Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144222.roa
File:                     AS144222.roa (raw, json)
Hash identifier:          4aJNX7nNJ7Ob8OQNR4rhNxvhXJm2xNnI1utFFL/2PPE=
Subject key identifier:   13:27:AF:83:FB:9E:E2:8B:DC:F3:6A:DD:9F:31:8E:52:8B:78:45:7D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       22EE9F9C957A13E4EAD32FD7CEB20F2DE280F39E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144222.roa
Signing time:             Fri 22 May 2026 06:58:28 +0000
ROA not before:           Fri 22 May 2026 06:53:28 +0000
ROA not after:            Fri 21 May 2027 06:58:28 +0000
asID:                     144222
IP address blocks:        240a:a624::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ee:9f:9c:95:7a:13:e4:ea:d3:2f:d7:ce:b2:0f:2d:e2:80:f3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:28 2026 GMT
            Not After : May 21 06:58:28 2027 GMT
        Subject: CN=1327AF83FB9EE28BDCF36ADD9F318E528B78457D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:c2:10:94:9f:5d:49:f5:ae:5a:26:bd:76:
                    3e:0a:c7:3d:64:ee:32:6a:ab:e6:12:f9:db:a2:9a:
                    cd:1a:97:3b:50:78:b4:b5:ab:c1:df:b8:fd:0c:6e:
                    b8:a9:65:34:94:8f:d6:10:42:6e:ca:30:aa:08:30:
                    a6:b2:93:ca:3f:7a:a9:60:73:fb:99:92:5f:89:67:
                    09:e4:14:7c:5a:71:e8:12:3f:57:0a:4b:be:46:3f:
                    61:fd:a8:39:b2:53:bb:db:f0:b9:cf:77:70:7a:25:
                    e3:6a:2c:b4:63:ff:8a:c4:00:3f:47:f9:d4:53:8d:
                    7e:e4:a6:b5:36:4c:c5:20:37:71:80:99:99:46:13:
                    dc:92:ff:ed:49:61:52:69:a4:9a:fd:29:21:8a:7d:
                    6f:3b:5e:2a:02:5f:4d:38:2e:f6:c7:31:af:76:15:
                    e7:b5:fe:21:65:1f:cc:0c:f7:47:f1:6b:53:3a:14:
                    b5:50:c7:49:dc:88:f7:f3:88:9a:05:f3:1a:d0:d3:
                    3e:fd:fc:45:db:39:9c:23:58:7f:d4:d2:f6:2c:f1:
                    82:98:c9:e4:30:53:09:69:18:2f:7b:7f:01:db:e7:
                    84:c4:64:28:87:36:cd:44:3d:e3:5a:23:1c:3c:1a:
                    74:e9:4f:37:d6:c5:21:81:af:1c:76:c5:aa:da:8b:
                    ca:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:27:AF:83:FB:9E:E2:8B:DC:F3:6A:DD:9F:31:8E:52:8B:78:45:7D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144222.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a624::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:db:73:a3:d0:57:87:b7:49:ff:09:a1:f6:0f:6c:5a:0c:da:
         4a:61:10:3b:eb:06:ee:c3:08:ad:78:f0:66:1d:a0:0a:38:43:
         48:cc:5f:25:c8:49:c3:10:fd:c5:87:4b:be:5c:88:8b:54:6d:
         72:94:b9:6a:a2:15:b9:27:d9:fc:05:15:41:64:c4:43:de:72:
         29:7d:4e:5e:1d:c7:a0:84:2d:c7:26:31:16:97:25:cf:f1:5c:
         b8:ca:17:a0:6f:61:66:96:4a:d9:c9:8f:23:be:35:41:aa:52:
         4c:35:ba:f7:a0:c5:c7:97:fc:4d:c6:dd:27:3b:e4:92:75:1e:
         f9:ea:5b:64:e0:3f:93:91:e1:bb:94:b1:1b:8b:27:1d:37:34:
         1d:2d:e9:ce:dd:98:91:f1:44:50:3e:9e:41:26:e4:c5:41:3d:
         62:ae:8c:76:c7:35:3b:a6:53:13:f7:fa:b5:96:a3:10:8f:18:
         ad:3f:88:72:d9:56:1e:96:cf:63:c9:ec:76:71:da:ee:3a:d1:
         57:dd:63:d4:20:52:6e:e8:1f:14:0c:72:b9:5a:7c:4c:3b:ac:
         b1:0e:8f:ea:34:e5:9e:3f:f1:a6:c0:e6:0a:ca:c9:3f:cd:d7:
         f0:ac:57:7f:1e:7b:00:d1:91:e3:83:e7:58:76:15:4a:71:a5:
         79:d2:08:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:07 2026 by rpki-client