Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144246.roa
File:                     AS144246.roa (raw, json)
Hash identifier:          wgtHwoPNToRYNiRGdvFCMOD/B16JHYWd3BURnS/MRyc=
Subject key identifier:   5C:A0:C5:42:D9:2E:E2:32:1E:17:F7:44:1E:1D:3C:B4:71:37:94:E1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       327028536207CB99088084AE0D3E01EF098D6DDB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144246.roa
Signing time:             Fri 22 May 2026 04:27:06 +0000
ROA not before:           Fri 22 May 2026 04:22:06 +0000
ROA not after:            Fri 21 May 2027 04:27:06 +0000
asID:                     144246
IP address blocks:        240a:a63c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:70:28:53:62:07:cb:99:08:80:84:ae:0d:3e:01:ef:09:8d:6d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:06 2026 GMT
            Not After : May 21 04:27:06 2027 GMT
        Subject: CN=5CA0C542D92EE2321E17F7441E1D3CB4713794E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:08:97:0b:59:04:1e:fb:48:bc:66:c6:0c:
                    33:1b:78:3a:e4:cc:6d:17:d1:7f:5c:3e:76:97:81:
                    d0:60:9a:17:f1:a1:b5:21:e6:d1:49:13:ee:36:b2:
                    94:ef:d2:bd:be:56:bf:39:df:91:d3:f3:60:05:dc:
                    e7:2c:b8:0a:94:a7:9e:cd:c7:ba:e1:70:44:a0:24:
                    9b:f1:4e:ae:65:9c:8b:3b:bf:ca:ec:95:59:e2:32:
                    4f:15:8c:27:23:f0:b9:11:58:d9:03:08:31:3c:b5:
                    5e:57:fa:fc:19:f6:1c:43:a6:59:f6:b8:fa:6d:3d:
                    a3:a1:aa:76:26:a5:8f:41:b5:8a:ea:61:e6:ee:48:
                    f1:b2:94:d7:45:4f:b6:f4:e0:9e:79:c9:6e:b1:6f:
                    c1:9b:3a:a9:79:ed:fd:e6:19:a9:d0:5f:e7:ef:80:
                    8a:8e:17:5e:a5:b6:5a:0c:7e:ff:09:44:52:2a:12:
                    7a:67:7d:eb:e7:17:06:1a:8e:01:29:eb:5c:17:cf:
                    37:0b:df:e7:1f:58:73:0a:e0:77:67:18:51:d5:0e:
                    99:11:78:d4:30:f0:83:d3:6e:fa:43:42:fa:b1:c7:
                    22:c3:14:18:02:8b:e5:bd:81:95:4c:28:aa:c3:82:
                    a7:a6:11:b2:be:79:e6:28:0f:b1:18:32:2a:43:ce:
                    fc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A0:C5:42:D9:2E:E2:32:1E:17:F7:44:1E:1D:3C:B4:71:37:94:E1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144246.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a63c::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:05:e7:2d:72:7e:82:94:93:67:2c:16:6a:b2:d8:01:9c:5f:
         f1:9f:da:46:e0:8e:3d:83:7a:2b:9f:b1:88:fb:21:46:48:4d:
         29:fa:8a:b6:b5:84:3f:c5:96:e5:7a:ae:2b:3f:40:9f:ec:90:
         96:84:f2:a2:8c:fc:53:ec:46:c0:87:3a:3a:0e:15:6b:18:f8:
         fc:58:b4:48:d2:b6:3f:ed:1a:af:5d:d8:0d:fd:95:69:52:93:
         11:ce:fe:91:d6:da:c8:dd:1f:40:c4:23:4f:16:47:96:11:10:
         40:0e:a7:de:1a:f1:a6:db:b4:b4:bb:5d:b4:b4:07:83:2b:4f:
         2f:87:37:f9:d8:4e:ed:e1:be:be:be:ff:c2:21:e3:34:2c:98:
         8f:f8:ea:36:6c:0a:53:cb:36:25:b4:78:ec:4c:a7:fd:f0:03:
         62:50:bc:3c:11:3a:aa:d6:55:60:0e:a5:38:b4:20:a5:54:ae:
         ba:cf:b2:12:2d:1f:30:31:00:c6:1c:e0:82:b4:a0:29:2c:01:
         51:ad:2a:db:13:b1:c5:ef:43:62:2b:48:94:92:34:6f:90:86:
         00:b4:1d:0e:ff:b5:5b:9b:52:65:b1:74:d1:98:58:3e:d4:5d:
         04:5f:d0:ff:41:9b:d3:b2:da:94:7d:b3:fa:ac:d4:f7:9c:e5:
         b4:5c:c4:91
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMnAoU2IHy5kIgISuDT4B7wmNbdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMDZaFw0yNzA1MjEwNDI3MDZaMDMxMTAvBgNV
BAMTKDVDQTBDNTQyRDkyRUUyMzIxRTE3Rjc0NDFFMUQzQ0I0NzEzNzk0RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsuwiXC1kEHvtIvGbGDDMbeDrk
zG0X0X9cPnaXgdBgmhfxobUh5tFJE+42spTv0r2+Vr8535HT82AF3OcsuAqUp57N
x7rhcESgJJvxTq5lnIs7v8rslVniMk8VjCcj8LkRWNkDCDE8tV5X+vwZ9hxDpln2
uPptPaOhqnYmpY9BtYrqYebuSPGylNdFT7b04J55yW6xb8GbOql57f3mGanQX+fv
gIqOF16ltloMfv8JRFIqEnpnfevnFwYajgEp61wXzzcL3+cfWHMK4HdnGFHVDpkR
eNQw8IPTbvpDQvqxxyLDFBgCi+W9gZVMKKrDgqemEbK+eeYoD7EYMipDzvypAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUXKDFQtku4jIeF/dEHh08tHE3lOEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmPDANBgkqhkiG9w0BAQsFAAOCAQEAhQXn
LXJ+gpSTZywWarLYAZxf8Z/aRuCOPYN6K5+xiPshRkhNKfqKtrWEP8WW5XquKz9A
n+yQloTyooz8U+xGwIc6Og4Vaxj4/Fi0SNK2P+0ar13YDf2VaVKTEc7+kdbayN0f
QMQjTxZHlhEQQA6n3hrxptu0tLtdtLQHgytPL4c3+dhO7eG+vr7/wiHjNCyYj/jq
NmwKU8s2JbR47Eyn/fADYlC8PBE6qtZVYA6lOLQgpVSuus+yEi0fMDEAxhzggrSg
KSwBUa0q2xOxxe9DYitIlJI0b5CGALQdDv+1W5tSZbF00ZhYPtRdBF/Q/0Gb07La
lH2z+qzU95zltFzEkQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:12 2026 by rpki-client