Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145940.roa
File:                     AS145940.roa (raw, json)
Hash identifier:          8WX75YzxiAeJvfqr4rHZMPLvevO5h7NbeBOlzkd9rAQ=
Subject key identifier:   51:FC:78:DD:3E:67:71:00:F6:57:98:EB:0E:E7:D9:2F:93:25:A4:32
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       72C185F942E0E7390B06C943E81CC359496B63FE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145940.roa
Signing time:             Fri 22 May 2026 06:27:36 +0000
ROA not before:           Fri 22 May 2026 06:22:36 +0000
ROA not after:            Fri 21 May 2027 06:27:36 +0000
asID:                     145940
IP address blocks:        240a:acda::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c1:85:f9:42:e0:e7:39:0b:06:c9:43:e8:1c:c3:59:49:6b:63:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:36 2026 GMT
            Not After : May 21 06:27:36 2027 GMT
        Subject: CN=51FC78DD3E677100F65798EB0EE7D92F9325A432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:09:9b:88:45:d2:75:1e:70:a1:e5:e2:9a:bd:
                    9b:23:48:76:b9:94:7f:44:1d:d0:9d:eb:23:54:04:
                    3f:06:53:62:20:50:b1:7b:92:4b:6b:27:ea:21:37:
                    cb:1a:50:0f:88:c9:5a:b2:97:50:78:26:84:9f:b5:
                    47:7a:3f:d8:2d:4a:89:1e:1b:bc:90:23:39:0d:4d:
                    eb:d9:a2:e7:9a:f6:53:8f:61:5b:ff:f0:69:75:40:
                    e9:23:1d:52:d4:d6:35:e4:f5:12:81:cd:fb:11:e9:
                    4a:e3:ce:e4:67:5a:95:74:29:6c:ba:c4:4a:90:79:
                    ef:c5:d6:62:dd:04:c7:96:04:b0:f1:ec:2a:bc:8c:
                    fe:bc:b9:18:43:50:2c:a8:7b:f0:91:00:1a:3a:72:
                    4c:9b:32:a8:b8:80:84:12:e3:fd:67:fe:1c:81:37:
                    58:84:01:33:c3:6a:81:af:55:1f:fa:9f:c6:d0:4f:
                    03:00:b2:d8:8b:36:bc:5f:c6:90:8c:f2:f2:6d:66:
                    8e:da:37:06:1e:44:71:3f:15:f9:dc:c5:ae:06:b3:
                    12:76:26:c9:8f:a3:9f:ab:be:5f:c4:c8:8f:6e:03:
                    9d:1d:34:73:7a:76:2c:e2:e4:7f:a0:7c:ad:86:aa:
                    02:af:09:15:9a:6d:da:d8:ed:24:0d:4e:f6:a5:ab:
                    ef:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FC:78:DD:3E:67:71:00:F6:57:98:EB:0E:E7:D9:2F:93:25:A4:32
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145940.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acda::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:07:f2:fa:1c:b6:50:d3:d3:59:11:46:5c:f9:b9:e4:54:61:
         d3:c2:31:b2:35:ee:fe:3d:69:cf:ae:50:8d:64:2f:5b:fa:39:
         97:ff:dd:81:40:82:5b:cb:28:1c:57:4b:1c:09:69:40:7e:43:
         7c:c6:2d:6c:c5:a7:99:ea:a3:20:48:74:72:ec:09:e0:89:7f:
         3a:9c:99:62:71:fa:9d:fe:21:86:97:b3:32:08:f8:e6:5b:a2:
         cc:54:97:a5:99:80:e0:d4:80:c4:47:44:2f:9f:db:59:66:0b:
         81:bd:fd:0b:b0:e8:e0:32:fc:c2:fd:56:41:38:c4:be:4b:01:
         65:2a:96:3b:b7:f6:d8:92:ab:9e:9d:44:aa:d1:fd:54:5b:8b:
         d9:f7:c3:e0:d0:66:af:b1:97:a9:14:bb:99:6e:49:1c:a7:c7:
         93:cf:b3:8c:8c:fb:23:91:e9:52:4d:4a:a3:6f:51:a1:ee:e9:
         a2:b8:a1:83:d5:80:22:e6:1d:d3:67:ec:c2:ec:10:b1:27:a9:
         71:f1:e4:d1:7d:ea:fb:ad:c0:65:95:5a:14:cf:37:95:4c:5a:
         0c:8f:bf:62:98:d7:e7:05:97:11:6f:f4:e9:e0:98:4d:1b:f8:
         dd:8e:40:6b:4f:80:ed:8f:e2:92:08:f6:c0:ac:c7:c0:bb:57:
         be:04:3b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:24 2026 by rpki-client