Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144174.roa
File:                     AS144174.roa (raw, json)
Hash identifier:          cFabMqAumffH8HhFLoddSM8TbQgcdYWPjJMdc28pUGo=
Subject key identifier:   6A:E0:57:DD:94:DE:FC:C8:76:AC:B2:15:05:DD:D1:86:43:DA:A4:08
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7136CA9707426C7EE6BCD588407853D658866420
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144174.roa
Signing time:             Tue 26 May 2026 01:12:58 +0000
ROA not before:           Tue 26 May 2026 01:07:58 +0000
ROA not after:            Tue 25 May 2027 01:12:58 +0000
asID:                     144174
IP address blocks:        240a:a5f4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:36:ca:97:07:42:6c:7e:e6:bc:d5:88:40:78:53:d6:58:86:64:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:07:58 2026 GMT
            Not After : May 25 01:12:58 2027 GMT
        Subject: CN=6AE057DD94DEFCC876ACB21505DDD18643DAA408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:76:4e:06:5d:34:7d:f3:aa:f4:59:4c:6b:
                    af:3a:dd:7f:3b:f1:96:6d:76:48:19:e7:05:c1:4c:
                    d2:ea:fe:1c:c3:f1:ba:88:03:f5:39:4d:85:af:53:
                    51:80:1b:82:a9:fc:d1:20:1b:24:8a:1b:ed:10:1b:
                    ba:b1:35:78:f4:6f:72:c8:20:98:3d:7c:46:2a:6f:
                    35:8b:b2:86:e7:7c:42:c8:04:b7:96:67:02:42:9f:
                    a0:43:49:f6:69:b1:53:d2:d7:66:25:ff:fc:67:c1:
                    08:ff:bf:44:3c:d9:f1:0e:42:a9:8d:0e:93:00:62:
                    af:e3:ca:c8:9d:17:f4:bd:03:e7:99:17:a6:cd:1d:
                    7e:93:46:bf:81:40:52:41:ae:15:53:81:3c:21:ad:
                    73:c9:46:00:97:4c:3f:e6:8c:3c:c0:38:b5:d2:0c:
                    ec:eb:d8:19:7d:aa:6d:02:9f:df:a0:b0:22:92:aa:
                    69:9d:de:26:00:de:e9:38:9e:cb:f6:87:c4:31:8d:
                    ab:b9:fa:ed:5a:77:69:32:c9:b0:79:53:a8:9b:3b:
                    ce:87:7d:2b:c7:16:4d:32:e2:05:4f:dd:04:62:8f:
                    db:a3:c1:71:f9:30:7e:44:26:67:c3:e7:4d:bd:85:
                    db:9d:81:0f:ad:f1:6c:6d:12:42:c2:68:39:56:a1:
                    0b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E0:57:DD:94:DE:FC:C8:76:AC:B2:15:05:DD:D1:86:43:DA:A4:08
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:b6:b8:0e:57:ff:a0:33:6c:89:51:8a:87:2b:60:5f:52:d5:
         c9:8a:38:7e:3c:b5:ed:7b:59:e3:42:30:09:a4:4f:7c:36:32:
         d7:d5:9c:eb:c5:4f:2b:22:b9:af:d9:fc:6a:28:56:2a:59:14:
         5f:11:53:97:9d:21:2b:ee:f0:f6:30:d1:d5:63:84:94:b9:db:
         d1:b5:fe:8d:d2:5a:c4:40:0f:57:c1:5d:4e:4f:75:e2:f2:02:
         c5:c5:1b:9c:f6:ba:5e:5b:fe:7c:a3:47:35:9e:cc:a1:6f:fa:
         47:2a:a0:51:2b:77:d2:10:26:c3:54:32:4f:56:09:c7:3e:21:
         54:27:53:ba:50:2c:6a:b8:43:00:0a:8a:f7:52:b8:d4:da:00:
         c2:ec:d4:2c:48:c5:2e:3b:84:6d:ae:0a:2c:3a:da:76:16:f6:
         46:99:72:24:59:5e:30:0b:ca:83:78:72:68:18:ce:2d:f5:b0:
         58:57:96:61:39:36:c2:54:e1:33:61:0d:85:c8:e6:52:ca:7c:
         0b:9a:d1:74:4b:18:04:3d:0a:b6:0a:c1:e4:f3:c3:48:9a:b4:
         e4:fe:05:11:ca:93:54:97:04:8e:57:21:71:9e:87:5e:25:e8:
         1e:77:2f:df:76:88:02:cd:78:37:36:12:4d:a0:cb:d1:4d:17:
         99:fc:4d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:07 2026 by rpki-client