Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144195.roa
File:                     AS144195.roa (raw, json)
Hash identifier:          Hwtb/db0K73JDpMhgUetAiCwp5amF88W4rForz3bBBI=
Subject key identifier:   FC:EF:D8:7E:2E:90:D0:54:81:AE:34:2F:5C:90:02:06:58:D0:D7:15
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       200FD62011DB25529180D4C63A4BE236E353B5BA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144195.roa
Signing time:             Fri 22 May 2026 02:47:53 +0000
ROA not before:           Fri 22 May 2026 02:42:53 +0000
ROA not after:            Fri 21 May 2027 02:47:53 +0000
asID:                     144195
IP address blocks:        240a:a609::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0f:d6:20:11:db:25:52:91:80:d4:c6:3a:4b:e2:36:e3:53:b5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:53 2026 GMT
            Not After : May 21 02:47:53 2027 GMT
        Subject: CN=FCEFD87E2E90D05481AE342F5C90020658D0D715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a7:87:35:cf:38:3d:17:17:04:0f:d9:42:f4:
                    f2:79:03:63:4f:d2:e7:1a:96:f0:50:59:87:64:12:
                    50:57:ef:a6:55:e5:d3:f2:df:82:e7:02:97:c9:c3:
                    4b:67:34:ff:75:ee:db:77:4e:35:f4:af:fc:2b:e4:
                    02:2c:eb:b1:61:54:42:83:21:b5:6a:3b:22:33:9f:
                    0b:e0:dd:1a:8e:f2:65:5c:0e:33:57:ab:11:d0:3a:
                    66:b2:6c:35:bd:c7:0a:7d:4a:81:e8:bb:83:03:a7:
                    2e:dc:7b:24:a7:da:ae:4b:09:30:92:24:ba:5f:a6:
                    75:fa:4a:18:cf:85:e3:78:90:7c:3f:14:48:20:f9:
                    63:ce:6a:de:f9:47:c3:87:10:14:d6:64:f3:a4:1b:
                    fb:4a:69:18:d9:03:f9:4f:5f:43:b3:ab:32:a4:6b:
                    71:98:14:82:ef:ec:bf:c1:ca:4c:ef:eb:ed:94:f1:
                    ee:21:9d:f8:ef:5b:e7:20:3b:fb:b2:4d:76:81:98:
                    a1:b1:1f:6f:3b:5e:00:4f:0d:a3:97:b8:12:52:47:
                    90:11:b9:da:66:25:fa:de:83:e4:44:82:75:a2:17:
                    c6:92:89:0a:df:61:0b:11:15:17:3b:f4:62:0a:b7:
                    e9:53:dc:fc:d2:ae:79:a6:3e:3b:59:4a:ef:f2:0c:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EF:D8:7E:2E:90:D0:54:81:AE:34:2F:5C:90:02:06:58:D0:D7:15
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144195.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a609::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:16:a2:1f:9d:4d:4c:18:9e:e5:10:40:a6:17:ca:0e:78:12:
         bd:98:52:30:bb:65:be:0d:03:36:de:88:48:fa:f6:53:9d:67:
         8e:9c:24:84:35:f2:2e:0f:40:b6:a9:dc:4f:8c:f1:d6:46:5e:
         9c:fe:96:7a:ce:00:db:ac:ab:0d:35:87:30:37:9e:fe:c3:db:
         99:c7:52:0c:7b:6c:aa:07:d9:a5:46:45:74:17:37:f8:86:4e:
         c3:dd:58:b5:78:18:45:ab:50:a6:41:88:05:d7:a1:e5:6d:64:
         68:33:61:53:8b:7f:4e:8c:a8:4d:5c:f8:4c:08:e6:80:b8:8f:
         48:a2:4a:02:8d:96:ca:9c:2c:0a:f7:68:7d:f8:ae:74:c4:18:
         f4:b9:ee:1b:5a:e2:f4:28:16:c6:0f:c2:1a:54:8f:43:49:34:
         c1:c9:76:92:9e:32:6a:fd:13:e4:01:75:89:c7:cd:32:c6:77:
         c4:47:1f:32:7a:04:0e:b6:b8:97:e6:47:2c:c4:1a:04:5c:57:
         f3:6e:4f:ae:03:9a:0b:c2:77:5d:40:16:23:d9:a3:43:fe:da:
         44:25:5c:a5:f0:f9:17:0e:0c:d4:dc:d4:cf:8e:bc:0e:d5:b8:
         e9:f7:4d:0b:99:78:3b:c4:00:da:d1:9c:fb:1f:c8:b8:8f:27:
         dc:87:60:ee
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUIA/WIBHbJVKRgNTGOkviNuNTtbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyNTNaFw0yNzA1MjEwMjQ3NTNaMDMxMTAvBgNV
BAMTKEZDRUZEODdFMkU5MEQwNTQ4MUFFMzQyRjVDOTAwMjA2NThEMEQ3MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTp4c1zzg9FxcED9lC9PJ5A2NP
0ucalvBQWYdkElBX76ZV5dPy34LnApfJw0tnNP917tt3TjX0r/wr5AIs67FhVEKD
IbVqOyIznwvg3RqO8mVcDjNXqxHQOmaybDW9xwp9SoHou4MDpy7ceySn2q5LCTCS
JLpfpnX6ShjPheN4kHw/FEgg+WPOat75R8OHEBTWZPOkG/tKaRjZA/lPX0OzqzKk
a3GYFILv7L/Bykzv6+2U8e4hnfjvW+cgO/uyTXaBmKGxH287XgBPDaOXuBJSR5AR
udpmJfreg+REgnWiF8aSiQrfYQsRFRc79GIKt+lT3PzSrnmmPjtZSu/yDJnNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/O/Yfi6Q0FSBrjQvXJACBljQ1xUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MTk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmCTANBgkqhkiG9w0BAQsFAAOCAQEAWBai
H51NTBie5RBAphfKDngSvZhSMLtlvg0DNt6ISPr2U51njpwkhDXyLg9AtqncT4zx
1kZenP6Wes4A26yrDTWHMDee/sPbmcdSDHtsqgfZpUZFdBc3+IZOw91YtXgYRatQ
pkGIBdeh5W1kaDNhU4t/ToyoTVz4TAjmgLiPSKJKAo2WypwsCvdoffiudMQY9Lnu
G1ri9CgWxg/CGlSPQ0k0wcl2kp4yav0T5AF1icfNMsZ3xEcfMnoEDra4l+ZHLMQa
BFxX825PrgOaC8J3XUAWI9mjQ/7aRCVcpfD5Fw4M1NzUz468DtW46fdNC5l4O8QA
2tGc+x/IuI8n3Idg7g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:57 2026 by rpki-client