Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144208.roa
File:                     AS144208.roa (raw, json)
Hash identifier:          ld2kPrkIijgzUmPwrMmWvncn4JgvEiWSGzJgBTbMGZ8=
Subject key identifier:   30:03:51:8B:5A:CB:59:5D:CC:93:F7:94:EE:5A:1A:13:1D:0F:6B:62
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       60F271D35157B3EFAC0AAE31A6828C639C6E3C65
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144208.roa
Signing time:             Tue 26 May 2026 06:12:40 +0000
ROA not before:           Tue 26 May 2026 06:07:40 +0000
ROA not after:            Tue 25 May 2027 06:12:40 +0000
asID:                     144208
IP address blocks:        240a:a616::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f2:71:d3:51:57:b3:ef:ac:0a:ae:31:a6:82:8c:63:9c:6e:3c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:40 2026 GMT
            Not After : May 25 06:12:40 2027 GMT
        Subject: CN=3003518B5ACB595DCC93F794EE5A1A131D0F6B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:97:4b:f3:e9:b7:32:d2:8f:01:e0:cc:4d:
                    df:8d:67:cb:ef:67:88:4a:4f:8a:e7:9b:94:1e:32:
                    87:bd:48:cc:61:d9:e6:2d:97:1c:f4:b2:19:d6:b5:
                    55:c8:08:9c:c0:54:66:c4:dc:7c:a4:3a:83:ef:f3:
                    0a:20:cb:bb:a9:f8:1d:42:f5:8f:fa:c5:56:7e:ee:
                    bd:95:da:12:5e:50:52:3b:8c:65:32:c8:37:62:32:
                    f7:84:5b:c8:ff:e2:e4:88:89:29:22:08:37:2d:c9:
                    81:5d:92:45:6f:5b:52:c7:52:e0:9c:40:b0:de:fd:
                    56:4f:80:61:d7:63:3e:fe:e0:06:24:86:7b:ea:d9:
                    44:db:93:5c:1a:f0:23:48:d4:02:97:d9:79:71:3d:
                    74:02:72:62:15:7d:bf:64:e8:42:dc:6a:02:82:0a:
                    09:3a:92:37:51:f5:9a:65:e9:09:93:13:0c:07:a1:
                    72:48:b3:28:5d:69:61:a0:70:d6:2f:1d:d9:e1:e5:
                    14:db:56:ec:4b:96:3e:16:64:5a:18:13:82:82:e7:
                    7e:ce:2a:b6:74:f4:60:3b:ed:80:b4:23:7b:05:35:
                    7b:ad:6b:f9:1f:02:e6:15:c0:c1:cd:59:aa:41:e2:
                    4d:a1:1d:b0:71:04:28:3c:32:87:86:87:cf:d1:23:
                    7c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:51:8B:5A:CB:59:5D:CC:93:F7:94:EE:5A:1A:13:1D:0F:6B:62
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144208.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a616::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:07:57:b2:79:ce:3e:d7:5f:98:aa:d7:74:3e:71:1e:ac:ad:
         02:48:ff:86:6e:da:6d:03:29:63:f1:b8:f0:21:e4:d5:9c:f9:
         45:5a:eb:f6:77:66:80:29:7b:82:88:cd:6f:bb:ed:1b:0f:5e:
         46:5b:10:f3:34:98:e4:6c:7f:86:04:1b:96:0c:13:b5:da:24:
         84:91:55:95:7d:5d:39:53:7a:2f:be:d5:8c:bf:da:0f:2b:c6:
         15:95:36:2e:a3:1c:19:ee:3e:96:c0:cf:97:da:99:dc:14:a1:
         eb:87:dd:43:cc:2f:34:7a:b0:fd:50:1f:0a:40:b9:2d:1c:3e:
         31:21:cc:e8:b7:8d:8f:77:ea:63:98:1c:2c:84:5d:21:56:d6:
         da:bc:bd:59:fe:c9:1e:12:55:d6:c1:5e:db:44:cb:35:cf:03:
         4d:85:9b:70:59:12:8e:52:5e:8b:65:0e:35:ea:b4:b5:72:fa:
         96:8d:d8:08:1a:c8:88:6b:0e:3e:cf:b5:8e:ab:36:e6:67:bb:
         3d:36:4e:14:60:71:ce:16:8f:b2:1f:d7:07:b6:24:3f:b1:27:
         62:eb:66:a9:38:41:e8:a3:65:4b:3a:05:73:e9:5f:e5:86:5f:
         6f:69:d8:a0:fc:b2:6f:39:b5:3b:e2:b1:05:73:c9:b7:85:bd:
         2d:1f:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:05 2026 by rpki-client