Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144001.roa
File:                     AS144001.roa (raw, json)
Hash identifier:          HwKz+ltytfeCMqw4IzP3yX77W1hoIeqRUziuHy2tI9Y=
Subject key identifier:   A6:EA:E7:E8:AF:C3:3F:CE:6A:45:9E:7F:25:16:70:B4:1E:70:CF:1D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       46A709BEA3120DB633C2D303265510739F61CF12
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144001.roa
Signing time:             Tue 26 May 2026 03:16:39 +0000
ROA not before:           Tue 26 May 2026 03:11:39 +0000
ROA not after:            Tue 25 May 2027 03:16:39 +0000
asID:                     144001
IP address blocks:        240a:a547::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a7:09:be:a3:12:0d:b6:33:c2:d3:03:26:55:10:73:9f:61:cf:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:39 2026 GMT
            Not After : May 25 03:16:39 2027 GMT
        Subject: CN=A6EAE7E8AFC33FCE6A459E7F251670B41E70CF1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:5f:96:42:e7:f1:2e:b0:57:78:c9:35:6c:
                    1a:34:ca:ed:4d:df:ef:c3:07:59:00:1f:ea:05:c8:
                    30:f5:c3:c2:ad:88:10:98:27:35:d7:48:e2:53:dd:
                    e9:17:4f:f2:06:3e:57:b3:8b:4d:ee:91:bc:63:7e:
                    11:2d:b7:1e:9f:3a:e4:52:ad:35:00:08:09:33:7a:
                    07:e0:3c:c5:3c:42:f5:9f:20:1c:01:f9:ee:bc:72:
                    77:cb:6e:fc:91:d4:ac:5b:ec:91:16:d3:03:0d:f5:
                    ad:32:17:8b:da:64:b4:27:b9:21:d3:f5:eb:ed:5e:
                    dd:c9:5e:df:8b:4b:c2:2c:8f:0d:94:43:43:74:ea:
                    db:79:38:12:8f:07:99:87:77:3c:9b:0a:57:a3:88:
                    22:26:3b:d8:d7:e9:2a:34:7b:5d:40:95:21:e9:57:
                    75:32:34:66:56:ae:81:6c:57:69:6b:ac:ea:1a:2c:
                    b2:0f:a0:23:ba:38:cd:80:3f:7c:bb:6c:aa:93:a0:
                    26:c3:e1:3b:ea:e6:9d:fb:c7:04:fd:ee:2d:87:71:
                    0f:35:df:78:64:90:2d:7e:71:aa:51:46:84:2f:59:
                    9f:81:76:31:cd:e7:14:cc:67:9d:07:fb:77:a9:ab:
                    de:73:f3:3c:c3:8d:45:ad:9b:37:46:71:37:b1:da:
                    45:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EA:E7:E8:AF:C3:3F:CE:6A:45:9E:7F:25:16:70:B4:1E:70:CF:1D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144001.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a547::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:2d:be:e5:97:fa:68:e2:ac:06:75:f3:74:7f:0a:4f:a3:cf:
         06:b8:ea:c2:c5:10:be:f5:4b:68:20:bb:36:13:67:5a:7f:59:
         e7:6b:4c:44:1c:be:51:3a:d6:c6:fe:30:da:d5:0d:c0:de:a5:
         85:c2:e0:d7:25:12:08:78:e4:9b:e8:05:ae:12:1c:04:28:98:
         42:f7:80:be:b9:ee:5a:ad:72:0d:87:3e:37:bf:5b:e0:2a:0e:
         53:0a:bd:3c:e1:f4:68:a1:45:73:83:e1:d1:9c:a9:ae:5d:30:
         8f:8e:64:fd:db:a8:db:90:04:7f:6b:de:00:a8:45:37:33:c3:
         05:5e:16:72:f2:a4:62:83:7f:9c:d5:9e:b9:f7:b8:a3:3a:b9:
         56:2e:df:a0:60:81:0b:e3:b8:c5:9c:f7:4f:b9:9a:e1:e8:ff:
         6f:dd:97:cb:e8:3a:3c:76:98:7f:0f:cd:57:18:6f:e7:d1:c4:
         49:06:f0:6b:4d:0b:fd:00:3c:f8:a6:ac:74:f3:39:14:0b:5b:
         9c:a1:d2:cf:56:f6:56:7d:81:f5:fb:35:85:81:b1:16:d8:9d:
         d8:06:24:88:71:d1:00:8b:98:83:dd:9c:55:e7:6c:57:0f:e5:
         5e:6c:3f:5d:d9:f2:00:24:38:12:e1:73:94:9c:23:76:aa:78:
         56:fa:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:01 2026 by rpki-client