Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145876.roa
File:                     AS145876.roa (raw, json)
Hash identifier:          TAoEliMUhn4iyM8s8ZVZ9js1QgsvHoT1CP9POKReGW8=
Subject key identifier:   A8:F1:4A:2C:55:7C:2F:DA:E1:A0:7B:24:B6:00:2A:BB:98:3F:CF:E0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       075CA978425E4E9F7299BBFCCBCF4F091417B1F5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145876.roa
Signing time:             Fri 22 May 2026 06:45:56 +0000
ROA not before:           Fri 22 May 2026 06:40:56 +0000
ROA not after:            Fri 21 May 2027 06:45:56 +0000
asID:                     145876
IP address blocks:        240a:ac9a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5c:a9:78:42:5e:4e:9f:72:99:bb:fc:cb:cf:4f:09:14:17:b1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:40:56 2026 GMT
            Not After : May 21 06:45:56 2027 GMT
        Subject: CN=A8F14A2C557C2FDAE1A07B24B6002ABB983FCFE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:83:67:5d:bc:f9:8f:a5:11:e4:10:95:b9:
                    a0:35:75:4f:90:3e:c9:6d:14:ba:20:51:e5:be:53:
                    d5:52:30:ea:a3:3c:37:6e:f4:3e:9f:6e:1b:4f:72:
                    38:24:4f:c1:5e:90:8b:50:96:6b:8b:46:bf:93:40:
                    ae:d1:f2:09:23:ae:3b:8a:c2:d1:11:64:c1:fc:57:
                    97:34:2c:7c:c3:f2:11:0a:1b:3e:cd:a1:73:61:c6:
                    8e:30:4e:52:97:af:3b:58:27:df:2f:33:05:6e:1f:
                    56:7c:10:bd:33:9a:f0:05:da:ee:c2:d3:fb:dd:01:
                    27:ab:43:8f:40:d5:bb:a4:a8:84:26:5d:73:61:a3:
                    86:b7:e1:07:ea:d2:f9:d5:bc:3e:70:5d:a2:93:74:
                    51:0a:8b:dd:79:79:62:e4:6f:81:ba:d8:ed:90:0d:
                    d5:e0:bc:8f:6a:d0:b5:86:57:7b:c7:63:8c:26:cd:
                    29:bc:64:37:9d:ed:e9:65:86:75:c0:7e:27:94:d8:
                    77:1b:1b:57:b0:57:74:f1:be:29:14:5a:56:3f:1b:
                    94:1e:4b:0b:d7:cf:12:64:3c:33:2b:ab:5a:b3:5c:
                    7e:3a:37:72:ca:4a:a7:68:5b:88:2b:bd:dc:5d:3c:
                    7f:53:71:fa:df:43:8a:03:1b:06:d0:b4:48:63:9e:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F1:4A:2C:55:7C:2F:DA:E1:A0:7B:24:B6:00:2A:BB:98:3F:CF:E0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145876.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac9a::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:2e:75:09:59:2d:0a:7e:0a:21:b1:90:54:8a:7f:72:ee:69:
         bc:39:2f:d1:92:b9:44:cb:04:cd:d0:f2:63:1c:15:bc:9f:50:
         92:75:2c:3d:bf:46:05:1a:ee:cc:ef:07:47:ad:d9:76:a9:7b:
         04:1e:c4:7e:38:c5:99:e5:63:08:c9:02:1f:30:cc:09:68:92:
         4a:30:be:95:fd:5b:70:d3:29:07:a8:ff:c1:21:78:5c:37:27:
         70:f3:a9:43:7a:f8:6b:66:5f:b8:4f:70:85:db:ff:df:4d:f8:
         30:62:50:ca:86:b1:93:16:37:8a:ea:97:b8:22:59:90:c7:9f:
         c8:cb:14:dc:6a:1d:6b:12:96:cf:87:94:b2:92:44:7a:09:09:
         40:88:21:b8:7b:c4:8f:37:9f:25:e0:85:a1:02:4f:f0:2c:50:
         6e:5a:8b:d9:c3:c1:f1:c5:71:64:33:69:57:5b:45:3b:30:f8:
         bd:0d:de:6d:d6:97:d5:c5:ff:9d:e8:8b:59:c8:98:5c:b0:0f:
         0a:e7:44:1d:03:28:f1:5b:89:20:16:30:05:d0:95:3f:d5:7d:
         20:7c:a8:4a:cc:b2:c8:4b:20:a4:ef:bf:66:18:c2:b9:53:a3:
         7e:b8:9c:f9:0e:a0:ac:8b:73:1f:42:b2:3f:94:99:2f:40:55:
         42:ff:5e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:18 2026 by rpki-client