Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144007.roa
File:                     AS144007.roa (raw, json)
Hash identifier:          yxsii7Yh06OxalID0Qi9vAJo2up6w45hQ2NzLt6NoYM=
Subject key identifier:   91:DB:5A:3B:2D:0F:45:C4:18:37:B2:2E:40:35:0F:3E:DE:3A:3F:E8
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       735A24AC5B9ED9E9E6D842DA4C9616437ED0E03F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144007.roa
Signing time:             Fri 22 May 2026 06:58:42 +0000
ROA not before:           Fri 22 May 2026 06:53:42 +0000
ROA not after:            Fri 21 May 2027 06:58:42 +0000
asID:                     144007
IP address blocks:        240a:a54d::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5a:24:ac:5b:9e:d9:e9:e6:d8:42:da:4c:96:16:43:7e:d0:e0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:42 2026 GMT
            Not After : May 21 06:58:42 2027 GMT
        Subject: CN=91DB5A3B2D0F45C41837B22E40350F3EDE3A3FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0a:6c:bf:02:ea:50:94:50:c2:7c:3e:fe:7a:
                    e9:ec:b9:cd:d8:46:19:b4:7c:0f:36:88:52:c7:49:
                    de:74:cd:21:1f:89:39:05:fd:82:32:c3:9f:d1:5d:
                    c2:c2:85:82:c5:52:32:a0:34:6f:79:ee:9b:49:b9:
                    38:ad:e2:ce:b8:92:f2:56:a9:6e:f5:f1:ea:b2:c1:
                    99:4c:33:01:46:49:f0:dc:8f:05:28:f0:50:89:c9:
                    3c:cf:fa:a3:77:35:0e:73:b3:2c:d3:7f:6e:90:9f:
                    de:d9:df:9e:0e:ee:b7:a3:71:2e:04:f8:b1:3f:79:
                    9c:45:8e:e2:2a:72:7a:cd:2c:7d:d3:6f:43:e0:a8:
                    6a:b8:6e:02:f3:9b:25:e3:15:be:78:bf:db:97:71:
                    af:2c:c2:b1:c1:c0:ae:ca:3a:a8:8c:dd:be:3b:71:
                    51:6c:36:c8:ac:c7:2a:2c:63:e4:73:34:e3:a1:11:
                    8d:f1:61:68:61:a5:82:8b:3e:ee:1a:a9:5d:cf:0c:
                    8c:a8:08:7d:3f:09:2a:aa:ae:19:65:09:c7:d4:7c:
                    89:21:c8:fe:eb:68:7d:51:86:d2:70:b8:30:ef:34:
                    43:31:d4:97:95:b3:38:ff:f1:ca:5d:69:54:7f:62:
                    70:2f:24:58:91:19:a5:4e:fa:0e:f4:0a:cb:bb:a3:
                    5a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DB:5A:3B:2D:0F:45:C4:18:37:B2:2E:40:35:0F:3E:DE:3A:3F:E8
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144007.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a54d::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:22:d3:13:b3:96:37:d3:7e:f7:d2:92:92:a6:13:20:da:12:
         4b:09:2b:97:83:3d:62:d2:a3:e8:29:c3:ff:5a:c8:a0:8a:f2:
         fc:b3:2a:9b:22:b2:eb:13:98:16:ea:34:b8:e5:f5:ce:44:96:
         55:2d:24:4d:fc:47:0c:fa:88:7f:e2:a0:24:23:52:5c:79:d5:
         15:84:d0:b9:9c:1c:86:1f:14:25:3a:65:53:9d:d8:bd:40:18:
         93:6d:f1:4d:f2:0b:79:7e:db:43:a7:1a:1c:f9:15:7a:0d:7b:
         e1:42:d9:43:41:51:f9:b2:04:c1:61:04:9c:1e:fa:ac:4e:3c:
         e2:f6:ce:66:c3:cd:ed:b7:5c:16:48:fa:b6:df:27:ca:3d:10:
         fd:22:99:fc:f0:85:f0:7d:21:53:50:1d:27:4d:5b:5f:3d:d8:
         02:49:e9:b0:69:0d:31:e6:45:27:67:6f:30:0a:ce:55:3c:b3:
         37:96:eb:2e:a9:11:27:2e:da:03:37:31:e1:6b:40:b9:60:03:
         e2:3b:c3:42:62:dc:62:d3:dd:97:25:6a:eb:7b:09:52:30:f3:
         0b:20:5a:6d:ea:f9:30:a6:bb:70:94:1e:5a:2e:4f:90:fa:28:
         c9:ea:88:73:38:a0:47:4f:2a:dc:1d:66:47:2a:da:00:f7:51:
         f6:39:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:10 2026 by rpki-client