Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144181.roa
File:                     AS144181.roa (raw, json)
Hash identifier:          d2Qmk1Clu/XXSZ/koz5WRDzPDAHknZtT0GJklAEpcgk=
Subject key identifier:   EB:EF:13:3B:D0:00:BC:F6:44:D8:48:4B:0A:F7:57:88:5B:F6:F9:8A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3E249F0A9D5B17F8D3B5627B92802F493B56A6AF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144181.roa
Signing time:             Fri 22 May 2026 06:27:40 +0000
ROA not before:           Fri 22 May 2026 06:22:40 +0000
ROA not after:            Fri 21 May 2027 06:27:40 +0000
asID:                     144181
IP address blocks:        240a:a5fb::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:24:9f:0a:9d:5b:17:f8:d3:b5:62:7b:92:80:2f:49:3b:56:a6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:40 2026 GMT
            Not After : May 21 06:27:40 2027 GMT
        Subject: CN=EBEF133BD000BCF644D8484B0AF757885BF6F98A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:10:95:b7:c1:e1:26:61:d8:95:3b:6b:91:
                    67:ea:66:dd:2c:84:e4:4a:d9:44:ff:76:bb:84:12:
                    3a:b7:f9:9d:f8:00:f4:fa:6f:6d:ce:89:f9:67:82:
                    f9:17:cc:8f:fb:c6:f4:2b:6f:31:90:ea:cc:72:98:
                    85:ad:e2:e6:d0:23:88:80:00:01:9e:93:06:2c:74:
                    5c:c1:48:db:d7:cb:5b:d9:c4:4e:59:59:04:95:c1:
                    fc:2c:b5:9b:33:17:23:01:3c:ae:ac:cb:b2:61:36:
                    5a:33:72:76:21:37:b4:80:61:e8:9a:a7:bd:95:13:
                    d1:6c:e1:51:de:65:12:5b:0d:53:d9:ce:b7:9e:75:
                    34:0b:6a:30:3a:9a:6c:db:42:5b:9d:f4:ab:ba:1c:
                    ef:33:3b:af:25:36:d8:f1:d5:19:51:da:66:e0:28:
                    ca:dc:94:64:1e:fb:ab:37:51:3e:53:b3:73:78:6f:
                    ac:45:58:e9:42:9f:c2:21:24:65:9d:aa:6f:ac:2d:
                    ea:b5:43:21:9e:f4:e4:4f:cb:f4:4d:60:76:2d:1a:
                    ef:e1:34:c9:b6:ce:ac:1a:a1:7f:56:bc:e5:06:a7:
                    79:d4:f2:18:a9:5f:bc:c1:9a:b0:30:6d:83:0d:6c:
                    af:45:27:f9:5b:b5:c0:3d:80:6d:fc:f4:88:05:37:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EF:13:3B:D0:00:BC:F6:44:D8:48:4B:0A:F7:57:88:5B:F6:F9:8A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144181.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a5fb::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:bb:5e:9d:29:c1:0f:12:63:12:b2:21:67:12:3f:8e:97:d2:
         3e:54:e0:91:0e:be:ca:b7:07:cf:5f:e4:6c:60:c1:78:7a:ba:
         38:0e:eb:82:84:3d:0a:80:9e:8f:a1:a0:51:bc:65:c9:78:3b:
         93:f9:8f:1f:79:97:73:38:2b:e7:f0:78:a3:0e:ed:c8:1c:64:
         dc:af:17:8a:99:8b:a5:46:b6:1d:b6:46:70:6a:5d:fa:89:37:
         a5:41:70:85:6b:dd:84:07:7e:f4:5c:d6:9f:c2:71:ad:bd:31:
         ce:b6:59:85:b9:e7:2d:b9:7f:5e:81:3b:c1:50:90:76:bd:5b:
         e0:29:40:15:f8:1c:8c:d9:84:54:ac:04:7a:08:ee:af:6a:a7:
         dc:bc:dd:3c:1d:bb:a5:4d:ed:ef:32:a8:ac:69:05:4d:2d:21:
         11:23:b4:df:1a:8f:b2:f3:01:46:f6:3a:d7:f5:0d:99:e0:e5:
         fc:13:39:39:51:fd:71:69:eb:bd:01:50:14:86:56:15:9a:15:
         0b:ee:47:9c:2c:82:25:41:76:bf:7c:f0:65:a1:60:f9:89:85:
         a0:3d:ad:9c:3e:6d:22:87:3a:2e:1a:60:bc:be:fb:d6:24:d8:
         ad:55:0d:ae:2b:99:97:b0:47:d7:ec:30:b1:2f:77:55:82:c0:
         49:93:16:d1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPiSfCp1bF/jTtWJ7koAvSTtWpq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNDBaFw0yNzA1MjEwNjI3NDBaMDMxMTAvBgNV
BAMTKEVCRUYxMzNCRDAwMEJDRjY0NEQ4NDg0QjBBRjc1Nzg4NUJGNkY5OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHhCVt8HhJmHYlTtrkWfqZt0s
hORK2UT/druEEjq3+Z34APT6b23OiflngvkXzI/7xvQrbzGQ6sxymIWt4ubQI4iA
AAGekwYsdFzBSNvXy1vZxE5ZWQSVwfwstZszFyMBPK6sy7JhNlozcnYhN7SAYeia
p72VE9Fs4VHeZRJbDVPZzreedTQLajA6mmzbQlud9Ku6HO8zO68lNtjx1RlR2mbg
KMrclGQe+6s3UT5Ts3N4b6xFWOlCn8IhJGWdqm+sLeq1QyGe9ORPy/RNYHYtGu/h
NMm2zqwaoX9WvOUGp3nU8hipX7zBmrAwbYMNbK9FJ/lbtcA9gG389IgFN97LAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU6+8TO9AAvPZE2EhLCvdXiFv2+YowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTgxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAql+zANBgkqhkiG9w0BAQsFAAOCAQEAfLte
nSnBDxJjErIhZxI/jpfSPlTgkQ6+yrcHz1/kbGDBeHq6OA7rgoQ9CoCej6GgUbxl
yXg7k/mPH3mXczgr5/B4ow7tyBxk3K8XipmLpUa2HbZGcGpd+ok3pUFwhWvdhAd+
9FzWn8Jxrb0xzrZZhbnnLbl/XoE7wVCQdr1b4ClAFfgcjNmEVKwEegjur2qn3Lzd
PB27pU3t7zKorGkFTS0hESO03xqPsvMBRvY61/UNmeDl/BM5OVH9cWnrvQFQFIZW
FZoVC+5HnCyCJUF2v3zwZaFg+YmFoD2tnD5tIoc6LhpgvL771iTYrVUNriuZl7BH
1+wwsS93VYLASZMW0Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:34 2026 by rpki-client