:
                    67:74:a1:f4:f0:59:c6:d1:84:4e:a1:01:82:a7:36:
                    f4:2d:06:02:c4:c5:b3:4d:b0:d9:b8:55:18:8c:77:
                    97:0f:3b:b2:2e:4b:5d:ff:2a:b8:ac:7e:1f:2e:0d:
                    76:33:59:08:ce:9a:51:e6:2c:3a:af:39:da:88:e1:
                    35:98:62:19:c8:58:ce:a7:c0:37:dc:d7:71:4c:15:
                    c4:03:09:68:5f:f8:02:be:69:57:73:f8:bb:bb:6e:
                    0e:2b:af:4d:9f:09:2d:be:69:c5:79:1c:0d:ee:58:
                    56:35:2f:05:70:ba:c2:a6:8b:ee:f7:8a:55:de:28:
                    56:81:8f:9e:bc:0a:a7:4d:4e:e1:9b:da:b0:b7:da:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:64:A4:BA:25:87:D8:28:95:D6:52:65:80:29:97:2A:16:A1:B8:78
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145824.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac66::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:69:64:00:c9:a9:2c:4f:f3:31:a5:8a:33:21:fa:d9:87:93:
         4c:9e:89:2c:d4:73:24:3f:03:29:47:79:ac:f9:59:69:a4:da:
         d4:c9:10:04:7b:0e:e0:27:41:a2:be:f2:6b:a8:ad:b8:a1:12:
         32:74:45:80:9c:40:8f:6b:5c:8e:80:97:99:fb:6e:25:04:ec:
         14:04:bd:1e:6d:39:8b:0f:63:9f:e6:b2:3f:76:54:3f:e2:e8:
         59:1f:a5:9d:95:bd:ec:89:8b:b9:a7:a2:de:d6:84:39:be:2c:
         93:7c:79:b9:8f:c2:22:56:4b:59:53:d1:76:93:c4:4b:3f:89:
         d7:39:3c:48:f9:ff:59:39:d0:d3:86:74:87:c3:05:9c:cf:97:
         c6:50:8a:59:41:4e:07:b2:f8:d0:88:ca:3c:b3:96:0b:f8:cc:
         08:0d:90:cd:d2:1e:1a:6c:73:ad:f3:40:cf:81:9a:10:c3:f0:
         59:b8:4f:8b:c1:85:9d:5f:49:e3:dc:ea:1d:85:84:39:8d:3e:
         f1:08:3d:f0:ab:30:c0:6f:74:aa:8b:7a:29:4e:30:2f:4e:37:
         74:43:55:a0:13:e9:f2:46:aa:9a:c6:de:fa:fc:5f:ac:c7:5f:
         96:ec:2b:55:39:eb:1e:48:a8:c2:dd:61:61:5e:a8:40:4f:2a:
         e9:f1:32:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:55 2026 by rpki-client