Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144167.roa
File:                     AS144167.roa (raw, json)
Hash identifier:          FoLxVnH+5nOzQBGXOokyPSr3IUGuxpid/8FYGkgfh+Y=
Subject key identifier:   EC:FD:34:49:76:C3:4A:D4:B4:DF:0F:2F:FB:C4:63:2B:FD:A6:57:A5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       273E4E3765E79668D05BC47C852B3DE91F5A25D4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144167.roa
Signing time:             Fri 22 May 2026 06:58:21 +0000
ROA not before:           Fri 22 May 2026 06:53:21 +0000
ROA not after:            Fri 21 May 2027 06:58:21 +0000
asID:                     144167
IP address blocks:        240a:a5ed::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3e:4e:37:65:e7:96:68:d0:5b:c4:7c:85:2b:3d:e9:1f:5a:25:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:21 2026 GMT
            Not After : May 21 06:58:21 2027 GMT
        Subject: CN=ECFD344976C34AD4B4DF0F2FFBC4632BFDA657A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c9:8a:6b:26:37:6e:48:12:ed:3b:1f:68:4a:
                    e4:60:21:cf:d6:9d:d8:6d:df:ec:fe:df:5a:79:e3:
                    22:c0:84:20:5e:a4:15:5a:59:b8:87:e0:47:7b:d5:
                    9c:df:cb:26:87:68:9d:14:6a:ce:be:e4:69:d9:cf:
                    38:b5:4c:21:4d:bc:8c:39:21:53:d6:53:d7:e9:98:
                    e6:14:30:ea:3a:cb:88:85:a8:1f:82:e9:f9:2b:51:
                    05:13:e1:58:fe:92:54:b5:32:be:d4:ec:09:27:96:
                    ee:25:85:22:71:b3:c0:97:95:ef:a1:3f:2a:f4:82:
                    06:0b:4c:eb:2c:24:3e:60:5c:14:49:1f:3b:81:a6:
                    73:69:0c:cc:0a:af:37:be:4f:a5:be:4b:00:81:47:
                    ea:a2:37:e3:bb:1b:d7:96:74:d1:2f:6f:e6:8c:ea:
                    f4:ca:31:b3:59:de:0d:67:18:e9:8e:2a:f8:ee:09:
                    c2:27:7a:8e:cc:59:a5:45:fe:aa:b3:0f:d9:5e:39:
                    fe:c3:b4:bd:13:43:1e:8c:85:3e:b2:22:53:e4:8c:
                    ec:59:7f:cf:25:33:d3:5d:34:9f:6a:4d:cc:3d:5d:
                    ec:23:79:b8:08:91:6c:31:9c:2b:43:60:6f:0e:b8:
                    41:95:a0:cb:5d:df:5b:2f:9f:5f:17:5c:78:1b:41:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FD:34:49:76:C3:4A:D4:B4:DF:0F:2F:FB:C4:63:2B:FD:A6:57:A5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144167.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5ed::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:74:e3:0d:ca:5f:10:ea:8c:e3:b1:cd:21:e1:f2:0f:3c:c0:
         83:a2:88:81:d0:b5:32:49:83:67:86:c0:f4:c4:17:f7:c7:8b:
         76:b6:20:5d:fa:19:47:e7:67:97:65:9e:b8:74:8b:c9:d5:26:
         df:57:cf:5f:82:4c:b0:5a:a5:70:21:6a:3f:54:39:61:f9:e2:
         5d:d5:5c:28:2c:98:42:cb:65:d1:4c:62:98:a9:58:3e:0c:ee:
         46:5b:f9:46:19:88:89:41:24:15:ac:9a:47:32:2e:fe:a5:22:
         f2:bf:57:2c:72:e6:93:81:de:36:42:d0:19:69:d4:9b:f5:32:
         15:77:1c:5a:92:2c:69:ca:bf:54:3d:ad:86:60:b9:59:78:6d:
         4c:cb:bd:6d:35:22:e1:9f:e4:97:a5:b4:5f:68:16:ee:92:25:
         a0:2e:d6:58:6a:b0:ab:55:fd:fa:ab:10:22:c0:71:b6:60:82:
         cc:80:5c:08:2e:a7:c5:be:5c:3a:d3:86:92:0b:72:01:7c:be:
         a4:9d:2e:e9:8f:14:35:68:ee:b4:48:bf:8c:68:b3:43:6e:38:
         77:a3:04:89:d4:3a:03:8a:af:9a:f7:31:00:6a:3e:31:44:e3:
         ca:79:21:a4:ba:46:e3:a8:ca:22:4b:be:ed:02:aa:65:f7:4b:
         22:1a:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:01 2026 by rpki-client