Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145753.roa
File:                     AS145753.roa (raw, json)
Hash identifier:          TKPg+Ke9DGGvUBc1FdPo4IZq76C3lI4miF+e5JMPR7w=
Subject key identifier:   96:73:BF:99:EE:B3:20:F8:54:FA:AE:CE:D2:99:8F:85:3C:63:E8:B4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3B74598B2B160F31072DE8BAA4E5FCB3FE47703F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145753.roa
Signing time:             Fri 22 May 2026 04:26:46 +0000
ROA not before:           Fri 22 May 2026 04:21:46 +0000
ROA not after:            Fri 21 May 2027 04:26:46 +0000
asID:                     145753
IP address blocks:        240a:ac1f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:74:59:8b:2b:16:0f:31:07:2d:e8:ba:a4:e5:fc:b3:fe:47:70:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:46 2026 GMT
            Not After : May 21 04:26:46 2027 GMT
        Subject: CN=9673BF99EEB320F854FAAECED2998F853C63E8B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cc:ab:85:30:c0:cd:04:f2:ea:d3:a1:a4:bb:
                    49:4c:09:42:65:52:2d:f3:d5:37:38:79:7c:5f:24:
                    a8:5c:87:77:ca:90:22:05:57:c3:f4:40:f3:e4:9e:
                    25:96:25:5e:92:2e:c0:01:85:ae:aa:fe:16:ca:92:
                    fe:3c:46:05:8f:e2:0d:80:f7:aa:84:85:22:dd:34:
                    b1:a3:07:7f:0a:5f:76:6d:ce:aa:a8:58:9f:af:af:
                    38:b7:b4:52:a3:9a:aa:55:37:72:90:5a:b5:43:79:
                    7f:78:99:3e:7f:45:6b:33:a5:63:ff:35:07:37:a0:
                    3b:ff:50:73:b2:15:1c:45:dc:79:c0:65:9b:9f:70:
                    1a:7a:e3:ec:70:4b:01:ea:f4:91:ea:79:6b:06:89:
                    87:d9:3f:62:9b:5d:01:9b:01:f6:93:92:d7:7d:aa:
                    b5:1d:f7:68:c7:88:21:0e:90:06:56:eb:11:70:d4:
                    b1:e2:31:97:3c:b3:8b:ad:bc:ee:5f:c6:40:f2:2e:
                    43:47:36:3f:97:cd:6e:b9:76:7d:fc:84:50:03:88:
                    97:35:cf:5a:81:90:cc:10:09:76:d4:15:08:41:e5:
                    f6:9a:b3:b8:db:09:86:70:22:0a:86:99:4e:b4:07:
                    f3:78:bb:2e:32:a7:99:ed:47:55:ec:17:fb:04:a1:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:73:BF:99:EE:B3:20:F8:54:FA:AE:CE:D2:99:8F:85:3C:63:E8:B4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac1f::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:2b:3b:fa:86:73:27:43:0a:6f:b5:f1:c2:e1:03:fc:5b:86:
         c1:6b:ab:9a:3d:48:7d:aa:45:df:56:48:b8:09:f9:c0:e9:94:
         e2:38:e8:cd:d5:78:79:d5:96:7b:ae:b5:e1:fa:75:56:c6:1d:
         94:19:69:07:2d:e4:54:38:f9:a0:95:ef:ce:b3:d5:78:20:56:
         f4:d9:fc:e7:1f:1e:e0:0a:d0:54:4b:ef:7e:a1:72:5f:a9:46:
         97:51:0b:1b:55:23:b3:61:b4:e3:c1:f1:91:ac:33:11:78:cb:
         c4:c3:bd:f1:ac:c8:bf:18:9f:35:9e:10:b9:29:8e:ab:3e:b0:
         74:f7:63:81:18:31:98:b5:83:96:4c:e2:db:01:16:e6:80:22:
         c6:46:46:b1:14:ca:ce:00:ec:03:8b:cc:54:69:74:73:18:24:
         3b:c7:e7:8b:d7:5a:a4:e9:f9:16:8e:e3:32:53:b5:bd:64:be:
         54:83:59:99:ab:a8:8d:66:30:e4:9a:ab:8f:e3:d4:10:c0:f8:
         7d:32:42:6f:d7:37:6c:70:d6:02:96:00:0f:2e:0d:56:c0:b2:
         37:b4:62:b2:b7:a8:3f:c8:3e:2d:8a:7a:30:7a:9a:5f:22:9f:
         82:d3:9b:68:b3:3a:10:79:b4:a0:db:4e:3b:ea:47:64:01:86:
         e9:9f:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:39 2026 by rpki-client