Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144237.roa
File:                     AS144237.roa (raw, json)
Hash identifier:          85Q9a8ENP7sA/m9L/lbpPgs9fQVPPwUgn7Cwc2xrDlU=
Subject key identifier:   B5:C4:9C:31:C7:EE:1C:48:BC:C0:EC:F2:0B:13:DF:E2:3C:7A:FB:63
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       429FF49BA9379BFA35C17DEFD71DFACEF7E2C4F4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144237.roa
Signing time:             Fri 22 May 2026 06:05:17 +0000
ROA not before:           Fri 22 May 2026 06:00:17 +0000
ROA not after:            Fri 21 May 2027 06:05:17 +0000
asID:                     144237
IP address blocks:        240a:a633::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9f:f4:9b:a9:37:9b:fa:35:c1:7d:ef:d7:1d:fa:ce:f7:e2:c4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:17 2026 GMT
            Not After : May 21 06:05:17 2027 GMT
        Subject: CN=B5C49C31C7EE1C48BCC0ECF20B13DFE23C7AFB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:9f:d6:2c:3c:7b:d7:b4:79:b5:5b:38:5d:
                    7c:50:69:7b:66:a0:b4:ce:26:fd:03:3c:59:a2:fa:
                    86:08:9f:0b:62:c0:eb:24:a9:58:ff:d4:ee:3e:6b:
                    ce:bf:52:b5:c4:3d:41:61:28:01:97:2a:b0:32:91:
                    98:e7:1e:eb:1d:4a:35:f2:7c:cf:a6:bf:d6:c1:b0:
                    f9:4c:c3:ec:7f:31:ad:c1:41:59:59:8a:94:b4:e3:
                    8d:55:08:ef:19:33:b9:7a:62:32:74:01:d8:f4:f3:
                    ea:d2:e1:34:d7:8c:e4:7d:a9:b4:08:a0:6a:ed:a5:
                    e4:eb:9b:1d:ae:d4:7f:bc:07:c8:ba:b2:38:fc:62:
                    40:8d:6a:f7:f0:40:47:ae:60:bd:fc:0d:b1:63:5d:
                    a8:33:82:7f:9e:ff:52:e4:07:1d:5b:99:63:69:41:
                    77:d9:90:58:a5:97:9a:9a:98:80:a6:a4:ed:8d:36:
                    4a:11:15:90:55:f8:45:a6:eb:f4:c7:71:a2:ce:46:
                    b5:6c:46:2c:c0:20:82:a5:b3:a3:37:b8:98:a8:f1:
                    14:15:61:12:35:8a:46:5f:e9:8e:f3:7b:41:7e:09:
                    c9:6a:92:0e:7c:85:16:ad:ac:65:9c:5c:36:5c:d8:
                    fe:45:4e:64:6b:a2:30:16:aa:b0:92:9b:9d:af:9c:
                    27:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C4:9C:31:C7:EE:1C:48:BC:C0:EC:F2:0B:13:DF:E2:3C:7A:FB:63
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a633::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:67:05:45:0e:ec:69:cb:8e:7d:55:db:ec:6c:70:89:59:81:
         dd:15:27:71:49:c3:68:4c:99:67:55:57:c0:43:14:b5:2c:73:
         6d:94:6b:18:07:f2:ac:6d:f8:d1:bd:31:a9:47:1f:75:8b:48:
         21:c2:ba:21:99:3c:3d:ca:1b:d4:d1:60:ad:b1:93:f4:cc:b2:
         53:2b:ae:d5:02:4a:57:08:12:1d:98:eb:fc:44:d2:90:13:88:
         36:e5:f5:3a:fa:75:09:4b:aa:0c:93:da:2b:9e:ee:2a:46:45:
         78:03:63:63:82:f0:09:ba:13:44:1a:00:fa:74:41:1a:1e:d6:
         b5:ec:4f:aa:44:32:d4:5a:82:c1:7a:c4:66:1d:18:fb:e0:02:
         f7:1f:ca:fd:cc:2d:f2:c6:d2:00:47:12:7a:c4:88:5f:47:89:
         48:fd:a9:f4:74:6d:31:66:b8:56:9e:8d:f1:ef:05:3c:d0:20:
         06:da:1b:f0:bc:fa:60:8a:a7:d7:cd:b1:c0:3e:64:f5:66:f2:
         16:45:48:02:fc:6c:8f:fc:98:d7:9d:cc:83:b2:5f:99:06:94:
         ed:08:e0:a1:e9:f1:fa:73:49:a1:ba:f9:34:08:fd:82:e9:38:
         c9:a7:16:fc:b2:6b:ba:97:be:87:22:74:17:ad:8c:45:57:fb:
         ad:1e:41:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:00 2026 by rpki-client