Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145982.roa
File:                     AS145982.roa (raw, json)
Hash identifier:          sidddVHTUBZwQe5PFdptYWiuH9H/GNF/18pIB2zL3mU=
Subject key identifier:   6C:2C:9E:27:84:00:90:1A:CD:F5:93:CC:06:82:72:6C:76:F5:44:1C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0CA44DCC14AF62220981B3DA89D85662522AF44A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145982.roa
Signing time:             Mon 25 May 2026 06:28:40 +0000
ROA not before:           Mon 25 May 2026 06:23:40 +0000
ROA not after:            Mon 24 May 2027 06:28:40 +0000
asID:                     145982
IP address blocks:        240a:ad04::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a4:4d:cc:14:af:62:22:09:81:b3:da:89:d8:56:62:52:2a:f4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:40 2026 GMT
            Not After : May 24 06:28:40 2027 GMT
        Subject: CN=6C2C9E278400901ACDF593CC0682726C76F5441C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:af:7e:ef:93:f7:c8:d5:fb:89:a0:a1:85:
                    98:a8:b4:33:4b:d0:dc:39:b2:18:ba:e9:fd:d5:21:
                    0f:77:e7:c1:72:61:4d:61:f4:01:cf:e7:89:94:df:
                    2f:bf:f5:81:42:e2:2a:a4:21:a7:b5:b7:bd:1a:fc:
                    d3:43:56:51:11:bb:40:8d:79:47:78:5f:81:5f:89:
                    d3:58:83:b5:06:80:9c:10:d0:d7:26:b3:3b:6c:4a:
                    46:db:7b:de:82:51:0b:74:45:d1:5d:ef:f5:28:38:
                    21:73:e1:37:38:0a:2c:28:5c:16:25:26:5f:6b:b3:
                    ac:cd:34:25:3e:89:73:5d:dc:f1:1a:39:e0:3f:fa:
                    15:83:1c:d0:56:31:7b:ff:9d:92:40:b4:18:8c:91:
                    a8:ee:e2:29:a0:68:2d:78:fd:65:1b:dc:24:09:9f:
                    ba:d1:7a:15:cb:a5:d3:7d:23:21:b6:2b:f3:19:b4:
                    a2:4a:2b:f4:4b:97:7f:d3:96:cf:c5:ce:e7:47:bd:
                    d3:60:44:93:57:0e:db:13:b5:90:ab:d8:5a:53:d2:
                    fb:d8:13:fb:2c:23:0c:2c:1e:7d:73:98:24:f7:4b:
                    bf:9d:71:c5:51:bb:0c:80:ab:be:35:fc:0d:8f:7f:
                    4e:8e:fa:6a:19:49:9f:9d:1e:c3:59:34:ad:0e:a9:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2C:9E:27:84:00:90:1A:CD:F5:93:CC:06:82:72:6C:76:F5:44:1C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145982.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ad04::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:38:82:ad:ec:3e:5e:69:5f:10:ca:6c:74:fe:98:a2:fe:7c:
         ee:64:b7:61:7a:f8:d0:a8:71:09:13:61:10:9a:77:d7:ad:80:
         9b:03:a7:45:4d:f2:22:15:d9:6a:a3:7d:a6:0d:a2:d0:bf:84:
         81:20:20:2a:7d:84:61:99:c8:a2:ad:ce:da:9c:12:63:97:88:
         89:98:14:2c:4f:22:f5:43:42:a3:55:1e:22:47:c4:82:1f:d6:
         eb:fd:b7:7b:50:b0:6a:a5:1e:3b:2c:cf:48:f2:89:21:5b:39:
         43:16:ca:28:b3:bc:88:1c:b8:aa:35:ee:6a:f7:2e:53:3c:8d:
         9b:d7:0a:b2:0a:0b:f3:6f:6d:23:74:f8:77:b5:09:ea:c3:42:
         ee:48:8b:9e:52:78:09:b5:52:11:38:6d:f9:32:2f:8c:a6:b6:
         35:bf:a1:58:34:20:b8:8a:c0:c5:81:de:2d:b0:c6:25:88:ab:
         71:0f:35:6e:23:8d:5a:40:43:f8:32:58:68:0a:d7:db:b3:bb:
         c5:81:f8:ef:b5:8a:1a:e3:96:d8:30:ad:de:b4:2e:8d:80:e1:
         ca:57:07:8b:38:f0:08:f4:37:61:65:f0:c9:ef:26:5f:f6:10:
         fb:a1:38:74:a8:9f:1e:d5:7e:f1:5c:de:7c:e2:0c:ee:c0:d4:
         8f:b2:86:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:58 2026 by rpki-client