Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145833.roa
File:                     AS145833.roa (raw, json)
Hash identifier:          uTTVStGFfHXPyKko/luExelPm4af/rVPx5cF5aOpKRI=
Subject key identifier:   0E:9E:6A:1E:97:C4:15:D5:5E:42:E0:77:71:2B:94:DB:5C:18:54:18
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3CF03B394A95C0BA8D908A1DF242FBB420841E77
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145833.roa
Signing time:             Fri 22 May 2026 04:08:11 +0000
ROA not before:           Fri 22 May 2026 04:03:11 +0000
ROA not after:            Fri 21 May 2027 04:08:11 +0000
asID:                     145833
IP address blocks:        240a:ac6f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f0:3b:39:4a:95:c0:ba:8d:90:8a:1d:f2:42:fb:b4:20:84:1e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:11 2026 GMT
            Not After : May 21 04:08:11 2027 GMT
        Subject: CN=0E9E6A1E97C415D55E42E077712B94DB5C185418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:60:a2:87:60:83:03:d0:c8:20:ee:1c:79:f5:
                    1b:8d:90:e6:bc:45:78:2c:f7:cb:84:94:6d:a4:86:
                    6a:c5:67:f9:f2:ff:3e:c7:57:c6:f7:eb:de:27:08:
                    94:5b:82:5b:67:55:05:fa:80:66:cc:4f:44:24:5a:
                    32:e8:4f:7f:16:fd:a2:a3:05:82:1d:0d:e2:96:8d:
                    0f:8f:0d:e9:e7:4a:ae:8f:91:b7:9d:db:cc:82:20:
                    eb:9f:d6:37:8d:5f:9f:7e:87:0e:a3:63:73:f9:aa:
                    fd:9c:25:6a:47:3d:18:ae:b1:64:8b:12:05:49:bd:
                    1a:99:44:50:e4:7c:57:9f:dd:c1:50:ae:46:a6:1a:
                    3b:7e:85:00:c4:22:55:7d:f2:04:8f:07:47:e4:ad:
                    4b:1e:79:7e:fc:d9:7e:10:3c:3b:f8:81:cc:68:26:
                    ba:eb:ec:b9:27:82:21:1a:08:c0:d5:c4:2a:57:90:
                    0b:9e:16:32:3d:57:69:42:2c:2e:13:7b:e6:de:4f:
                    e1:eb:4c:8c:23:27:93:7a:1d:73:a0:af:ab:24:eb:
                    cb:82:59:0d:f4:ac:37:81:19:03:59:90:5a:c3:33:
                    47:f1:66:4f:c0:60:5e:9d:95:53:82:a5:c3:d2:cf:
                    8c:df:38:1b:6d:32:58:cf:c0:83:02:d3:50:17:5f:
                    61:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9E:6A:1E:97:C4:15:D5:5E:42:E0:77:71:2B:94:DB:5C:18:54:18
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac6f::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:5f:d7:f6:41:62:46:e1:0b:9e:f1:3b:86:1f:28:8b:de:4b:
         7a:a8:de:b5:90:02:92:f8:ab:61:09:20:dd:46:a5:07:0a:07:
         34:17:83:00:bb:65:70:03:bf:e0:6a:c2:b9:36:24:74:a2:a5:
         70:34:9b:2d:8c:3d:9c:46:12:3c:83:8b:43:d1:52:1e:a7:a2:
         97:fd:ae:b6:4c:22:91:7c:db:7d:d4:c5:dd:6b:c8:c4:57:5a:
         50:d5:3b:5b:97:bd:e4:22:74:0c:ec:f7:7f:e2:79:2c:9f:a6:
         c3:f6:c6:4b:fb:33:80:f1:05:9a:81:8e:4b:f9:c9:2f:a6:c0:
         07:d3:f7:5c:72:e8:ce:81:9c:1e:62:9d:23:c1:3c:69:d3:09:
         bf:0f:67:c2:8d:77:39:9f:31:bc:9a:67:e0:fb:d1:bc:6b:e7:
         c5:bd:44:a8:8a:f6:20:f0:83:82:b9:9b:61:ca:50:37:05:e5:
         2a:de:e8:52:ed:9d:75:63:27:6c:75:40:d5:e1:85:e2:d6:9a:
         b7:11:63:86:f1:34:65:5b:7a:e6:c0:da:e1:dc:17:e5:8f:39:
         06:e8:50:39:cc:5f:0e:62:a6:38:d8:99:63:86:a0:d1:cd:85:
         df:b4:f6:6f:65:fe:8b:12:9e:37:b2:cc:90:c0:1e:4a:96:26:
         48:21:16:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:13 2026 by rpki-client