Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145908.roa
File:                     AS145908.roa (raw, json)
Hash identifier:          2oVG3WXH158dHkMwQpP+Fc1VonXfnNumw8hnO7H7U/g=
Subject key identifier:   51:97:BB:BC:E7:86:10:41:B3:87:21:19:11:16:32:C6:7A:67:12:B7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2E3CA4F15FB02A86485C36A66B294DF001763538
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145908.roa
Signing time:             Mon 25 May 2026 06:28:15 +0000
ROA not before:           Mon 25 May 2026 06:23:15 +0000
ROA not after:            Mon 24 May 2027 06:28:15 +0000
asID:                     145908
IP address blocks:        240a:acba::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3c:a4:f1:5f:b0:2a:86:48:5c:36:a6:6b:29:4d:f0:01:76:35:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:15 2026 GMT
            Not After : May 24 06:28:15 2027 GMT
        Subject: CN=5197BBBCE7861041B3872119111632C67A6712B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:f1:4c:c7:e5:c5:22:d1:d2:e0:c5:2a:80:
                    6a:16:ae:25:6f:f4:5a:d1:1e:5b:b7:74:63:61:26:
                    26:b3:1a:9e:05:b9:41:35:03:67:e6:fa:be:1e:ac:
                    97:88:86:a6:af:9b:62:6e:ab:7e:16:34:ef:e5:e9:
                    27:51:74:31:0e:58:94:61:24:f5:ec:f5:91:df:7e:
                    6a:e3:22:ef:cc:7a:23:d8:98:13:8c:0c:08:6e:5b:
                    f9:dd:77:8e:af:ec:25:f3:43:2a:cf:5e:e5:5f:1c:
                    55:e2:42:fd:ff:b8:23:24:19:e9:7f:b6:6b:65:35:
                    73:01:b4:ef:4f:a7:38:d8:8c:de:c3:19:26:96:a9:
                    7f:88:45:80:7b:75:cd:a6:a9:34:3e:c7:71:11:eb:
                    77:f0:a7:5f:7e:a4:bf:4e:ff:85:9a:5a:71:c9:73:
                    4f:6c:e2:6e:df:93:04:c1:ca:50:4c:99:d6:99:53:
                    85:94:6f:52:8c:e1:87:fc:62:3e:8e:81:b6:23:5c:
                    ce:2d:ca:79:1f:2f:24:18:ac:75:1d:c4:7a:88:ae:
                    c7:0a:68:e8:88:fd:52:7c:4b:b5:58:42:26:fb:d3:
                    2a:91:25:b4:95:f0:8b:cd:d7:60:43:5e:10:17:03:
                    2f:39:66:8f:c1:7c:41:92:84:89:3e:97:25:e5:7e:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:97:BB:BC:E7:86:10:41:B3:87:21:19:11:16:32:C6:7A:67:12:B7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145908.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acba::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:eb:d5:52:f6:fd:47:10:96:1e:c5:f0:07:be:60:d4:a0:4c:
         1d:f2:13:fc:f0:5b:b1:ba:b0:14:e7:90:78:7c:05:1e:5d:6b:
         28:91:29:9b:bb:24:14:3e:9c:2c:ed:06:70:8d:ab:c3:bf:fb:
         fd:8d:9a:8e:69:f9:2a:a9:ae:ea:c0:5b:00:7f:4c:20:10:bc:
         69:a1:58:db:44:4c:bd:3a:2b:e5:6f:29:62:f7:4b:ad:29:3a:
         8c:53:27:a6:72:da:45:b8:32:7f:98:76:e1:be:48:2c:99:21:
         43:df:0b:9e:64:d2:21:fe:5b:62:97:6f:66:48:ab:6a:1e:02:
         70:0f:d5:da:1d:7c:29:e0:6e:f9:6a:cb:5d:8c:18:4c:ff:e3:
         08:73:28:b5:68:83:c1:79:12:a7:3b:ca:da:26:55:aa:a4:48:
         39:6d:9f:19:93:a5:46:59:8e:57:09:50:29:a1:d4:e0:e0:cd:
         cb:35:86:75:e4:b2:e1:7a:ff:18:8f:4f:8f:09:84:43:86:d7:
         df:b2:bd:31:59:e5:2c:78:62:53:fb:7e:98:3b:a8:38:e9:cb:
         48:22:db:7d:bd:7a:25:53:66:fc:49:d5:79:c0:58:dd:52:b1:
         85:af:b1:80:64:ee:05:ba:08:b7:4e:f5:22:c1:30:46:fa:18:
         1a:df:ed:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:55 2026 by rpki-client