Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144206.roa
File:                     AS144206.roa (raw, json)
Hash identifier:          URUW958IVUoIANXm8R6QLUx10WhBKg9YHpO0fBQioGU=
Subject key identifier:   2E:92:07:DD:76:E4:08:E4:22:F6:11:C8:88:2C:2B:A8:24:04:18:94
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3F77F46B055FEAF1584BFB05348D50BAD76A345E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144206.roa
Signing time:             Fri 22 May 2026 07:32:15 +0000
ROA not before:           Fri 22 May 2026 07:27:15 +0000
ROA not after:            Fri 21 May 2027 07:32:15 +0000
asID:                     144206
IP address blocks:        240a:a614::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:77:f4:6b:05:5f:ea:f1:58:4b:fb:05:34:8d:50:ba:d7:6a:34:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:15 2026 GMT
            Not After : May 21 07:32:15 2027 GMT
        Subject: CN=2E9207DD76E408E422F611C8882C2BA824041894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:84:90:b5:f1:0c:50:8b:40:c8:48:e8:5f:
                    34:43:0b:03:b0:2a:71:0d:f9:7a:5c:22:fb:23:5d:
                    f9:bf:dd:5c:bd:0b:78:62:91:0b:83:1a:e5:58:48:
                    5c:ff:34:a1:c5:44:33:fb:b5:12:81:c6:38:13:5a:
                    1b:e5:7a:95:4b:49:ca:18:36:bd:ea:ac:ef:b3:10:
                    e9:1e:2a:7a:c1:c3:be:32:db:4f:1e:d6:ce:0b:b7:
                    3b:fd:f0:29:da:53:c2:43:2c:46:e7:1e:85:7c:58:
                    6e:07:d3:73:88:39:34:e7:9c:08:23:fc:41:2f:22:
                    5a:8e:a1:41:5c:7c:3b:51:34:9d:31:0f:7f:98:4d:
                    c3:15:04:19:ad:20:34:92:7c:dc:5f:37:21:5f:69:
                    8e:c5:a5:d1:52:74:ec:ac:58:a9:0b:d5:78:15:92:
                    05:ea:08:c9:0c:2b:4b:4b:c2:0a:cc:48:04:aa:a9:
                    77:2b:ff:d8:42:b8:8d:01:b0:77:66:96:5d:57:48:
                    cf:50:c9:d5:d7:c8:0d:18:08:e9:3d:f7:aa:a4:47:
                    0e:c2:6a:aa:ac:ed:cb:ef:d2:13:64:d3:a8:33:05:
                    7f:a8:c1:85:c7:b2:92:c5:0b:4f:a4:6b:9a:88:1d:
                    7f:97:c3:bc:c7:69:ad:99:8e:8d:a4:32:f0:05:98:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:92:07:DD:76:E4:08:E4:22:F6:11:C8:88:2C:2B:A8:24:04:18:94
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144206.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a614::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:e5:a3:c4:03:ca:40:62:0d:57:5f:8c:e4:c7:ba:79:f5:ed:
         2c:82:fc:74:d5:c2:cc:f8:62:90:65:e7:a5:ea:eb:f9:d3:92:
         00:aa:6b:15:23:0f:de:6e:5d:5a:da:6e:17:3a:74:bb:39:a7:
         30:00:02:1c:57:aa:f6:8c:2c:25:4d:46:36:d0:02:dc:e1:6c:
         72:f7:cc:3d:46:8b:a3:8f:32:d6:a3:4c:14:29:a4:32:3e:90:
         dc:4f:be:54:b2:86:5a:54:51:7a:85:32:fd:4c:5f:98:d0:69:
         9b:ec:8b:b0:d3:26:ca:ca:11:d5:5d:20:13:4e:c1:42:9e:ea:
         8b:7b:5d:bb:fb:1c:37:aa:06:c8:ac:1e:af:02:34:54:8d:27:
         47:08:c6:ae:3f:89:a7:c7:dd:2b:01:60:dc:2f:71:9c:ae:ac:
         81:55:06:37:73:ec:e2:fc:a8:55:d4:9a:41:6e:1f:cc:77:03:
         e5:f4:3b:f1:17:01:f8:51:b4:83:eb:87:9c:60:91:22:54:dd:
         2f:26:2a:b8:9b:86:d3:f4:c3:e0:2c:aa:ab:b6:68:d8:ef:c0:
         f8:a4:4b:d6:78:fb:ba:3f:02:20:7d:e2:5f:4e:c5:8a:29:49:
         64:11:42:15:e1:c3:eb:67:58:81:eb:c5:9d:eb:68:c7:15:32:
         eb:50:f8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:12 2026 by rpki-client