Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144169.roa
File:                     AS144169.roa (raw, json)
Hash identifier:          QVWwxDtwaVY53zJmulHpeSNUWhcxiP7cv9V4UCgFYoI=
Subject key identifier:   32:F1:75:EB:F9:EE:C4:04:A1:C3:27:58:74:B3:B9:15:20:28:11:01
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       131E1A11776AE54F9CE6F55ACD03A38B18D879B6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144169.roa
Signing time:             Fri 22 May 2026 06:05:38 +0000
ROA not before:           Fri 22 May 2026 06:00:38 +0000
ROA not after:            Fri 21 May 2027 06:05:38 +0000
asID:                     144169
IP address blocks:        240a:a5ef::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1e:1a:11:77:6a:e5:4f:9c:e6:f5:5a:cd:03:a3:8b:18:d8:79:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:38 2026 GMT
            Not After : May 21 06:05:38 2027 GMT
        Subject: CN=32F175EBF9EEC404A1C3275874B3B91520281101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:80:27:94:4d:99:90:cb:21:27:fa:74:1d:
                    fb:fb:e5:e9:10:11:65:42:3a:f7:c9:18:89:22:c7:
                    5c:3e:e7:a6:e8:37:2e:e7:85:b1:ea:e9:bf:ae:27:
                    19:49:9c:44:a5:bc:71:7c:8d:3e:1e:08:8f:bb:0a:
                    76:20:6c:60:7d:e2:17:0f:15:7b:c7:ae:65:bf:c6:
                    be:7c:bf:d9:8c:14:a3:ac:9c:0c:7f:99:4a:7d:a1:
                    a8:9a:6f:af:42:80:76:6e:27:4c:6d:71:0d:3d:4a:
                    90:af:e9:a4:ad:92:c1:a5:1f:5c:44:2d:fd:72:49:
                    b8:57:fe:92:69:05:d7:33:f9:aa:1f:e1:53:91:20:
                    b5:f4:5d:47:f1:58:f6:80:c1:f6:b9:0d:f6:9e:62:
                    b9:27:89:03:36:dc:48:ec:04:04:05:e3:aa:3e:f8:
                    e9:84:55:d1:cf:0a:49:5f:19:c7:23:ae:b9:72:53:
                    a4:14:40:19:1b:5d:7a:ed:86:93:21:4a:a0:86:6a:
                    d8:57:11:32:0e:0d:2a:07:91:76:d1:8b:b5:28:6a:
                    b3:c9:9b:0f:84:21:76:7d:46:dc:3c:97:4a:76:11:
                    a1:bc:37:6f:8b:6b:d8:c6:a8:9f:95:f9:b1:f5:0b:
                    fc:d3:64:65:dc:1c:a1:1a:20:3f:38:a3:fd:9b:af:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F1:75:EB:F9:EE:C4:04:A1:C3:27:58:74:B3:B9:15:20:28:11:01
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144169.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5ef::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:4b:a3:cc:70:a0:52:de:90:45:bf:ed:85:e5:97:28:0d:81:
         36:b1:0f:df:05:ee:d6:70:2d:1b:04:14:06:30:bf:52:65:81:
         61:92:0c:da:2e:91:35:ac:b6:0d:6e:9a:19:8a:e1:de:9d:11:
         1f:52:4b:fd:69:47:58:4b:77:3a:71:c9:12:25:07:11:62:19:
         43:51:d5:7e:5a:3f:73:3c:72:bb:c8:74:8b:90:94:ab:88:6e:
         41:4c:71:d1:b0:ce:c7:f4:fe:dd:24:2f:b4:67:cc:c7:79:d1:
         8d:18:fd:76:4d:84:17:b7:75:eb:a8:33:8e:0d:60:33:df:64:
         24:b4:3f:da:20:ad:a5:bc:c7:16:84:d0:89:e3:b8:53:36:6c:
         99:9b:84:32:1c:b0:6f:eb:c8:fa:64:aa:6d:33:80:e0:f1:ec:
         87:a6:e4:d2:c9:50:97:fa:ed:31:a5:2d:ef:0f:b9:87:6d:9c:
         a5:d7:c4:03:ff:4c:2d:d4:43:7f:72:e8:29:f8:a9:51:ae:12:
         0a:e8:d2:b5:8f:3b:cd:5d:2d:91:fd:b3:85:ef:4d:07:6a:42:
         5f:6e:bb:b2:04:f7:81:5b:c7:61:36:02:6a:f8:30:f4:ce:3f:
         fc:e7:15:f7:87:7b:e8:1d:64:d5:6f:6e:05:21:60:07:6c:91:
         5c:5c:aa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:29 2026 by rpki-client