Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144085.roa
File:                     AS144085.roa (raw, json)
Hash identifier:          XqTnnJJMDiKEH7mdPwQloSaUlLHNTwwjBs9ByqQy82U=
Subject key identifier:   E2:2D:96:66:6E:9B:6A:4E:CF:5A:8F:DC:86:AD:B9:C1:1E:6B:16:BC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5FA220598BB4035B7A9EB9B95EA4E55C6D618090
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144085.roa
Signing time:             Fri 22 May 2026 06:46:15 +0000
ROA not before:           Fri 22 May 2026 06:41:15 +0000
ROA not after:            Fri 21 May 2027 06:46:15 +0000
asID:                     144085
IP address blocks:        240a:a59b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a2:20:59:8b:b4:03:5b:7a:9e:b9:b9:5e:a4:e5:5c:6d:61:80:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:15 2026 GMT
            Not After : May 21 06:46:15 2027 GMT
        Subject: CN=E22D96666E9B6A4ECF5A8FDC86ADB9C11E6B16BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:a2:97:d3:2f:b7:eb:44:65:7d:76:62:3e:
                    a0:84:03:ac:38:c2:de:f8:a8:75:61:89:52:ae:ed:
                    56:36:a0:78:7f:40:f6:2e:35:8b:b2:55:9a:0d:21:
                    de:ef:70:ca:0b:be:9d:da:fc:1d:99:5c:47:38:51:
                    c9:26:e4:5c:25:09:3b:19:07:46:79:77:c7:2e:f5:
                    c6:74:16:fb:f9:81:ec:c5:a0:5c:ee:77:e9:05:6d:
                    c4:c3:48:61:81:ab:fc:95:50:0f:d9:f5:15:2f:6f:
                    ca:19:80:c0:08:19:c2:2e:2a:16:84:d7:2f:4c:86:
                    4f:36:a6:d8:4e:03:c8:18:10:fa:71:0b:09:3c:72:
                    2b:41:1c:70:dc:64:6c:44:ef:89:d6:65:9a:42:b7:
                    7a:93:d1:a5:a5:97:ab:05:60:bb:09:48:2f:b7:cb:
                    1f:85:6a:9e:61:c6:30:64:29:7d:14:da:99:c4:50:
                    f4:f5:df:93:ed:dd:ad:24:bd:ec:bf:0c:4e:f5:4e:
                    4c:4a:84:4d:65:f2:47:56:6b:e5:0b:b0:ec:a9:97:
                    a5:c7:22:14:66:44:6c:a1:35:46:e8:16:4f:43:0b:
                    30:71:30:d6:07:52:a5:98:e4:da:d6:50:d5:a3:bf:
                    e6:0d:23:10:70:71:21:06:17:44:c7:60:41:08:ee:
                    07:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2D:96:66:6E:9B:6A:4E:CF:5A:8F:DC:86:AD:B9:C1:1E:6B:16:BC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144085.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a59b::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:cc:0e:0b:8c:32:fc:95:fa:0f:2b:c8:6c:29:83:ba:24:f6:
         68:9b:92:c3:5c:ab:9a:d8:7d:86:fd:f7:68:e3:fd:39:ee:c9:
         1f:ff:8c:cc:5a:f5:60:bf:1f:9a:26:f1:d4:f1:ee:fd:6a:e8:
         00:b1:b8:c2:1a:a9:a4:ad:5c:0b:2d:99:78:a1:7d:d3:c2:a8:
         65:14:7e:a8:53:04:7b:6f:11:4c:08:9d:94:22:5f:d0:d8:81:
         fc:47:60:66:98:be:fc:b3:f5:9c:f4:05:28:ff:1f:33:99:3d:
         42:06:53:5a:c8:8a:e7:69:0b:39:52:60:b5:0a:e2:98:cf:79:
         d2:d0:58:6c:b7:c0:7f:e7:df:37:32:4f:c1:c2:00:fa:82:c7:
         51:11:54:39:96:40:80:f9:12:e9:28:b3:09:e6:13:7d:39:ae:
         5e:92:fc:86:b7:ac:d8:bc:52:95:95:39:d1:e2:a2:a9:eb:e5:
         d8:e1:0f:fa:91:d6:ae:40:77:0a:a4:71:70:2b:37:0b:48:6c:
         d5:4a:1e:e1:15:73:31:fd:ba:c2:23:a7:71:63:91:b0:b3:07:
         ce:1c:47:72:fd:56:7a:57:a7:6f:cc:f1:db:b3:fb:55:f2:2e:
         7d:29:5c:8c:cf:19:14:46:b8:11:79:45:93:34:a1:76:72:3f:
         84:9c:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:12 2026 by rpki-client