Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145977.roa
File:                     AS145977.roa (raw, json)
Hash identifier:          yq+/Bor9cX0CKeImKhYd11Q3AXDUwG0KkmWy7Onb6kQ=
Subject key identifier:   EB:29:48:E9:CE:A3:07:33:2B:EE:09:62:57:E0:F3:13:E4:26:A4:8A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       54BDC2F192CFA2DF2F5F476DE248375FF6E6B332
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145977.roa
Signing time:             Fri 22 May 2026 04:26:57 +0000
ROA not before:           Fri 22 May 2026 04:21:57 +0000
ROA not after:            Fri 21 May 2027 04:26:57 +0000
asID:                     145977
IP address blocks:        240a:acff::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:bd:c2:f1:92:cf:a2:df:2f:5f:47:6d:e2:48:37:5f:f6:e6:b3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:57 2026 GMT
            Not After : May 21 04:26:57 2027 GMT
        Subject: CN=EB2948E9CEA307332BEE096257E0F313E426A48A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:df:25:2b:51:8d:ac:8e:97:e5:76:86:87:2a:
                    d7:7d:33:7a:c0:41:ed:47:a6:40:42:be:49:26:6b:
                    7d:e5:e9:02:77:d6:e3:6c:af:0d:e6:c4:69:2e:39:
                    01:d8:4a:ff:ed:5e:56:b2:8d:5d:44:e9:0d:1a:cc:
                    a9:00:77:69:f2:cb:3e:63:49:f4:42:72:71:70:d9:
                    3d:bd:c3:cd:ed:7c:0b:16:52:26:da:a6:08:90:85:
                    a0:e6:9a:9b:ef:28:d1:af:d8:68:51:40:e5:47:90:
                    80:f5:89:00:af:4d:0c:a0:a4:c1:bd:35:16:9a:cd:
                    32:5d:94:48:0c:6f:9e:7e:bd:e6:a5:38:08:38:da:
                    11:b7:f0:1f:b2:70:9b:0b:fc:38:f4:bc:b9:15:86:
                    9d:46:47:e0:18:61:92:a3:64:ea:6d:94:23:f3:00:
                    37:d0:fa:c0:e6:c3:88:da:43:6d:47:64:e5:26:8e:
                    d4:77:84:27:24:59:e1:9d:df:0c:d1:74:3f:4b:e7:
                    6a:f7:ee:de:f8:6b:8c:47:17:0a:15:f9:c9:5e:c5:
                    8d:88:03:ef:4e:82:88:fe:f8:43:e2:4f:0f:55:63:
                    79:b9:95:2f:ae:de:9b:79:72:cc:f3:fa:63:64:5f:
                    5a:23:fc:6d:65:2f:f4:01:ac:87:8a:ff:eb:8b:2b:
                    9d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:29:48:E9:CE:A3:07:33:2B:EE:09:62:57:E0:F3:13:E4:26:A4:8A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145977.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:acff::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:31:c3:cc:81:3d:d2:a0:55:e6:16:5a:2a:5e:e8:27:4b:51:
         61:fb:af:c8:43:d8:13:cc:cf:70:4c:5e:05:dc:a5:06:78:a9:
         b8:f2:7d:15:8d:40:ed:b6:8a:29:82:9f:5d:fc:b2:9e:2a:42:
         e1:7d:16:b2:10:53:28:f4:7c:2f:c5:23:ab:57:3f:29:2c:8c:
         03:e8:d6:87:3f:01:f4:ed:4f:84:42:16:96:da:70:44:5c:b4:
         a1:5e:97:5a:ac:e4:4b:00:cc:c9:b6:56:70:57:78:0d:f1:1a:
         7d:d1:c7:1b:98:ab:20:53:39:a0:28:c5:d2:ef:f7:e0:9b:08:
         b8:ba:08:f2:91:ac:5e:7d:1c:4a:8a:f3:9d:3f:e9:ae:66:aa:
         d6:a8:5f:da:96:eb:5f:55:d0:ef:65:85:68:37:f0:07:a4:c1:
         0f:1f:74:17:9b:63:21:74:5f:aa:32:66:60:ed:c3:af:d2:6a:
         1d:5a:ed:0b:58:12:f0:50:81:92:2d:b6:c2:42:73:24:98:76:
         fd:58:79:a7:2b:f3:62:0f:b7:b5:5e:1a:78:8b:ff:ec:2c:b9:
         a8:f7:33:ae:8a:fa:11:03:27:9d:a3:76:09:cf:32:fc:0e:50:
         f9:4f:df:b4:a5:0f:b5:c5:13:14:cf:94:45:6c:20:9b:7d:bf:
         7b:fa:c3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:43 2026 by rpki-client