Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144115.roa
File:                     AS144115.roa (raw, json)
Hash identifier:          6Mi40p5rrwHyer5NrLyww93E0lOQxoI0oi231RBydeA=
Subject key identifier:   26:A2:C9:BC:76:AA:B0:1D:CA:73:3E:CA:2F:84:F7:BC:19:EC:F9:8D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       42D2B1073C6F669A8AD435394690D041C0D40945
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144115.roa
Signing time:             Tue 26 May 2026 02:34:49 +0000
ROA not before:           Tue 26 May 2026 02:29:49 +0000
ROA not after:            Tue 25 May 2027 02:34:49 +0000
asID:                     144115
IP address blocks:        240a:a5b9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d2:b1:07:3c:6f:66:9a:8a:d4:35:39:46:90:d0:41:c0:d4:09:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:29:49 2026 GMT
            Not After : May 25 02:34:49 2027 GMT
        Subject: CN=26A2C9BC76AAB01DCA733ECA2F84F7BC19ECF98D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:85:7a:d4:9e:96:e6:e4:63:44:9e:26:59:c5:
                    d2:a9:a7:49:62:c0:ee:4c:16:f6:c1:8f:ba:02:90:
                    a3:40:ab:33:af:2e:f1:12:91:9a:8e:d3:df:5a:36:
                    c9:70:38:48:64:07:94:6e:e1:41:85:66:f6:91:12:
                    14:4e:a7:6d:b4:9e:cf:df:d6:ba:01:00:f9:74:58:
                    4b:b5:5d:4e:30:9e:24:99:7e:89:4a:c9:1b:05:ea:
                    8e:4e:34:00:73:3c:3c:45:b2:40:30:29:da:cc:83:
                    6f:24:90:6c:83:9a:ab:15:48:b6:8f:72:c5:21:c1:
                    4a:ff:4d:57:6e:82:4b:7a:3a:e7:48:e1:b9:68:71:
                    b2:75:d3:e9:7f:8d:e9:d3:9c:64:b0:57:0f:d7:78:
                    ad:f3:54:1b:0d:22:0a:63:38:55:51:6e:37:53:b4:
                    6d:8a:5d:44:44:ce:a9:83:93:6d:5e:13:9c:f2:3c:
                    e0:be:1d:95:14:59:99:10:56:fa:71:81:b7:95:c4:
                    e9:b5:fc:ae:f6:41:a8:99:af:60:65:27:3a:1c:3f:
                    da:b1:f5:24:ec:02:2b:eb:3d:9b:01:41:7e:1d:aa:
                    df:81:07:d4:05:ee:e2:21:5e:56:2a:e1:fe:48:de:
                    8d:a0:e1:ad:68:6d:65:78:64:17:71:fd:0b:ec:07:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A2:C9:BC:76:AA:B0:1D:CA:73:3E:CA:2F:84:F7:BC:19:EC:F9:8D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144115.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5b9::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:bf:1d:23:cd:19:a1:ac:8c:40:81:e0:d2:a9:c4:6b:a0:cf:
         f9:85:c7:34:7e:4e:44:55:4d:4c:a4:ed:42:0b:7f:0f:01:83:
         a3:6d:5f:3c:07:c9:0b:22:73:a3:be:47:88:25:72:25:a7:30:
         d8:9c:c8:9c:56:74:50:be:74:c9:80:66:bd:16:d0:23:dc:e2:
         e4:ff:06:fd:ee:0a:9e:b9:83:1f:03:ef:da:88:7c:c7:fa:b9:
         1f:4b:91:4a:2c:4b:75:e4:97:f5:fa:ee:d8:7d:2a:e5:c2:84:
         a4:8d:31:1f:64:18:0a:55:aa:d5:cb:46:37:65:c8:18:a6:4b:
         53:19:47:b4:80:c2:bf:1c:65:f8:63:a9:22:93:87:05:c6:3c:
         93:1b:07:8d:b2:80:48:d9:e3:ff:6b:5a:78:2b:a6:89:ee:85:
         f3:45:e2:53:f6:2b:44:4f:c2:d6:0f:90:25:ca:c5:60:31:e2:
         55:e1:68:90:20:12:59:02:68:3a:1e:c5:1d:ee:3e:68:d3:7a:
         45:b4:fa:3a:5b:cf:e9:a5:85:91:29:d4:87:ba:da:17:80:f1:
         d2:61:04:8b:dc:06:c3:e2:2f:79:ed:81:5f:a1:d6:35:69:fb:
         ca:38:f5:55:5f:02:60:a9:b1:82:a2:6f:2f:a6:ac:26:8e:9f:
         ea:a2:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:13 2026 by rpki-client