Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144266.roa
File:                     AS144266.roa (raw, json)
Hash identifier:          L/v4BxuV1qsxJ9PWQX6DIDs84WuMERianFv28IzCo5A=
Subject key identifier:   67:25:EC:EF:4C:DA:8C:BD:5D:2C:50:24:B4:FB:E0:96:68:F7:51:CB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3C18CB3798834EEC39AE8CE381651259E7511C26
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144266.roa
Signing time:             Fri 22 May 2026 01:50:24 +0000
ROA not before:           Fri 22 May 2026 01:45:24 +0000
ROA not after:            Fri 21 May 2027 01:50:24 +0000
asID:                     144266
IP address blocks:        240a:a650::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:18:cb:37:98:83:4e:ec:39:ae:8c:e3:81:65:12:59:e7:51:1c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:24 2026 GMT
            Not After : May 21 01:50:24 2027 GMT
        Subject: CN=6725ECEF4CDA8CBD5D2C5024B4FBE09668F751CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:76:ce:0c:12:84:8b:db:b0:78:9c:58:59:
                    04:3e:9c:a2:ee:2c:b4:91:5e:69:66:56:1d:cc:6f:
                    cb:a8:56:fd:d4:3a:c8:f3:17:87:7b:29:10:cb:e5:
                    0c:52:61:d3:b3:43:3e:dc:82:8c:3a:46:35:21:b0:
                    78:25:89:79:7d:2f:14:a9:d0:6f:42:ff:4f:c4:7b:
                    41:57:53:3f:02:93:fc:f8:c8:2f:ba:ac:c4:da:4a:
                    66:26:33:a0:0e:9d:3f:e1:1e:74:1c:f6:01:90:67:
                    91:01:ed:7a:33:48:66:45:f4:4a:40:58:58:3c:f7:
                    df:ab:e7:bb:15:a8:3e:01:df:2d:14:67:82:44:9c:
                    39:16:4e:4a:7d:25:e8:8b:4d:7f:5e:3b:ff:58:cd:
                    da:e3:49:54:3a:6a:04:19:7a:6b:ac:c8:d9:4f:e0:
                    46:a9:d4:f7:86:47:c1:50:e5:e2:31:79:40:3d:b1:
                    d2:21:be:3a:31:ac:07:1e:3b:d8:b7:11:95:fa:70:
                    50:4c:f7:be:e5:3c:09:e0:76:2d:0d:44:c3:76:bf:
                    d8:cd:7c:a1:30:4f:58:9f:f2:6f:15:8d:bc:7f:f8:
                    e7:50:80:bc:85:ce:24:1e:4b:fd:4b:e8:81:d7:cd:
                    f8:dc:30:59:1a:b6:d2:bf:da:90:ac:ad:1a:35:a3:
                    9e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:25:EC:EF:4C:DA:8C:BD:5D:2C:50:24:B4:FB:E0:96:68:F7:51:CB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a650::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:bf:80:ac:20:86:c2:af:a1:a0:db:70:08:9e:5e:aa:10:27:
         b5:23:d5:4f:8c:a3:e1:de:c1:6b:86:3e:3b:b5:dc:5d:eb:92:
         43:dc:4d:0c:38:56:b0:88:0e:46:2b:3f:6d:f3:90:eb:8d:11:
         69:15:26:7e:fa:b8:cb:78:89:80:8c:f5:ba:0f:67:7d:35:a4:
         ba:3f:39:b1:1b:94:12:50:fc:82:a8:b8:3f:2f:df:30:10:53:
         c9:a0:bd:63:b4:d7:df:c7:2d:b6:ae:7c:a3:e2:14:25:c8:a7:
         06:8a:e4:90:58:9a:8c:ba:91:9f:6a:85:8c:6b:b8:83:49:bf:
         26:db:db:4d:27:f3:1f:e4:5f:94:16:8f:ec:3a:d5:2d:61:9b:
         73:9c:82:17:2e:ad:30:47:f4:54:a8:ec:cf:6e:f3:44:81:7d:
         34:52:b1:a9:56:8c:9d:b2:25:dd:7d:d8:fe:45:5a:d2:3d:68:
         ac:7b:eb:0b:fd:0f:a9:cd:e2:3d:14:fd:0b:4e:45:10:30:f1:
         b1:04:21:3a:1f:c8:fd:f8:aa:01:09:05:3b:1a:de:89:b9:35:
         bf:8a:9f:03:31:e8:32:d2:2c:71:f0:ef:7e:a1:32:89:a3:11:
         5d:e4:7e:93:3c:f2:d3:d6:0e:27:b9:7d:f1:a4:6a:cd:94:85:
         8e:37:12:a3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPBjLN5iDTuw5rozjgWUSWedRHCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MjRaFw0yNzA1MjEwMTUwMjRaMDMxMTAvBgNV
BAMTKDY3MjVFQ0VGNENEQThDQkQ1RDJDNTAyNEI0RkJFMDk2NjhGNzUxQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiSXbODBKEi9uweJxYWQQ+nKLu
LLSRXmlmVh3Mb8uoVv3UOsjzF4d7KRDL5QxSYdOzQz7cgow6RjUhsHgliXl9LxSp
0G9C/0/Ee0FXUz8Ck/z4yC+6rMTaSmYmM6AOnT/hHnQc9gGQZ5EB7XozSGZF9EpA
WFg899+r57sVqD4B3y0UZ4JEnDkWTkp9JeiLTX9eO/9YzdrjSVQ6agQZemusyNlP
4Eap1PeGR8FQ5eIxeUA9sdIhvjoxrAceO9i3EZX6cFBM977lPAngdi0NRMN2v9jN
fKEwT1if8m8Vjbx/+OdQgLyFziQeS/1L6IHXzfjcMFkattK/2pCsrRo1o55JAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUZyXs70zajL1dLFAktPvglmj3UcswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmUDANBgkqhkiG9w0BAQsFAAOCAQEACL+A
rCCGwq+hoNtwCJ5eqhAntSPVT4yj4d7Ba4Y+O7XcXeuSQ9xNDDhWsIgORis/bfOQ
640RaRUmfvq4y3iJgIz1ug9nfTWkuj85sRuUElD8gqi4Py/fMBBTyaC9Y7TX38ct
tq58o+IUJcinBorkkFiajLqRn2qFjGu4g0m/JtvbTSfzH+RflBaP7DrVLWGbc5yC
Fy6tMEf0VKjsz27zRIF9NFKxqVaMnbIl3X3Y/kVa0j1orHvrC/0Pqc3iPRT9C05F
EDDxsQQhOh/I/fiqAQkFOxreibk1v4qfAzHoMtIscfDvfqEyiaMRXeR+kzzy09YO
J7l98aRqzZSFjjcSow==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:22 2026 by rpki-client