Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144086.roa
File:                     AS144086.roa (raw, json)
Hash identifier:          jw8rv1ARjO8htq3W0cYp5i0d+a5mVY2qAeRQSZSRZTg=
Subject key identifier:   B8:A6:81:5A:C5:A6:53:20:C0:CC:F0:C4:BE:3C:41:28:80:17:DE:CB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       55C6BEB0E461530221124512648ED8C0582031A0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144086.roa
Signing time:             Fri 22 May 2026 07:41:14 +0000
ROA not before:           Fri 22 May 2026 07:36:14 +0000
ROA not after:            Fri 21 May 2027 07:41:14 +0000
asID:                     144086
IP address blocks:        240a:a59c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c6:be:b0:e4:61:53:02:21:12:45:12:64:8e:d8:c0:58:20:31:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:14 2026 GMT
            Not After : May 21 07:41:14 2027 GMT
        Subject: CN=B8A6815AC5A65320C0CCF0C4BE3C41288017DECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:77:d1:46:86:1b:4e:cd:cf:79:e0:aa:92:
                    d4:66:d6:44:fd:7f:18:a4:32:e4:cf:9a:9f:04:4f:
                    f3:8f:91:ce:a4:0b:d2:eb:d7:fb:4c:53:e4:11:60:
                    ee:ac:af:22:2c:07:6c:33:52:61:57:e9:a4:d2:5b:
                    b2:2d:41:e5:ce:fc:25:7a:13:45:65:df:8a:3a:37:
                    e5:7e:fd:75:2f:cb:f3:94:74:3e:be:0d:3c:2c:41:
                    2e:f3:0b:a6:5f:b3:10:eb:c9:18:6b:18:39:87:f3:
                    e9:c8:55:b1:ad:51:70:64:05:57:30:62:8c:ff:0b:
                    6d:be:f0:92:0d:d8:b4:aa:4c:c2:21:92:de:08:63:
                    ee:7d:d7:58:be:0e:4b:c6:2c:ae:56:09:fd:85:62:
                    fa:0d:97:b6:f2:db:90:d4:3d:c2:8c:63:a1:22:9d:
                    fa:ea:4c:64:83:19:73:02:80:89:38:db:ad:a8:da:
                    83:64:f3:79:c9:a5:e7:5a:69:21:50:4d:f0:0e:8d:
                    02:78:4c:7b:3b:c1:ac:df:83:f5:8e:15:0f:48:0d:
                    43:27:a5:3a:ab:c9:54:69:b3:56:2a:3b:a6:e1:cc:
                    64:fe:74:da:1e:b1:4b:5a:45:45:db:c9:26:7d:00:
                    cd:fa:01:f2:cc:83:73:fa:88:56:4f:c0:ca:8c:23:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A6:81:5A:C5:A6:53:20:C0:CC:F0:C4:BE:3C:41:28:80:17:DE:CB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144086.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a59c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:e4:56:44:90:5a:6f:30:62:2f:ac:0e:d7:86:1e:0e:1d:8b:
         68:27:e4:46:f8:36:7f:9a:2c:c2:7a:1d:0d:29:8f:79:c5:17:
         12:e5:5d:82:41:7f:cc:b0:af:2a:58:ae:2c:e2:d8:41:d4:d3:
         5c:07:63:c1:de:af:5e:e3:38:db:aa:5d:2a:5d:ba:14:d8:a6:
         e2:10:bc:be:e4:f0:b6:10:7f:4b:1b:e1:da:33:93:5a:c3:bf:
         92:37:99:cf:f4:bd:40:16:30:ae:1a:52:cc:11:e2:2c:13:51:
         92:25:64:9b:c6:4f:5c:f3:9a:59:97:f5:93:f2:09:7e:fb:8e:
         1b:56:88:96:f2:81:a9:58:4a:3e:84:6d:11:58:53:e0:69:10:
         ac:2f:a7:95:89:32:31:fc:be:d6:8d:e1:18:ec:81:76:d7:5b:
         f8:e7:99:31:a7:8f:23:cc:57:c4:c3:55:10:b5:2f:f6:01:d5:
         00:e8:1e:8e:53:be:bf:0b:f6:ce:15:b5:f5:35:3d:ac:7c:48:
         f1:d1:88:7f:93:70:b7:7a:8b:04:a3:ed:70:46:27:7b:29:28:
         83:d4:ba:5f:bc:3c:04:92:bc:f3:bd:3c:e3:8c:cc:d5:67:4b:
         41:25:46:28:fc:aa:7c:99:c3:f8:4a:61:5d:27:cc:18:9c:a5:
         f3:b2:d7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:40 2026 by rpki-client