Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144228.roa
File:                     AS144228.roa (raw, json)
Hash identifier:          s9c8ziOc2xPdxyCyLIfqqU4OicSxAiP5x/cjuFQCPFo=
Subject key identifier:   B9:05:54:4D:CE:BD:E1:41:5A:9C:DA:5F:D0:F9:69:55:18:C0:D2:72
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       456391E8E1361DA3E6086466FD091D1839343CB7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144228.roa
Signing time:             Fri 22 May 2026 07:32:21 +0000
ROA not before:           Fri 22 May 2026 07:27:21 +0000
ROA not after:            Fri 21 May 2027 07:32:21 +0000
asID:                     144228
IP address blocks:        240a:a62a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:63:91:e8:e1:36:1d:a3:e6:08:64:66:fd:09:1d:18:39:34:3c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:21 2026 GMT
            Not After : May 21 07:32:21 2027 GMT
        Subject: CN=B905544DCEBDE1415A9CDA5FD0F9695518C0D272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cb:d1:3e:5b:41:83:1f:c6:6d:fe:9b:18:03:
                    93:9d:d9:1f:de:5f:a7:d3:3d:a1:f8:fa:28:15:8f:
                    45:00:da:32:f8:dc:de:3c:41:fa:b9:8e:ba:40:c2:
                    be:44:c3:53:fb:5c:fc:47:82:d9:71:64:6d:9e:22:
                    21:0d:4e:ab:e0:64:71:33:31:b2:df:4c:bf:46:a5:
                    7d:2e:ed:43:57:5d:f2:10:72:f2:43:07:98:ab:9f:
                    e6:25:d0:a5:67:b3:b8:20:d5:29:a7:11:af:5c:4e:
                    0f:4b:88:9f:ce:69:16:03:06:ab:a0:2d:83:1d:f9:
                    55:42:f9:79:b3:f4:f7:e8:2f:eb:93:de:d1:78:c3:
                    53:16:34:f5:e1:b2:b0:8e:c7:04:7b:53:6f:fc:2a:
                    c4:ab:bf:1a:07:af:11:51:e7:9c:9c:3f:48:61:0c:
                    e5:f0:ac:b4:64:7e:de:c6:7f:bb:ca:21:f7:33:01:
                    d4:25:48:a8:95:ad:bd:fd:eb:5b:0c:10:28:f5:f8:
                    88:df:d9:ef:10:f8:57:92:84:64:1a:e7:77:45:a6:
                    94:22:e1:f7:5b:ce:64:dd:5a:c3:9f:69:e9:de:e9:
                    e7:1d:30:81:38:b0:c5:a7:6f:ac:aa:2b:4a:3e:38:
                    15:45:67:95:8a:b5:01:98:f9:27:76:ad:a5:70:63:
                    a8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:05:54:4D:CE:BD:E1:41:5A:9C:DA:5F:D0:F9:69:55:18:C0:D2:72
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144228.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a62a::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:aa:bc:5f:18:c9:b6:2f:ed:0c:30:cf:8c:e9:c3:75:11:ff:
         e3:b5:8a:17:7a:9c:de:c3:d9:03:2b:52:0f:8d:69:10:04:23:
         c4:28:92:6a:a2:69:75:45:e6:21:6d:94:9a:65:fd:e7:99:fc:
         22:71:8f:45:ce:87:72:34:06:77:c8:b5:8c:e0:42:41:1d:9f:
         b5:b5:74:58:c9:fb:5d:ce:c3:33:6b:9e:c8:b3:2f:34:f7:22:
         b3:d5:7a:e5:63:e1:df:e0:28:a1:1f:f2:0a:c7:f5:60:1e:33:
         78:80:43:a6:f8:cb:68:dc:9b:c8:6a:7b:d5:47:b7:c2:73:20:
         1f:f4:53:8d:30:65:41:8f:0c:e9:e3:b6:26:cf:de:0d:b4:78:
         64:00:97:25:d4:12:34:07:b9:34:fc:e4:ed:9b:ef:93:41:ff:
         7a:d5:0a:1e:c7:61:fb:8c:e9:53:cf:4d:9b:f3:2e:bd:19:0e:
         28:9b:b3:d6:a6:73:77:56:30:fa:b7:11:d6:ec:40:0c:b6:c5:
         6d:49:17:34:70:08:a0:b8:0e:2a:32:fc:1e:c7:b1:c9:f1:7b:
         7c:30:bc:ca:78:1b:12:01:f2:af:7b:c3:a6:af:67:87:39:b4:
         d2:8c:40:ff:43:eb:f1:34:b9:89:44:37:ce:81:0b:a5:27:f9:
         42:22:93:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:39 2026 by rpki-client