Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144079.roa
File:                     AS144079.roa (raw, json)
Hash identifier:          5xd/UXx3qvtIQKYFnoX5ttvFfjHhFTVGNNWENFhysQ0=
Subject key identifier:   AE:A2:66:9E:3B:24:AF:0B:9E:29:4A:F9:6D:5E:DA:09:3F:5F:E4:52
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       28177D1496D20B6A199517CBAFB0A6BAC8DAE17D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144079.roa
Signing time:             Fri 22 May 2026 06:58:25 +0000
ROA not before:           Fri 22 May 2026 06:53:25 +0000
ROA not after:            Fri 21 May 2027 06:58:25 +0000
asID:                     144079
IP address blocks:        240a:a595::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:17:7d:14:96:d2:0b:6a:19:95:17:cb:af:b0:a6:ba:c8:da:e1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:25 2026 GMT
            Not After : May 21 06:58:25 2027 GMT
        Subject: CN=AEA2669E3B24AF0B9E294AF96D5EDA093F5FE452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:ce:2c:30:62:ca:44:79:ed:3b:1f:9b:89:
                    87:ab:f1:16:ba:b7:55:c6:97:fd:3b:96:d9:cb:e4:
                    26:2c:60:3b:0e:da:53:ce:8b:45:90:ca:91:ce:88:
                    7a:6f:4e:5b:10:b3:9c:62:14:94:13:ad:7d:ee:ae:
                    cf:59:95:b7:72:f7:ac:8d:00:4c:04:31:d4:15:c5:
                    33:b9:5b:1f:1f:18:41:b3:db:d7:af:a0:d0:29:2f:
                    06:b5:59:9b:87:30:01:5d:f2:b3:28:6f:93:74:8d:
                    b1:2e:eb:b9:74:f9:8a:bd:ed:db:65:5f:22:1b:fa:
                    f9:5d:6d:97:22:6c:18:2b:e4:af:37:5b:ae:9b:0b:
                    a1:cd:86:04:59:d0:d2:27:f9:e5:5c:d9:23:18:38:
                    a2:99:24:79:43:5e:54:18:dd:e6:d7:2b:e8:ea:99:
                    16:7b:72:6d:b2:d2:30:ec:b0:dd:e2:36:2c:65:2c:
                    6a:5c:b3:a5:6d:d9:42:87:5b:e7:be:12:50:cf:e3:
                    af:d1:f0:27:82:7d:55:a6:fc:75:eb:af:85:a6:e3:
                    02:2d:8b:c3:3e:6f:42:35:25:c0:fc:4a:ec:a2:d8:
                    62:8b:3c:06:03:59:b2:d2:6f:01:59:96:a4:b9:67:
                    12:29:42:90:ac:63:6c:24:f6:b8:83:52:d9:7e:5e:
                    46:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A2:66:9E:3B:24:AF:0B:9E:29:4A:F9:6D:5E:DA:09:3F:5F:E4:52
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a595::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:92:b8:bb:ee:c0:63:00:6b:7f:ca:69:73:d1:b5:b9:2d:1d:
         46:47:7b:45:10:0d:d7:89:c4:42:06:5f:5d:87:4f:14:98:b0:
         04:90:2e:4a:c4:37:4c:a6:3a:0b:7d:d2:07:82:f3:9a:28:ba:
         60:9f:7a:01:7e:1d:92:c2:4a:aa:18:e4:e9:d8:48:28:17:5b:
         b9:db:ca:0f:c3:9f:a3:bf:ca:ed:59:b2:40:9b:66:cd:29:1c:
         28:4e:e2:d0:0c:3f:b0:ca:a9:84:a1:51:0d:42:80:de:49:1e:
         49:3b:a6:69:bd:86:47:44:1e:c4:20:d5:76:f3:76:b9:cd:38:
         25:f2:99:fe:97:a8:4e:a6:6e:d2:87:35:89:ed:8a:34:2d:52:
         ef:9b:3d:da:cc:71:96:04:68:ef:e5:d7:a9:44:9f:59:c7:1b:
         2e:54:a5:13:aa:23:0a:65:2f:94:d9:f4:e8:fc:25:55:d9:90:
         ba:ef:98:ac:22:4b:bc:7f:93:24:8a:04:4a:46:88:13:6a:a4:
         70:89:59:90:0f:92:5b:18:9c:ca:6d:e6:12:55:58:b6:7a:6f:
         79:0d:f2:74:1e:27:10:a3:1f:b0:c3:06:f9:26:82:98:90:f4:
         92:48:72:38:4f:8e:ce:3d:8e:c4:14:a4:88:b3:e1:18:cc:9d:
         20:fd:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:38 2026 by rpki-client