Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145981.roa
File:                     AS145981.roa (raw, json)
Hash identifier:          BHKOw67RaXWmvRh1l+m8RZib+lvxDqAt2vEyqJKezwA=
Subject key identifier:   37:95:CC:13:6E:73:0E:F4:72:43:98:55:A2:74:E6:EA:42:08:00:A1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       37C2773552D0963F247E6150034B41A9E37F6502
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145981.roa
Signing time:             Mon 25 May 2026 01:19:56 +0000
ROA not before:           Mon 25 May 2026 01:14:56 +0000
ROA not after:            Mon 24 May 2027 01:19:56 +0000
asID:                     145981
IP address blocks:        240a:ad03::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c2:77:35:52:d0:96:3f:24:7e:61:50:03:4b:41:a9:e3:7f:65:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:14:56 2026 GMT
            Not After : May 24 01:19:56 2027 GMT
        Subject: CN=3795CC136E730EF472439855A274E6EA420800A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:af:6a:c4:ae:88:73:d2:b7:5b:21:71:1c:
                    db:63:9f:a2:26:01:6a:02:ef:f7:6f:2a:73:20:e3:
                    8e:1f:aa:30:fe:c7:65:5a:71:d6:c5:8d:3f:92:ee:
                    39:29:57:2e:8e:85:a4:41:c4:a4:3b:2f:d1:b7:d0:
                    15:f2:15:24:33:b3:cc:d3:b9:df:d1:56:87:b0:f7:
                    75:1a:df:ac:ed:ca:ba:d6:3a:21:fe:04:7e:2c:46:
                    3f:b1:b4:c7:b7:ef:e8:08:7e:7b:62:14:b5:c0:55:
                    ad:4b:ee:cf:8f:02:61:a5:f1:2f:dd:58:1b:bc:06:
                    c5:4f:ef:26:89:d8:54:97:bd:81:c9:f4:81:7a:15:
                    2b:a9:c8:c1:d5:b4:42:89:94:dd:cd:c1:d5:76:30:
                    61:bc:c9:9b:4d:c7:da:b8:ae:32:65:75:24:89:bc:
                    60:6b:1c:d6:d2:f2:ca:05:26:26:aa:40:5e:2a:89:
                    71:12:e6:4f:f1:57:74:f4:08:3b:7e:82:49:25:99:
                    0c:19:e9:43:54:f4:4c:11:81:d5:fb:32:4b:5e:f4:
                    aa:53:fc:9b:45:85:9a:bc:11:ef:90:35:c5:37:37:
                    c2:6b:dc:0e:ec:d8:03:0e:a1:28:7a:82:ec:1c:53:
                    72:2e:a8:f8:ea:4a:ca:e2:0e:92:4b:c3:27:f6:84:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:95:CC:13:6E:73:0E:F4:72:43:98:55:A2:74:E6:EA:42:08:00:A1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145981.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad03::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:81:b6:cd:c1:e9:16:e1:6b:f1:bc:38:01:5f:26:77:8a:24:
         0b:9f:87:62:c4:9e:e1:30:51:f7:e4:2b:10:a4:b2:f5:76:e2:
         e4:89:05:d4:64:32:ba:5e:01:fb:eb:2e:55:68:19:b4:d8:b9:
         ee:75:72:1b:e2:82:ac:8d:59:c6:08:6d:be:76:8f:d9:6d:c5:
         03:69:e5:75:5d:b5:06:75:ea:8e:b6:4e:38:2a:e3:9b:15:b9:
         46:29:9b:94:9f:48:88:9f:57:34:8f:d9:16:e0:35:aa:b7:db:
         c3:ed:55:f7:eb:4b:0e:e2:16:1f:16:dd:d2:81:3b:a7:ae:1e:
         c7:95:a1:8b:a8:2b:dc:db:04:14:42:93:a8:2a:df:04:35:f9:
         f3:4f:33:28:2b:70:d7:c2:95:cb:bb:87:32:d7:8f:13:8b:bd:
         fb:f6:76:31:8a:1d:aa:f0:05:65:b3:66:fb:93:85:84:e4:64:
         d7:d8:82:ee:55:c1:f0:66:cc:42:04:48:15:7a:c6:c7:92:dc:
         4c:3e:01:fe:3b:7b:35:42:ed:d1:ff:e6:e2:80:85:92:b5:ee:
         f8:1c:8e:99:17:7f:af:fc:59:c9:a1:d3:ca:61:f6:e0:f5:40:
         1f:90:e0:9b:96:5b:71:e9:58:f8:e1:9a:ca:ca:9f:8e:4e:3f:
         67:e1:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:35 2026 by rpki-client