Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144011.roa
File:                     AS144011.roa (raw, json)
Hash identifier:          91BAtn160k6dmPosCmbrhcxJlSl4yKQxxmJYHezJjOc=
Subject key identifier:   6F:B2:A9:D1:74:02:E9:AA:1F:34:CB:E8:DB:F4:5A:0B:7F:DE:AF:68
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4E96E06769CF1E6800248D6A5E0D855FBB0A89F6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144011.roa
Signing time:             Fri 22 May 2026 04:08:14 +0000
ROA not before:           Fri 22 May 2026 04:03:14 +0000
ROA not after:            Fri 21 May 2027 04:08:14 +0000
asID:                     144011
IP address blocks:        240a:a551::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:96:e0:67:69:cf:1e:68:00:24:8d:6a:5e:0d:85:5f:bb:0a:89:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:14 2026 GMT
            Not After : May 21 04:08:14 2027 GMT
        Subject: CN=6FB2A9D17402E9AA1F34CBE8DBF45A0B7FDEAF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a8:64:72:f6:84:df:cd:3e:08:f9:cf:43:0c:
                    cd:56:5e:35:a3:33:1e:aa:91:61:10:3d:5a:2c:88:
                    15:a8:e5:af:7f:1b:b6:37:25:9d:bf:23:aa:32:4f:
                    12:f0:7e:6a:03:b9:20:a8:a7:24:d9:02:65:e0:df:
                    8f:73:94:82:b5:f7:ca:6c:9d:2a:84:57:93:a2:1b:
                    65:f2:5f:94:a0:f7:32:ed:b8:9d:a1:74:17:cf:a3:
                    d8:de:83:2b:6f:a4:6b:57:54:ab:3f:7f:8e:8f:a4:
                    97:a5:79:7d:75:80:16:fd:87:46:38:3e:13:10:68:
                    d8:7c:ca:95:30:63:6d:eb:a9:f2:8d:f0:de:b4:5e:
                    eb:e3:56:aa:bd:49:f8:66:fd:7a:01:3c:9a:ab:df:
                    e1:2e:0b:84:2b:86:a7:10:4e:85:22:61:82:a8:3a:
                    61:17:ea:96:d2:a4:a3:04:b7:27:d7:38:9d:1b:ea:
                    e6:22:2d:3a:12:6a:b5:be:5d:2d:bb:ef:c1:cf:d4:
                    24:8f:a5:50:ec:4c:03:c1:da:44:11:25:54:bb:e7:
                    46:50:57:a7:be:98:b1:c6:22:a2:0c:b6:5f:6e:aa:
                    88:b5:68:30:4f:ce:fa:7b:8b:c4:1a:ac:fd:4f:0e:
                    96:7b:3a:5a:36:7c:48:e5:c4:4c:50:39:f3:07:32:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B2:A9:D1:74:02:E9:AA:1F:34:CB:E8:DB:F4:5A:0B:7F:DE:AF:68
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144011.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a551::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:14:14:44:71:c7:91:c2:fb:00:e9:5f:47:92:35:2e:1c:99:
         7b:da:3d:e9:be:ff:4f:85:c6:8e:58:a9:d0:bf:19:05:a5:6a:
         38:d7:d2:23:a9:bc:0b:5b:dc:57:3d:71:0c:36:18:03:d5:b2:
         88:67:76:90:3f:97:1c:3b:f1:e9:c4:0a:71:91:b9:c6:a9:cf:
         3a:b2:bd:dc:33:d8:83:06:7a:bb:01:f0:66:bd:57:83:f6:28:
         4d:ee:21:fb:be:e0:bf:97:bc:53:24:7a:58:6d:61:7f:c6:74:
         1e:b1:cc:7a:43:53:2b:c4:28:04:65:87:44:29:86:6c:af:fd:
         84:fe:b7:fb:2f:f4:bf:0c:13:39:5e:5e:b0:e7:be:05:85:56:
         6d:5f:e9:ef:4a:05:c7:e0:32:7f:6d:11:11:e1:0d:b8:3a:18:
         6a:a7:70:c7:ee:0b:f6:57:c7:75:a2:54:b4:b2:ff:c0:22:10:
         b4:e9:4e:ae:07:9a:89:c8:e8:4b:84:7b:cf:ac:07:41:a1:f0:
         24:7e:71:87:3b:72:ec:24:04:fc:4e:42:72:02:27:6b:4c:fa:
         dd:a7:8d:fc:38:73:d8:76:bc:db:d6:5b:33:65:47:bb:54:c7:
         e9:4d:3a:6a:e7:21:a8:6f:fd:5d:8a:ae:04:0c:da:56:10:b2:
         33:37:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:18 2026 by rpki-client