Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144172.roa
File:                     AS144172.roa (raw, json)
Hash identifier:          vE6FkqgGfDRO3me3EtrOoXEE66yC1Rq1VJ8gUG691xY=
Subject key identifier:   CC:93:BE:87:39:BC:B0:DB:DB:DD:F4:FB:22:87:FD:C7:45:D2:0F:7F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       796CBC37D05E6FBB11BF9AA0BFCD8D12E271ABD5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144172.roa
Signing time:             Mon 25 May 2026 06:28:45 +0000
ROA not before:           Mon 25 May 2026 06:23:45 +0000
ROA not after:            Mon 24 May 2027 06:28:45 +0000
asID:                     144172
IP address blocks:        240a:a5f2::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6c:bc:37:d0:5e:6f:bb:11:bf:9a:a0:bf:cd:8d:12:e2:71:ab:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:45 2026 GMT
            Not After : May 24 06:28:45 2027 GMT
        Subject: CN=CC93BE8739BCB0DBDBDDF4FB2287FDC745D20F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:af:8a:da:ab:83:77:c8:2b:96:2c:f9:da:
                    78:aa:77:0f:db:f3:7a:93:c0:13:e6:a4:07:30:25:
                    1a:8d:0e:85:ad:a0:c0:84:fb:d6:41:be:6a:3b:eb:
                    b5:bc:de:20:88:75:97:f8:db:73:76:4a:9d:85:6a:
                    74:ee:37:a2:74:c7:8f:00:9e:95:e7:46:31:96:58:
                    3a:3d:8e:ee:5b:ad:b1:f5:b7:cf:36:30:fd:58:25:
                    00:20:d8:87:b8:35:1c:25:14:70:2b:56:23:ce:46:
                    77:00:3d:15:15:47:85:8e:5a:ce:63:97:12:4d:27:
                    fe:25:bf:61:e6:00:a0:26:b9:dc:00:63:91:e6:7f:
                    94:69:79:e7:0a:ec:19:fd:2f:d3:79:20:a0:29:8f:
                    ab:91:5e:8c:a8:e4:d5:1a:01:c1:e3:58:eb:91:05:
                    ca:88:3b:ce:29:86:f7:27:8a:06:0a:16:b8:99:ca:
                    f6:08:29:14:56:2c:93:6d:c9:98:5d:08:07:e5:22:
                    6b:1e:99:f1:1e:da:2d:7a:23:11:8c:79:f2:f4:7e:
                    8f:b7:7f:6e:16:76:4b:b2:f7:65:de:a4:79:d5:5b:
                    ec:74:5e:3e:0b:ab:ae:9d:03:da:5b:7b:9a:ea:53:
                    0f:3d:1a:80:ab:ff:41:9a:b3:35:27:c4:e3:ef:10:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:93:BE:87:39:BC:B0:DB:DB:DD:F4:FB:22:87:FD:C7:45:D2:0F:7F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144172.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5f2::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:7f:1b:54:d8:ab:23:e1:13:97:cf:19:dc:66:6c:9a:34:c8:
         bc:6f:93:39:52:94:3b:5e:36:b6:72:87:ca:30:ce:a8:95:cf:
         dc:9c:94:12:6f:9e:8f:66:83:17:a7:35:2d:06:6e:11:61:9b:
         13:4c:a1:25:eb:e1:33:42:34:06:d5:7c:b1:39:8d:2b:dd:33:
         39:22:2f:5b:64:d7:0b:b8:e5:c3:39:49:db:a8:5c:80:2f:18:
         a4:85:95:43:52:fc:85:db:50:e0:1c:b6:6a:14:54:33:a0:a2:
         73:42:05:2d:32:f3:a8:73:36:f6:26:c4:c1:6f:1e:27:8a:59:
         f1:7a:f8:bc:2a:d1:1d:fa:ee:95:34:72:8e:7f:d1:10:27:65:
         d2:9f:54:44:83:de:da:c2:64:ed:2c:6e:54:a7:69:aa:9a:d1:
         84:d4:49:64:64:99:68:83:7c:7d:20:d3:89:1b:1c:ba:a8:d3:
         6b:79:0f:c2:fe:d1:99:76:27:26:40:9e:29:18:ea:05:04:fe:
         78:97:86:ea:0e:32:8c:c1:f5:5f:a0:e0:ad:dd:09:b6:ab:2f:
         42:49:29:cd:4c:60:02:3b:8e:29:76:25:83:41:66:84:3f:28:
         dc:ad:23:81:62:f2:55:00:60:33:d2:ce:6f:1b:f9:5f:48:fa:
         4a:a3:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:28 2026 by rpki-client