Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145826.roa
File:                     AS145826.roa (raw, json)
Hash identifier:          1RXfHEMai26Hsi06fxJWohwAF9vot2036zGjRxgixvo=
Subject key identifier:   E4:9E:C5:C3:91:64:07:E4:8B:C6:DA:FB:B5:44:0F:24:DD:C0:17:34
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2447C7958B0CD8B38888910E58E5AD66CC8EB24D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145826.roa
Signing time:             Tue 26 May 2026 08:52:41 +0000
ROA not before:           Tue 26 May 2026 08:47:41 +0000
ROA not after:            Tue 25 May 2027 08:52:41 +0000
asID:                     145826
IP address blocks:        240a:ac68::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:47:c7:95:8b:0c:d8:b3:88:88:91:0e:58:e5:ad:66:cc:8e:b2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 08:47:41 2026 GMT
            Not After : May 25 08:52:41 2027 GMT
        Subject: CN=E49EC5C3916407E48BC6DAFBB5440F24DDC01734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:8d:c9:cb:75:13:62:0c:56:df:dc:a2:6d:
                    6e:91:c3:6e:a8:5e:7f:c5:d6:9d:24:f9:4d:7c:e6:
                    cd:e3:6d:a8:2a:04:81:4d:5b:0a:0b:02:18:c4:8d:
                    b7:20:eb:46:b9:e1:2c:09:c6:8b:ac:60:6c:86:70:
                    05:9b:41:6a:c9:68:b5:b4:8a:a1:32:b5:78:fb:b1:
                    11:24:0a:cd:94:5d:63:57:01:31:35:74:02:2f:e1:
                    e7:f1:55:84:18:ba:02:e6:fd:6e:64:e8:0b:c7:05:
                    70:89:e8:56:9b:d1:75:7e:b9:15:ea:78:2b:49:8c:
                    5c:1b:cf:e3:8c:73:9d:bc:46:9e:39:43:74:b1:03:
                    cd:f7:4a:70:a0:a6:34:fe:01:e0:1c:7e:f7:fa:9b:
                    83:82:5e:bd:b7:17:df:53:d3:3a:52:c4:f3:43:df:
                    e5:90:12:94:26:32:a1:36:91:4f:db:ed:2e:c8:a2:
                    eb:e7:e6:c0:f1:6b:91:27:84:77:6a:a5:47:a2:ba:
                    7e:65:c2:d7:56:fb:1a:a5:c0:c0:56:c2:df:a3:da:
                    e8:55:d9:9a:78:01:cc:f0:7d:1e:dc:c3:7d:8e:fd:
                    d6:36:e2:c6:29:8c:39:ae:6c:ce:5d:11:1e:90:fe:
                    0c:18:64:54:51:26:5b:84:19:7b:f5:c0:74:ac:cf:
                    85:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9E:C5:C3:91:64:07:E4:8B:C6:DA:FB:B5:44:0F:24:DD:C0:17:34
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145826.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ac68::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:6b:d6:29:c9:fe:b4:ba:ee:73:d5:74:b4:fa:42:05:06:f7:
         db:b8:08:46:f5:37:45:dd:e4:d5:ff:32:f8:f1:12:eb:9e:b9:
         22:22:4a:b4:38:3b:a9:f4:bc:f8:e8:c4:00:3a:c3:4c:00:76:
         d1:fd:e6:06:68:d1:58:70:48:70:c4:ab:ba:bd:e1:50:a5:a3:
         21:94:3b:e9:07:1a:1c:9d:e9:da:fb:1b:d3:71:71:c5:19:36:
         13:ca:7b:7b:f5:16:bb:cd:b1:6c:31:91:f7:07:2d:73:2e:ab:
         07:13:4f:d6:66:ea:40:fe:d9:f0:05:cf:1c:22:b6:e0:b1:70:
         d7:2d:cf:df:2a:34:bd:e0:e2:2f:a2:27:f3:77:44:27:02:75:
         b2:91:16:09:11:05:c0:dd:2f:fd:28:d8:ec:bf:73:89:20:a5:
         5f:2b:bb:84:63:c1:aa:5d:12:cd:f8:62:b5:de:85:48:fd:e1:
         1c:35:c1:6e:27:ba:2c:14:46:4f:bd:13:28:7d:a3:4c:33:0f:
         2d:f6:e5:7d:25:1d:73:17:5f:70:56:96:b9:5a:15:c4:8b:3e:
         6f:3a:17:41:74:be:49:a7:0f:ed:19:b3:75:90:c8:a6:f9:53:
         d9:08:9a:95:07:eb:ed:02:cf:e8:36:7b:22:2a:ff:50:26:35:
         bf:30:58:b4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJEfHlYsM2LOIiJEOWOWtZsyOsk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwODQ3NDFaFw0yNzA1MjUwODUyNDFaMDMxMTAvBgNV
BAMTKEU0OUVDNUMzOTE2NDA3RTQ4QkM2REFGQkI1NDQwRjI0RERDMDE3MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2AI3Jy3UTYgxW39yibW6Rw26o
Xn/F1p0k+U185s3jbagqBIFNWwoLAhjEjbcg60a54SwJxousYGyGcAWbQWrJaLW0
iqEytXj7sREkCs2UXWNXATE1dAIv4efxVYQYugLm/W5k6AvHBXCJ6Fab0XV+uRXq
eCtJjFwbz+OMc528Rp45Q3SxA833SnCgpjT+AeAcfvf6m4OCXr23F99T0zpSxPND
3+WQEpQmMqE2kU/b7S7Iouvn5sDxa5EnhHdqpUeiun5lwtdW+xqlwMBWwt+j2uhV
2Zp4AczwfR7cw32O/dY24sYpjDmubM5dER6Q/gwYZFRRJluEGXv1wHSsz4XdAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU5J7Fw5FkB+SLxtr7tUQPJN3AFzQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODI2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsaDANBgkqhkiG9w0BAQsFAAOCAQEAE2vW
Kcn+tLruc9V0tPpCBQb327gIRvU3Rd3k1f8y+PES6565IiJKtDg7qfS8+OjEADrD
TAB20f3mBmjRWHBIcMSrur3hUKWjIZQ76QcaHJ3p2vsb03FxxRk2E8p7e/UWu82x
bDGR9wctcy6rBxNP1mbqQP7Z8AXPHCK24LFw1y3P3yo0veDiL6In83dEJwJ1spEW
CREFwN0v/SjY7L9ziSClXyu7hGPBql0Szfhitd6FSP3hHDXBbie6LBRGT70TKH2j
TDMPLfblfSUdcxdfcFaWuVoVxIs+bzoXQXS+SacP7RmzdZDIpvlT2QialQfr7QLP
6DZ7Iir/UCY1vzBYtA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:52 2026 by rpki-client