Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145760.roa
File:                     AS145760.roa (raw, json)
Hash identifier:          6Yvetog9FWR8WfsgE8DWUYtWLD1rMCW9Viyl+x9Hq80=
Subject key identifier:   08:E0:1F:65:E9:F9:BB:22:1A:DA:E3:4B:13:B0:89:1A:75:A5:83:47
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6990786B78C3F3815F8BF1FE686E0A33592672D2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145760.roa
Signing time:             Fri 22 May 2026 04:08:14 +0000
ROA not before:           Fri 22 May 2026 04:03:14 +0000
ROA not after:            Fri 21 May 2027 04:08:14 +0000
asID:                     145760
IP address blocks:        240a:ac26::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:90:78:6b:78:c3:f3:81:5f:8b:f1:fe:68:6e:0a:33:59:26:72:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:14 2026 GMT
            Not After : May 21 04:08:14 2027 GMT
        Subject: CN=08E01F65E9F9BB221ADAE34B13B0891A75A58347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:68:37:9b:c5:fb:a7:62:22:63:b4:77:9c:96:
                    db:6e:c8:c9:5f:39:e7:c7:8a:ea:03:e8:c6:39:84:
                    b8:80:c6:26:7d:6a:e8:1c:63:55:6f:7a:33:3f:d8:
                    3c:ec:bd:b9:1d:af:1a:c7:01:02:e5:ff:38:76:21:
                    34:c0:aa:e5:e2:45:34:83:a7:03:ae:8b:1f:e9:1d:
                    b9:1d:17:ae:18:cc:ad:98:f6:d0:6d:22:42:77:64:
                    7c:e9:23:4a:2e:d0:29:cb:e4:75:76:c1:71:68:2f:
                    2f:52:f8:d6:8d:93:d1:07:a3:54:38:c7:ac:2e:cf:
                    79:33:b4:fa:9c:82:12:1e:99:30:a9:f2:3c:fe:e5:
                    65:02:6c:c3:9d:bd:6c:b7:75:b7:bb:24:6b:22:56:
                    17:42:df:59:e4:87:bb:e5:70:fa:a4:3b:0f:a0:b4:
                    ca:65:9e:49:92:1a:67:3b:72:e8:a8:fb:a5:af:76:
                    07:77:3c:15:5b:c8:e6:af:61:21:5a:79:fb:34:8d:
                    5d:08:35:cf:8c:fb:ec:e2:7a:97:72:aa:09:11:2b:
                    a0:2f:18:e0:87:58:98:15:17:04:28:d3:e1:2b:4d:
                    63:90:4d:24:4f:62:67:f1:31:9c:a7:2f:8c:85:31:
                    60:96:59:eb:3d:59:54:e2:4e:29:b2:24:88:db:97:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E0:1F:65:E9:F9:BB:22:1A:DA:E3:4B:13:B0:89:1A:75:A5:83:47
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145760.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac26::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:d2:ad:2b:5b:41:cd:ff:87:fd:2b:b0:ae:76:9a:4b:8c:51:
         cb:54:ee:32:a2:a3:59:98:ad:ba:72:01:2b:78:e4:00:ed:50:
         71:3f:d0:6d:3e:2d:a8:d7:8a:98:16:16:13:8f:0c:c5:23:87:
         ad:8e:43:8b:45:94:71:2e:23:d1:c5:59:e2:ff:cc:fb:c7:3f:
         66:5b:5f:dd:25:cb:97:d3:d4:6a:72:43:b5:dd:35:a7:81:ae:
         3e:20:e9:30:6b:c0:aa:a6:87:62:f7:ac:40:d3:7f:50:0d:a6:
         77:97:12:d3:5c:a7:3c:14:35:66:e9:63:99:40:27:58:ad:46:
         98:83:23:c8:6c:ce:ab:c9:e0:63:e1:b6:c9:38:19:c9:26:8d:
         6b:8d:e2:62:74:0f:74:56:a1:bf:51:9f:4f:4f:64:08:47:4b:
         21:1b:61:d7:0d:d0:e6:b4:8c:37:75:f6:d4:37:b8:46:ec:55:
         da:3f:be:fc:97:69:53:3c:cf:86:30:2a:1f:8a:91:b8:5d:07:
         47:c4:e8:2d:a2:8b:0b:04:08:e4:f0:57:25:2f:f4:b9:19:cc:
         ea:d4:65:25:f9:82:cc:91:aa:f9:37:61:ca:4f:c1:ef:d2:ca:
         8d:a3:2d:ab:b3:4e:6e:d5:41:23:67:58:08:14:f9:b6:8e:cb:
         46:42:d3:8d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUaZB4a3jD84Ffi/H+aG4KM1kmctIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMTRaFw0yNzA1MjEwNDA4MTRaMDMxMTAvBgNV
BAMTKDA4RTAxRjY1RTlGOUJCMjIxQURBRTM0QjEzQjA4OTFBNzVBNTgzNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeaDebxfunYiJjtHeclttuyMlf
OefHiuoD6MY5hLiAxiZ9augcY1VvejM/2DzsvbkdrxrHAQLl/zh2ITTAquXiRTSD
pwOuix/pHbkdF64YzK2Y9tBtIkJ3ZHzpI0ou0CnL5HV2wXFoLy9S+NaNk9EHo1Q4
x6wuz3kztPqcghIemTCp8jz+5WUCbMOdvWy3dbe7JGsiVhdC31nkh7vlcPqkOw+g
tMplnkmSGmc7cuio+6Wvdgd3PBVbyOavYSFaefs0jV0INc+M++ziepdyqgkRK6Av
GOCHWJgVFwQo0+ErTWOQTSRPYmfxMZynL4yFMWCWWes9WVTiTimyJIjblxO7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUCOAfZen5uyIa2uNLE7CJGnWlg0cwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzYwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsJjANBgkqhkiG9w0BAQsFAAOCAQEANtKt
K1tBzf+H/SuwrnaaS4xRy1TuMqKjWZitunIBK3jkAO1QcT/QbT4tqNeKmBYWE48M
xSOHrY5Di0WUcS4j0cVZ4v/M+8c/Zltf3SXLl9PUanJDtd01p4GuPiDpMGvAqqaH
YvesQNN/UA2md5cS01ynPBQ1ZuljmUAnWK1GmIMjyGzOq8ngY+G2yTgZySaNa43i
YnQPdFahv1GfT09kCEdLIRth1w3Q5rSMN3X21De4RuxV2j++/JdpUzzPhjAqH4qR
uF0HR8ToLaKLCwQI5PBXJS/0uRnM6tRlJfmCzJGq+Tdhyk/B79LKjaMtq7NObtVB
I2dYCBT5to7LRkLTjQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:17 2026 by rpki-client