Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144047.roa
File:                     AS144047.roa (raw, json)
Hash identifier:          qhrSqnI/y0UuVxvaNIxCeiEWVKjJORZE4yCDevnXKcc=
Subject key identifier:   72:50:91:AE:5D:45:D7:A8:CB:E1:B1:18:0C:76:99:71:1C:72:57:07
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7D2802DBF4AAE725AD425D1E67BDB589DD30DF23
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144047.roa
Signing time:             Fri 22 May 2026 01:50:13 +0000
ROA not before:           Fri 22 May 2026 01:45:13 +0000
ROA not after:            Fri 21 May 2027 01:50:13 +0000
asID:                     144047
IP address blocks:        240a:a575::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:28:02:db:f4:aa:e7:25:ad:42:5d:1e:67:bd:b5:89:dd:30:df:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:13 2026 GMT
            Not After : May 21 01:50:13 2027 GMT
        Subject: CN=725091AE5D45D7A8CBE1B1180C7699711C725707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:3f:cd:7a:dc:35:30:ae:4f:8d:b4:64:f2:
                    92:9e:f3:0c:a7:26:fd:a3:f0:02:84:b6:8b:8b:37:
                    48:c9:b8:c5:6f:b5:14:4c:c1:51:a2:77:85:e6:d0:
                    03:3a:6a:ec:b9:02:af:2e:2f:df:55:77:f7:1b:a9:
                    ec:96:7f:4f:5e:16:00:99:12:cf:99:bb:6b:1e:0b:
                    ef:40:3b:0f:0b:84:ee:5c:8d:4b:a9:4c:f9:e7:71:
                    80:64:44:b4:53:eb:e7:35:b5:ab:56:0a:97:fb:97:
                    5c:3f:7a:38:ef:f9:9f:ea:2f:05:1e:3e:6f:f0:d7:
                    68:8d:5f:e0:88:54:27:73:9c:03:dd:b5:12:eb:56:
                    b2:86:33:7b:b1:bd:4b:72:6c:61:37:01:4c:4e:b1:
                    98:d2:ea:43:bc:58:0c:2a:9d:e0:35:84:f5:7a:4c:
                    8c:d0:06:8b:d5:7d:73:7c:6f:86:5e:c6:75:f8:ca:
                    46:77:1c:bc:9d:ba:2a:96:dc:a6:c7:f7:05:5b:fe:
                    f2:46:73:4d:37:78:95:9b:be:1e:5e:7d:6a:51:ed:
                    91:e5:36:57:e5:30:42:3e:4e:9c:2b:78:29:d9:56:
                    64:be:5e:d5:30:f7:70:07:32:45:36:88:1a:32:77:
                    1a:ca:f5:23:b9:48:f4:28:6d:40:ce:30:08:ac:8d:
                    91:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:50:91:AE:5D:45:D7:A8:CB:E1:B1:18:0C:76:99:71:1C:72:57:07
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144047.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a575::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:8c:93:33:1a:9a:08:bd:ac:bd:f3:d5:b5:42:7e:62:20:be:
         22:79:de:0c:26:94:4c:dc:bd:41:41:5e:47:29:04:b1:e5:99:
         68:ee:42:56:a2:c9:59:0d:66:ab:77:68:48:cf:2e:3b:93:e0:
         5e:58:3a:c2:bc:d7:f6:d6:2c:64:90:65:f8:19:ea:00:40:f6:
         f5:59:1a:fb:65:f3:9c:8c:29:84:8c:ce:41:c3:a0:06:8f:ac:
         47:2e:8b:0f:01:2d:91:e1:4d:97:d7:d1:3d:78:98:73:d9:ff:
         c0:c6:54:e7:01:52:e8:b5:cd:e4:94:4b:37:07:78:9d:12:87:
         ca:e4:9e:73:1b:a7:34:a3:10:e4:cb:12:8d:8f:00:4f:08:a9:
         5b:8c:dd:2b:ea:3a:72:74:23:1e:f6:31:6c:d8:72:84:64:64:
         68:4c:84:d1:cb:3f:77:b0:99:38:db:56:f5:c3:bd:96:c1:95:
         bc:52:cd:0e:9f:5e:ef:de:b9:c0:57:e4:c6:f1:e5:71:af:4d:
         f0:42:d2:9f:53:68:9f:37:5f:07:80:0d:62:81:5f:79:a4:9f:
         da:d1:ee:a0:a3:74:05:c9:6b:0f:15:7c:19:09:82:1b:f1:05:
         ca:c0:d8:e4:98:e2:f1:33:e3:37:74:ef:22:28:97:15:6d:33:
         78:05:bf:9a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfSgC2/Sq5yWtQl0eZ721id0w3yMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MTNaFw0yNzA1MjEwMTUwMTNaMDMxMTAvBgNV
BAMTKDcyNTA5MUFFNUQ0NUQ3QThDQkUxQjExODBDNzY5OTcxMUM3MjU3MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNMz/Netw1MK5PjbRk8pKe8wyn
Jv2j8AKEtouLN0jJuMVvtRRMwVGid4Xm0AM6auy5Aq8uL99Vd/cbqeyWf09eFgCZ
Es+Zu2seC+9AOw8LhO5cjUupTPnncYBkRLRT6+c1tatWCpf7l1w/ejjv+Z/qLwUe
Pm/w12iNX+CIVCdznAPdtRLrVrKGM3uxvUtybGE3AUxOsZjS6kO8WAwqneA1hPV6
TIzQBovVfXN8b4ZexnX4ykZ3HLyduiqW3KbH9wVb/vJGc003eJWbvh5efWpR7ZHl
NlflMEI+TpwreCnZVmS+XtUw93AHMkU2iBoydxrK9SO5SPQobUDOMAisjZGFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUclCRrl1F16jL4bEYDHaZcRxyVwcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqldTANBgkqhkiG9w0BAQsFAAOCAQEAloyT
MxqaCL2svfPVtUJ+YiC+InneDCaUTNy9QUFeRykEseWZaO5CVqLJWQ1mq3doSM8u
O5PgXlg6wrzX9tYsZJBl+BnqAED29Vka+2XznIwphIzOQcOgBo+sRy6LDwEtkeFN
l9fRPXiYc9n/wMZU5wFS6LXN5JRLNwd4nRKHyuSecxunNKMQ5MsSjY8ATwipW4zd
K+o6cnQjHvYxbNhyhGRkaEyE0cs/d7CZONtW9cO9lsGVvFLNDp9e7965wFfkxvHl
ca9N8ELSn1NonzdfB4ANYoFfeaSf2tHuoKN0BclrDxV8GQmCG/EFysDY5Jji8TPj
N3TvIiiXFW0zeAW/mg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:43 2026 by rpki-client