Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144072.roa
File:                     AS144072.roa (raw, json)
Hash identifier:          tDBWuI3Boi1wD08vUeCaomRYO1ZS4GnGndbrOYJKmiI=
Subject key identifier:   F1:A0:9A:50:FA:A2:A5:E5:07:BA:DA:38:B2:1F:D5:F1:60:5F:01:CA
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       511874E671004B4A573A734380728A1B7D86FEAE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144072.roa
Signing time:             Fri 22 May 2026 07:40:55 +0000
ROA not before:           Fri 22 May 2026 07:35:55 +0000
ROA not after:            Fri 21 May 2027 07:40:55 +0000
asID:                     144072
IP address blocks:        240a:a58e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:18:74:e6:71:00:4b:4a:57:3a:73:43:80:72:8a:1b:7d:86:fe:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:55 2026 GMT
            Not After : May 21 07:40:55 2027 GMT
        Subject: CN=F1A09A50FAA2A5E507BADA38B21FD5F1605F01CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:da:5c:3f:87:73:1e:63:70:f9:73:52:d2:83:
                    2c:11:78:7c:ef:fa:27:c8:73:9e:b2:b7:28:12:9b:
                    90:aa:c8:26:f4:7d:57:cc:1a:af:04:17:41:ac:0a:
                    3b:9b:8f:13:b2:37:e6:78:7b:2b:b0:b9:87:20:b3:
                    6c:cf:63:49:72:54:ba:7c:40:3a:a0:10:ca:69:d3:
                    a6:b3:2d:20:b6:27:80:12:21:8f:4d:db:2b:e4:c2:
                    30:39:de:bd:e3:62:98:5a:eb:ca:86:da:85:cf:5b:
                    7d:58:8d:d2:57:db:bd:dd:84:ff:af:48:22:dc:a7:
                    bc:13:9f:87:e9:cf:fe:8e:de:44:0f:3e:94:7b:aa:
                    31:08:de:aa:3e:77:73:4e:de:4d:4c:d6:c6:18:85:
                    6b:6f:d2:3b:3b:0a:7b:94:fc:40:5e:63:75:32:68:
                    cf:ce:e1:02:4a:e7:3a:50:9a:bf:e1:08:7d:27:11:
                    a3:c7:42:64:73:13:07:e9:91:93:01:ca:47:43:2d:
                    e5:ff:2e:d9:06:6c:58:ee:2a:30:2a:62:45:ef:59:
                    53:db:e9:c8:73:86:72:11:e4:f9:8b:28:24:80:ec:
                    e2:5c:01:eb:cb:ba:0b:96:22:fe:78:97:b0:a7:72:
                    06:06:2a:ca:5c:c6:ac:cb:d5:29:5e:cc:ee:99:21:
                    f0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A0:9A:50:FA:A2:A5:E5:07:BA:DA:38:B2:1F:D5:F1:60:5F:01:CA
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144072.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a58e::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:92:a2:e7:c1:50:6a:77:d0:0c:08:42:e0:e7:37:20:40:f1:
         08:89:ca:92:d2:22:f5:5d:93:81:64:89:61:88:f3:3f:f4:ea:
         d7:7b:c1:5d:0b:75:66:5f:15:5e:80:91:89:38:06:af:1f:8d:
         29:75:6c:36:40:ac:02:2e:93:53:4e:33:a0:8a:4c:92:72:4f:
         0b:32:f7:bf:2e:d6:d6:91:9b:27:e2:5e:12:18:50:f3:70:2c:
         f2:15:53:5d:b8:80:c9:b5:27:5d:40:3c:20:f6:5d:6f:26:85:
         6c:b9:06:6c:22:28:9e:1d:51:7d:22:71:de:3a:47:fc:e4:5e:
         42:31:fb:cc:43:98:ed:44:a4:10:64:a9:f4:78:56:7c:ed:b5:
         05:9c:5f:a9:64:5a:4d:b5:4b:b2:d8:cd:75:39:48:7d:3e:f9:
         d1:0b:fb:cd:c7:82:43:e4:6d:8a:5d:ac:49:2b:e4:d2:76:32:
         40:fe:9b:09:c3:11:e3:b7:55:87:58:7a:53:c0:ca:32:63:ff:
         39:ab:14:42:ab:c9:8c:97:98:fb:43:2c:a0:97:46:73:63:cc:
         10:9f:af:9e:b0:74:c1:59:ad:74:2d:82:2e:61:3f:3b:a7:73:
         2a:49:d6:fc:ff:cd:51:1e:ff:4f:80:86:e6:02:6a:e1:e6:82:
         50:07:3d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:31 2026 by rpki-client