Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144207.roa
File:                     AS144207.roa (raw, json)
Hash identifier:          LFgZdWKTRFEwrbDAppVSjzSfzUp7y5fOYVXxDjCr/vo=
Subject key identifier:   5E:4F:20:76:A5:A2:D9:63:4E:B3:3C:6B:70:A4:5F:CE:49:90:85:43
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1A4AEB15A152FCC51BD90A466BBF6B5830F3464A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144207.roa
Signing time:             Mon 25 May 2026 06:48:58 +0000
ROA not before:           Mon 25 May 2026 06:43:58 +0000
ROA not after:            Mon 24 May 2027 06:48:58 +0000
asID:                     144207
IP address blocks:        240a:a615::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4a:eb:15:a1:52:fc:c5:1b:d9:0a:46:6b:bf:6b:58:30:f3:46:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:58 2026 GMT
            Not After : May 24 06:48:58 2027 GMT
        Subject: CN=5E4F2076A5A2D9634EB33C6B70A45FCE49908543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:88:62:7e:cc:1c:aa:84:4d:ce:83:03:93:
                    76:a9:f4:57:09:23:6a:6b:d2:f0:60:e2:6b:96:40:
                    f2:49:7d:1d:d8:01:b5:0d:65:38:bf:5f:cf:c3:bf:
                    eb:4d:b4:31:28:cb:9c:0e:c8:93:af:43:bb:83:cf:
                    ef:5a:71:09:59:bf:f8:b9:9b:20:14:a3:46:c6:1e:
                    ea:52:6f:25:6c:1d:94:0b:f6:a1:df:59:0f:0b:00:
                    cc:bc:d6:54:c9:30:5e:1c:db:d9:ce:57:f9:11:4e:
                    34:77:fb:f5:42:ba:68:5e:1b:6b:87:d9:ee:b9:52:
                    df:82:1d:c9:6a:ef:0a:f9:46:7b:4a:7b:9c:61:ab:
                    f0:57:ea:3a:40:49:01:75:00:ab:dc:41:5d:91:44:
                    38:cd:81:52:39:bd:28:c9:fe:d9:42:57:f3:e5:d5:
                    32:35:34:b1:a3:de:66:6d:c9:6a:9b:b6:46:a3:03:
                    94:35:c0:ea:3d:bd:81:13:c5:55:a4:2d:f7:82:7f:
                    7b:0a:00:8d:4f:fd:ff:be:cd:e3:52:79:53:4c:64:
                    c8:99:5f:f7:61:67:5d:fa:0d:8b:ff:a9:6c:d2:e2:
                    4e:4f:ec:9c:87:f7:e8:51:83:02:18:ff:83:f2:69:
                    99:b6:ad:95:90:f9:f5:cf:b0:56:80:24:9e:00:49:
                    ad:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4F:20:76:A5:A2:D9:63:4E:B3:3C:6B:70:A4:5F:CE:49:90:85:43
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144207.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a615::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:f1:82:ff:31:58:a0:7e:f9:89:72:f1:16:ed:f1:95:b2:7e:
         b3:43:89:75:af:21:63:a9:86:6b:96:2b:b5:5a:00:88:94:9e:
         43:34:10:f0:82:72:41:51:e0:a6:31:c5:54:83:11:09:b6:43:
         ad:56:95:f1:ba:b6:24:6b:62:0a:41:fe:d2:11:cb:f0:d3:41:
         f8:27:b7:e8:c0:76:ad:15:22:ba:63:ab:6d:70:99:26:44:ce:
         64:89:99:d3:6a:16:7c:c1:94:0c:84:10:43:d7:fc:08:77:67:
         11:84:2d:63:aa:0e:4b:f1:67:4a:0e:a1:ff:72:be:91:ad:e8:
         98:ef:7a:1f:e8:61:83:44:02:97:b1:e2:cd:a7:5e:44:8d:6a:
         96:77:7a:37:8c:4c:54:27:4c:ae:4b:0e:2a:93:50:7f:32:5d:
         96:f8:0f:b0:1e:42:26:6f:2b:bb:03:cd:c0:88:64:17:54:d3:
         70:f0:83:98:e8:ff:a8:ad:6c:0d:af:12:5e:d6:48:d6:60:be:
         30:5f:7b:6b:04:cf:da:13:0a:48:a4:6d:24:96:78:8f:7a:30:
         f7:1b:39:a3:a4:0f:54:55:c1:1e:bd:74:d8:fe:40:d4:e4:5f:
         c3:1e:f3:3a:72:bd:88:c6:0b:56:43:4e:3a:b2:e5:72:a7:79:
         6b:22:36:48
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGkrrFaFS/MUb2QpGa79rWDDzRkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNThaFw0yNzA1MjQwNjQ4NThaMDMxMTAvBgNV
BAMTKDVFNEYyMDc2QTVBMkQ5NjM0RUIzM0M2QjcwQTQ1RkNFNDk5MDg1NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsDIhifswcqoRNzoMDk3ap9FcJ
I2pr0vBg4muWQPJJfR3YAbUNZTi/X8/Dv+tNtDEoy5wOyJOvQ7uDz+9acQlZv/i5
myAUo0bGHupSbyVsHZQL9qHfWQ8LAMy81lTJMF4c29nOV/kRTjR3+/VCumheG2uH
2e65Ut+CHclq7wr5RntKe5xhq/BX6jpASQF1AKvcQV2RRDjNgVI5vSjJ/tlCV/Pl
1TI1NLGj3mZtyWqbtkajA5Q1wOo9vYETxVWkLfeCf3sKAI1P/f++zeNSeVNMZMiZ
X/dhZ136DYv/qWzS4k5P7JyH9+hRgwIY/4PyaZm2rZWQ+fXPsFaAJJ4ASa3xAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUXk8gdqWi2WNOszxrcKRfzkmQhUMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmFTANBgkqhkiG9w0BAQsFAAOCAQEAtvGC
/zFYoH75iXLxFu3xlbJ+s0OJda8hY6mGa5YrtVoAiJSeQzQQ8IJyQVHgpjHFVIMR
CbZDrVaV8bq2JGtiCkH+0hHL8NNB+Ce36MB2rRUiumOrbXCZJkTOZImZ02oWfMGU
DIQQQ9f8CHdnEYQtY6oOS/FnSg6h/3K+ka3omO96H+hhg0QCl7HizadeRI1qlnd6
N4xMVCdMrksOKpNQfzJdlvgPsB5CJm8ruwPNwIhkF1TTcPCDmOj/qK1sDa8SXtZI
1mC+MF97awTP2hMKSKRtJJZ4j3ow9xs5o6QPVFXBHr102P5A1ORfwx7zOnK9iMYL
VkNOOrLlcqd5ayI2SA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client