Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144027.roa
File:                     AS144027.roa (raw, json)
Hash identifier:          Tz+Yh76jnA8tp/5xDlrUmiYgVNNqUlkr71oR+lA1MVs=
Subject key identifier:   C0:F7:BA:1D:04:75:60:4A:97:31:B2:D1:EB:15:51:4D:88:C9:C5:1C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       75BC30F04470AAB59CD7940E4E4FA23E00121AC8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144027.roa
Signing time:             Fri 22 May 2026 02:47:42 +0000
ROA not before:           Fri 22 May 2026 02:42:42 +0000
ROA not after:            Fri 21 May 2027 02:47:42 +0000
asID:                     144027
IP address blocks:        240a:a561::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bc:30:f0:44:70:aa:b5:9c:d7:94:0e:4e:4f:a2:3e:00:12:1a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:42 2026 GMT
            Not After : May 21 02:47:42 2027 GMT
        Subject: CN=C0F7BA1D0475604A9731B2D1EB15514D88C9C51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:21:00:96:d3:56:b6:c9:3a:30:42:92:74:
                    89:40:ab:97:de:e8:79:c7:d1:1b:ba:3a:f9:fb:24:
                    df:06:2c:67:e1:f2:6f:59:9c:c4:33:6b:c3:d0:a1:
                    8d:71:6b:12:40:b1:97:d9:f5:6c:93:32:be:fc:bd:
                    17:fc:7e:eb:51:99:16:73:e6:e9:aa:fb:67:7d:fa:
                    fd:4c:03:fb:8c:bc:fd:22:14:0d:ab:6a:55:c3:2f:
                    c5:54:6e:b3:95:19:48:00:c4:ae:4d:e7:4a:27:11:
                    74:25:56:f2:0b:0b:ca:da:2f:cf:ac:f8:d3:c2:d9:
                    d9:26:04:3e:ef:d4:3a:70:e1:97:75:16:f4:0b:c2:
                    3d:57:5a:5b:89:d4:38:68:96:42:4e:47:16:5b:9b:
                    d7:7b:fa:6b:95:d2:59:a0:82:d9:df:58:ee:ac:7c:
                    c8:87:42:ae:bd:c1:31:c7:54:86:4e:82:ed:5f:85:
                    1c:11:5f:64:86:4f:46:3d:03:51:d9:fd:82:14:e6:
                    1e:53:3a:ca:c9:74:a2:32:4b:8b:43:a1:67:8b:18:
                    54:1e:b3:fe:cd:8b:bd:82:77:33:af:80:18:b7:97:
                    e1:6f:f6:53:9d:a0:de:14:32:2d:70:00:ed:e8:b9:
                    42:ae:f6:5f:63:33:65:66:16:70:9d:59:cf:6a:f0:
                    62:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:BA:1D:04:75:60:4A:97:31:B2:D1:EB:15:51:4D:88:C9:C5:1C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144027.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a561::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:64:74:2b:b4:14:10:f4:e0:0f:b3:3d:e9:c8:5e:c0:48:52:
         7c:5d:08:b3:96:0a:ac:b6:6a:13:ef:8f:10:f5:ca:26:af:05:
         05:32:82:4a:c2:14:2a:aa:6f:35:81:27:5c:79:10:d5:18:d6:
         c8:ce:06:d6:5d:8d:cc:3e:ef:25:91:54:0f:08:ac:0a:36:7b:
         ae:4c:02:e4:3d:2f:37:8a:d7:54:2c:8b:bd:ee:7a:ce:52:d5:
         58:94:4e:55:4c:f4:bf:be:fe:56:af:63:95:9f:e8:2b:51:0b:
         86:0d:86:bb:7e:28:7b:3d:2f:32:fe:ea:4f:5b:bd:cd:6d:8e:
         0f:e0:f7:12:ed:d6:7d:2d:0b:e3:e7:9e:6b:df:34:76:d0:b2:
         d0:55:a3:d5:43:18:1e:49:1d:c8:05:af:e3:80:2d:df:69:1d:
         0a:a0:f3:0a:57:34:c3:00:d0:07:53:d3:09:2e:61:3f:38:fd:
         11:aa:bc:fa:79:6d:b9:7e:c3:3a:2b:cd:04:99:20:17:18:13:
         89:05:d9:20:5a:11:e0:83:02:ba:e6:79:b5:42:b4:35:53:38:
         00:7e:d4:6b:0b:38:be:03:c4:1a:f2:99:66:37:d6:00:7d:a9:
         7c:6c:f7:f9:6c:f9:a2:4d:e8:4b:ce:69:d9:60:1b:64:16:d2:
         3a:3f:e3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:20 2026 by rpki-client