Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145830.roa
File:                     AS145830.roa (raw, json)
Hash identifier:          jAYLleSZz2aKj6jQJMeUsZM7PH9zldEHUiJTiz1jx3Y=
Subject key identifier:   18:86:5E:92:D7:E9:EF:A7:82:C8:43:E2:85:CC:E5:C0:22:D7:C1:16
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6ED43CE996EFF53251E46C7B3BCE0EC920F21643
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145830.roa
Signing time:             Mon 25 May 2026 01:38:08 +0000
ROA not before:           Mon 25 May 2026 01:33:08 +0000
ROA not after:            Mon 24 May 2027 01:38:08 +0000
asID:                     145830
IP address blocks:        240a:ac6c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d4:3c:e9:96:ef:f5:32:51:e4:6c:7b:3b:ce:0e:c9:20:f2:16:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:08 2026 GMT
            Not After : May 24 01:38:08 2027 GMT
        Subject: CN=18865E92D7E9EFA782C843E285CCE5C022D7C116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:40:bf:59:19:7b:33:41:1c:99:35:ce:7d:
                    e7:1c:12:fb:3e:28:51:69:11:45:64:05:8f:5a:70:
                    0f:c2:7b:cf:7c:a8:77:64:43:32:64:91:ff:7a:e8:
                    49:e0:76:dc:8a:26:33:22:c5:4e:c8:7a:fe:7c:fc:
                    d1:8d:cc:f9:6e:a1:d0:e2:67:cc:01:fc:42:62:0f:
                    b1:0f:16:c6:0b:2c:3b:63:33:b2:b0:04:c0:8c:57:
                    13:75:d6:97:c0:ab:6d:35:91:af:f8:e7:4c:76:9a:
                    f5:7e:81:e4:9d:b8:dc:2a:68:3a:cb:4d:66:0d:a1:
                    13:dc:16:09:f5:6e:7e:34:de:d8:04:d9:32:ab:6f:
                    bd:d1:18:22:b1:99:23:a0:a7:fb:4e:89:b0:bd:09:
                    32:82:74:ab:75:4f:57:1c:ee:0a:63:88:98:1c:93:
                    87:b4:22:4d:1b:cb:89:fe:5d:f8:1f:c7:28:ea:87:
                    f6:a4:b8:72:fe:cf:b9:ad:06:38:f0:f1:59:b2:77:
                    b2:a8:a7:7b:72:58:ff:1d:b6:73:ae:6f:c0:ff:05:
                    07:94:17:1c:55:68:af:da:49:29:18:ef:4f:ce:65:
                    8b:21:49:e1:6e:ba:60:db:b1:56:4e:29:ba:27:b3:
                    c3:e0:5b:f7:a9:d1:c6:4d:6f:4d:54:f3:90:05:05:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:86:5E:92:D7:E9:EF:A7:82:C8:43:E2:85:CC:E5:C0:22:D7:C1:16
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:6b:ab:3b:e9:28:71:20:eb:59:75:94:ee:72:b7:7b:63:53:
         3a:71:2e:f4:55:6d:5b:5c:31:5b:1e:e1:55:16:de:5c:20:6d:
         bc:8b:9b:13:86:80:a1:67:cd:77:b0:4c:08:31:9e:e7:3c:56:
         b8:5d:c6:00:78:17:d2:5d:36:dd:20:f3:52:9e:d2:27:b7:80:
         ca:ca:b5:7e:eb:76:00:25:1e:46:43:0b:7f:42:f4:71:bb:63:
         2e:06:ce:4d:f4:3c:92:9f:0c:88:04:97:de:07:5e:c4:9e:fa:
         7f:cd:ac:47:d6:af:d6:21:3f:5d:1e:92:cd:f5:10:1a:7a:53:
         09:69:b5:2a:98:63:10:2e:c9:9b:ae:fb:38:87:ce:92:01:4e:
         97:08:41:c7:77:cd:3b:e8:ab:e7:a1:04:a3:d2:6b:d6:4b:71:
         e8:c8:2a:b5:af:35:0a:38:08:76:d1:3d:52:17:c1:95:9d:e4:
         81:1d:91:92:9f:7a:81:34:b4:d9:dc:42:49:cf:fb:be:7a:8b:
         1b:00:4d:e4:d2:a4:34:2a:c5:90:6a:4b:8b:83:d7:c3:c5:f3:
         25:3c:2b:f7:f2:b0:74:b6:07:69:0c:e0:8c:60:ee:9b:8c:c1:
         31:2d:d9:8b:72:b6:ab:ce:f4:4c:49:45:2d:2d:03:1e:cd:b0:
         86:14:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:18 2026 by rpki-client