Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144166.roa
File:                     AS144166.roa (raw, json)
Hash identifier:          ANl/ErP/sm8ziIQICgs1N8UYR6EwmYH4ABKGUwpKJEg=
Subject key identifier:   0D:6E:C2:A6:31:88:8E:11:6F:59:C1:91:46:13:95:F6:C0:67:72:36
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       10667B677F7FDAD330B6CE5438955D2F973689C7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144166.roa
Signing time:             Fri 22 May 2026 07:32:12 +0000
ROA not before:           Fri 22 May 2026 07:27:12 +0000
ROA not after:            Fri 21 May 2027 07:32:12 +0000
asID:                     144166
IP address blocks:        240a:a5ec::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:66:7b:67:7f:7f:da:d3:30:b6:ce:54:38:95:5d:2f:97:36:89:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:12 2026 GMT
            Not After : May 21 07:32:12 2027 GMT
        Subject: CN=0D6EC2A631888E116F59C191461395F6C0677236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:3f:78:36:97:af:ab:7a:46:68:cf:79:1a:
                    35:ac:b8:38:6c:6f:1a:15:32:d0:16:78:ae:eb:a7:
                    6a:28:78:f9:dc:07:32:27:72:75:2d:ab:e5:90:f4:
                    2d:a8:08:ff:9e:1f:eb:68:1e:67:b1:e9:78:e2:5c:
                    36:51:4e:c8:2c:50:00:63:cf:fc:f4:d8:f5:a9:4f:
                    a4:17:ed:30:d5:6f:4b:f6:fd:e4:22:ec:6f:24:d8:
                    45:51:74:8a:7d:92:34:b4:70:c5:f0:5c:77:b7:98:
                    11:2e:cf:13:8f:3d:f2:96:bd:a4:e1:36:e5:47:79:
                    08:d0:53:a0:5a:d0:7f:87:74:36:c1:d0:0f:1c:34:
                    fb:f6:8c:c1:2f:6c:f4:2c:eb:c8:25:1f:8f:eb:2d:
                    a7:9d:b8:f7:e5:7e:9b:c3:b2:7f:2f:61:17:74:9b:
                    fb:fe:37:47:e9:87:97:c4:27:e1:aa:69:89:0e:31:
                    51:27:74:41:c9:ae:85:7f:d5:92:68:58:c3:22:bc:
                    e6:ae:53:55:ce:2e:42:2b:2c:9f:47:55:f9:ad:6f:
                    15:7a:a1:ec:e1:70:7b:79:ce:89:10:b7:1e:75:81:
                    a3:57:48:9d:b1:32:fe:63:25:7d:c9:81:36:f8:d9:
                    09:75:db:84:29:11:f4:44:9c:c3:47:b8:68:72:1f:
                    f8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6E:C2:A6:31:88:8E:11:6F:59:C1:91:46:13:95:F6:C0:67:72:36
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144166.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:19:70:b9:19:a9:e2:c4:a1:10:fd:e1:b5:df:49:5f:7d:fe:
         22:8d:ce:46:a4:09:79:87:a2:2f:03:c1:24:81:6c:34:10:6b:
         64:22:43:a6:75:9a:24:81:99:9a:61:e0:2e:4a:66:4e:df:2c:
         0a:1f:e2:c2:c3:02:e1:71:84:09:48:20:68:98:80:e3:bd:69:
         72:74:d2:a7:f2:a7:2c:f1:4c:a9:7c:04:0b:37:36:b9:d5:64:
         31:49:52:44:ae:7d:43:54:a2:22:1e:eb:91:8a:6e:e5:97:71:
         3c:14:84:73:e3:cd:c0:61:46:ae:25:af:04:9c:31:b5:e6:20:
         cc:7d:f7:5e:99:e1:fe:3c:a5:79:a4:88:3c:cd:46:b4:d7:db:
         bf:f7:81:d9:3c:12:40:8d:8a:a0:06:30:00:25:a4:ce:83:3f:
         0f:c6:37:4b:15:86:51:01:63:1f:03:17:56:56:07:7f:11:63:
         9a:df:db:47:dd:bf:db:83:bf:a9:8b:2b:a5:30:ba:f1:48:87:
         97:69:29:86:db:3a:08:80:cd:10:e2:3a:f0:55:d1:a0:8a:fe:
         e2:36:5b:53:70:90:40:6c:f7:b5:ea:ab:8b:0e:08:ef:79:30:
         5f:c3:cd:b9:b8:a4:10:c2:f2:48:6b:ac:73:0f:9c:ff:d1:43:
         24:80:05:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:14 2026 by rpki-client