Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144059.roa
File:                     AS144059.roa (raw, json)
Hash identifier:          4pEqi6QWpqpltYqpczA5eqnbmON/7ETGEKNGJCHAMkA=
Subject key identifier:   EB:63:EE:B7:5B:23:6D:E5:E9:BF:A2:A3:B8:AB:D9:83:45:E5:56:87
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6D2E5F4094FCD34067CD4C3067FF6B0377C11097
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144059.roa
Signing time:             Tue 26 May 2026 06:30:44 +0000
ROA not before:           Tue 26 May 2026 06:25:44 +0000
ROA not after:            Tue 25 May 2027 06:30:44 +0000
asID:                     144059
IP address blocks:        240a:a581::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2e:5f:40:94:fc:d3:40:67:cd:4c:30:67:ff:6b:03:77:c1:10:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:44 2026 GMT
            Not After : May 25 06:30:44 2027 GMT
        Subject: CN=EB63EEB75B236DE5E9BFA2A3B8ABD98345E55687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:14:fd:64:07:ff:6c:c2:12:f9:26:71:9a:
                    43:d0:ea:22:a6:c4:e2:7d:43:13:ae:23:25:aa:cf:
                    dd:7c:b8:ba:fe:f9:95:a8:ea:dd:20:a2:fc:32:f1:
                    22:00:d4:03:26:fb:7c:06:37:93:98:02:8b:fe:db:
                    92:15:d1:a7:72:cc:cb:2a:7a:f7:4f:70:95:40:05:
                    94:f5:f0:17:b2:5c:bf:86:65:40:a3:c1:1e:17:9e:
                    ae:eb:04:51:a3:51:21:72:25:75:d2:5b:07:a5:d4:
                    2f:23:7e:5b:f6:72:bd:99:07:53:72:02:6d:90:12:
                    42:f5:8c:fc:33:c2:44:41:3e:d5:30:30:01:40:28:
                    a2:34:20:60:38:ef:41:d1:87:ff:f1:0b:9e:d5:32:
                    6c:d5:8a:bf:41:6a:83:34:9a:e8:f4:f4:71:96:a4:
                    b1:fe:ce:45:03:f9:16:79:a7:e8:75:5f:d0:58:4b:
                    ce:f9:fb:06:ae:31:31:99:0c:74:44:24:8b:69:51:
                    6a:31:3f:4f:a6:6a:d6:e3:88:aa:a9:9c:9e:a5:36:
                    d4:eb:14:76:c6:36:ea:0e:0c:58:41:0e:d9:ce:d4:
                    c5:24:9e:e8:1d:e4:37:4f:b0:45:84:84:99:18:1d:
                    c2:cc:3c:85:c5:a9:c4:fa:f1:94:bc:7e:6c:b6:4e:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:63:EE:B7:5B:23:6D:E5:E9:BF:A2:A3:B8:AB:D9:83:45:E5:56:87
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144059.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a581::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:16:31:d3:83:c3:b3:5e:72:66:f8:2a:6b:a7:42:c9:83:
         d5:d5:ce:de:1f:af:64:0e:be:03:47:b2:7c:c9:37:89:94:3e:
         77:c8:c1:e2:4e:63:bb:61:25:cf:f9:aa:54:a4:c3:3e:c1:cf:
         ce:09:80:f6:90:9d:a8:73:57:0a:85:30:3e:92:6e:8b:e6:ed:
         fe:02:46:90:83:90:80:aa:24:a6:f4:1c:9a:95:0a:1c:e4:55:
         19:6e:2d:5a:d5:f5:54:f0:83:74:41:42:0f:2e:58:a6:d4:fe:
         09:71:6a:bc:cc:73:e5:7c:e2:31:88:e6:7a:30:51:5d:d4:76:
         cf:a5:50:fa:be:a1:17:c9:36:36:a2:0c:b3:2a:20:f8:95:96:
         ba:3e:bc:5d:6b:8f:c5:58:5f:94:10:05:05:44:40:01:e3:ff:
         fb:30:7b:0c:0f:a6:63:74:ee:43:3a:27:b8:e5:06:b5:a6:84:
         ec:fd:f4:60:11:b7:32:19:ab:b6:91:ff:76:d8:56:1c:9a:03:
         64:37:0f:f7:ad:e0:63:f7:5b:e9:94:bc:e8:cb:89:3a:5d:57:
         fb:b8:7f:30:b8:45:0a:c7:48:3c:52:19:a9:54:c7:dc:e1:fa:
         3d:ce:7a:92:a9:95:75:95:22:8d:08:2a:da:0e:a1:2a:3e:b4:
         00:f4:2a:78
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUbS5fQJT800BnzUwwZ/9rA3fBEJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NDRaFw0yNzA1MjUwNjMwNDRaMDMxMTAvBgNV
BAMTKEVCNjNFRUI3NUIyMzZERTVFOUJGQTJBM0I4QUJEOTgzNDVFNTU2ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYxhT9ZAf/bMIS+SZxmkPQ6iKm
xOJ9QxOuIyWqz918uLr++ZWo6t0govwy8SIA1AMm+3wGN5OYAov+25IV0adyzMsq
evdPcJVABZT18BeyXL+GZUCjwR4Xnq7rBFGjUSFyJXXSWwel1C8jflv2cr2ZB1Ny
Am2QEkL1jPwzwkRBPtUwMAFAKKI0IGA470HRh//xC57VMmzVir9BaoM0muj09HGW
pLH+zkUD+RZ5p+h1X9BYS875+wauMTGZDHREJItpUWoxP0+matbjiKqpnJ6lNtTr
FHbGNuoODFhBDtnO1MUknugd5DdPsEWEhJkYHcLMPIXFqcT68ZS8fmy2ToNnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU62Put1sjbeXpv6KjuKvZg0XlVocwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MDU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqlgTANBgkqhkiG9w0BAQsFAAOCAQEAO48W
MdODw7Necmb4KmunQsmD1dXO3h+vZA6+A0eyfMk3iZQ+d8jB4k5ju2Elz/mqVKTD
PsHPzgmA9pCdqHNXCoUwPpJui+bt/gJGkIOQgKokpvQcmpUKHORVGW4tWtX1VPCD
dEFCDy5YptT+CXFqvMxz5XziMYjmejBRXdR2z6VQ+r6hF8k2NqIMsyog+JWWuj68
XWuPxVhflBAFBURAAeP/+zB7DA+mY3TuQzonuOUGtaaE7P30YBG3MhmrtpH/dthW
HJoDZDcP963gY/db6ZS86MuJOl1X+7h/MLhFCsdIPFIZqVTH3OH6Pc56kqmVdZUi
jQgq2g6hKj60APQqeA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:33 2026 by rpki-client