Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144262.roa
File:                     AS144262.roa (raw, json)
Hash identifier:          y2P1r/Cl8hCWPk6L35Ib25E04ilcXsJiEb6DacVv7Wg=
Subject key identifier:   DA:BB:F1:52:47:AA:22:D4:CA:7C:60:A4:9B:F0:07:74:E9:5E:14:98
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4C2D07BF47122B7828514C0973CD35BDFEC4E380
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144262.roa
Signing time:             Fri 22 May 2026 07:24:31 +0000
ROA not before:           Fri 22 May 2026 07:19:31 +0000
ROA not after:            Fri 21 May 2027 07:24:31 +0000
asID:                     144262
IP address blocks:        240a:a64c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2d:07:bf:47:12:2b:78:28:51:4c:09:73:cd:35:bd:fe:c4:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:31 2026 GMT
            Not After : May 21 07:24:31 2027 GMT
        Subject: CN=DABBF15247AA22D4CA7C60A49BF00774E95E1498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5b:f8:64:b9:51:4e:95:8b:81:48:9a:a8:9d:
                    58:cd:e9:a7:c5:65:14:57:3b:6f:67:5a:df:b0:62:
                    5b:de:b5:bb:c0:70:fb:fa:38:12:00:f5:a2:f8:05:
                    03:d8:aa:f8:8b:c6:06:87:8a:0f:ff:9f:a2:36:bd:
                    f0:e0:4d:4a:f7:f3:ed:3e:69:ed:9f:66:24:6a:36:
                    ab:a6:46:ec:e9:a2:3e:c1:6e:53:39:62:64:c7:9b:
                    33:da:a7:01:0b:29:62:42:c7:50:c9:c0:aa:a8:48:
                    04:58:c7:4b:d3:24:20:59:fc:63:f9:9a:2c:49:c7:
                    d5:86:bb:c5:a7:8d:3f:2e:d0:9e:79:1c:1a:4f:db:
                    47:bc:c2:d6:73:d9:d3:60:52:a7:d2:04:96:f9:3b:
                    40:4e:16:7b:be:b2:db:34:0a:05:69:02:28:e9:c7:
                    9c:49:51:2b:38:c0:f5:97:e8:e8:5d:05:7b:43:e8:
                    ca:79:b2:40:ea:9d:94:e3:70:23:c0:26:9c:f4:14:
                    54:cf:4a:3d:5d:fa:38:2a:4e:03:9b:e6:5a:83:76:
                    61:12:64:74:61:0d:e9:b8:13:36:a3:a2:de:55:a6:
                    01:98:62:d2:d6:56:c9:9f:0b:db:b9:90:d1:7a:b7:
                    87:b1:67:cd:85:6a:09:a4:1f:98:ac:b5:f2:b1:cf:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BB:F1:52:47:AA:22:D4:CA:7C:60:A4:9B:F0:07:74:E9:5E:14:98
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144262.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a64c::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:a1:d5:1c:64:74:9a:43:71:13:ff:19:26:9a:f0:fd:6c:97:
         b6:3e:fe:ed:cf:4d:4f:4c:8c:a9:1d:79:2e:4c:5f:9c:39:4b:
         3a:d4:4c:ae:27:60:49:ca:e5:3f:cb:11:ae:40:8f:bf:d9:d8:
         90:5a:52:84:03:7b:c8:aa:06:18:3a:2d:4b:41:6d:db:e6:1d:
         f4:d2:1e:5f:85:08:c9:e9:7d:51:91:08:e3:46:77:20:cd:d4:
         8d:58:8a:ef:f2:a3:08:d9:16:a5:cb:7f:ad:2e:f2:51:dd:3b:
         7a:c1:98:20:0b:a0:83:f2:2d:d1:87:3d:1c:26:06:ad:8a:7e:
         c2:f7:0b:b9:ba:03:d0:e3:b9:46:b9:fa:86:a1:61:b4:24:f6:
         42:b5:b1:81:df:45:c9:4e:fd:44:92:76:c0:fc:03:15:3d:b8:
         16:db:a2:57:6d:b9:66:4c:59:f0:ec:c9:cd:fc:28:9e:0f:57:
         d4:8b:51:c3:14:31:89:4a:46:21:61:9f:4d:b3:7e:7c:d7:7f:
         e3:0d:18:d9:4e:15:3a:a8:99:5a:62:b1:2a:1f:bb:57:0b:f0:
         45:c6:a6:85:75:bd:55:57:a6:96:c1:6f:37:c9:e3:f4:f4:77:
         1d:62:fb:d4:79:d6:a3:34:ae:6e:0a:cc:5a:5d:31:51:18:bb:
         54:34:f2:25
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTC0Hv0cSK3goUUwJc801vf7E44AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5MzFaFw0yNzA1MjEwNzI0MzFaMDMxMTAvBgNV
BAMTKERBQkJGMTUyNDdBQTIyRDRDQTdDNjBBNDlCRjAwNzc0RTk1RTE0OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZW/hkuVFOlYuBSJqonVjN6afF
ZRRXO29nWt+wYlvetbvAcPv6OBIA9aL4BQPYqviLxgaHig//n6I2vfDgTUr38+0+
ae2fZiRqNqumRuzpoj7BblM5YmTHmzPapwELKWJCx1DJwKqoSARYx0vTJCBZ/GP5
mixJx9WGu8WnjT8u0J55HBpP20e8wtZz2dNgUqfSBJb5O0BOFnu+sts0CgVpAijp
x5xJUSs4wPWX6OhdBXtD6Mp5skDqnZTjcCPAJpz0FFTPSj1d+jgqTgOb5lqDdmES
ZHRhDem4Ezajot5VpgGYYtLWVsmfC9u5kNF6t4exZ82FagmkH5istfKxz/zlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU2rvxUkeqItTKfGCkm/AHdOleFJgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmTDANBgkqhkiG9w0BAQsFAAOCAQEAJ6HV
HGR0mkNxE/8ZJprw/WyXtj7+7c9NT0yMqR15LkxfnDlLOtRMridgScrlP8sRrkCP
v9nYkFpShAN7yKoGGDotS0Ft2+Yd9NIeX4UIyel9UZEI40Z3IM3UjViK7/KjCNkW
pct/rS7yUd07esGYIAugg/It0Yc9HCYGrYp+wvcLuboD0OO5Rrn6hqFhtCT2QrWx
gd9FyU79RJJ2wPwDFT24FtuiV225ZkxZ8OzJzfwong9X1ItRwxQxiUpGIWGfTbN+
fNd/4w0Y2U4VOqiZWmKxKh+7VwvwRcamhXW9VVemlsFvN8nj9PR3HWL71HnWozSu
bgrMWl0xURi7VDTyJQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:01 2026 by rpki-client