Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144273.roa
File:                     AS144273.roa (raw, json)
Hash identifier:          OHKdtEtcGT4SA2tEnYF1zGv43SvuMsf6tQbc0z+pI6Y=
Subject key identifier:   06:01:AD:B9:AD:31:2D:2C:91:F4:D3:41:5F:32:E0:18:8C:D4:DF:C0
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       13F6B362022C2FB7F13538C0ADAFA9AEDEC6F921
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144273.roa
Signing time:             Fri 22 May 2026 02:47:48 +0000
ROA not before:           Fri 22 May 2026 02:42:48 +0000
ROA not after:            Fri 21 May 2027 02:47:48 +0000
asID:                     144273
IP address blocks:        240a:a657::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f6:b3:62:02:2c:2f:b7:f1:35:38:c0:ad:af:a9:ae:de:c6:f9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 02:42:48 2026 GMT
            Not After : May 21 02:47:48 2027 GMT
        Subject: CN=0601ADB9AD312D2C91F4D3415F32E0188CD4DFC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:78:72:01:b4:48:d1:17:b6:86:dc:9b:81:79:
                    ad:fb:e3:dc:36:93:03:fa:8e:cd:2d:75:d4:52:76:
                    0e:e4:05:e5:7b:53:b0:0e:67:80:a1:1f:cd:f1:ff:
                    0d:6a:03:b1:a6:03:c4:83:b6:ff:c9:3f:00:a6:15:
                    d4:c1:3e:bf:0c:bb:da:dd:6d:6c:14:ba:fc:57:83:
                    61:2e:9e:e8:72:ba:55:c6:9a:aa:57:ff:5a:b5:cf:
                    be:29:d8:84:02:58:a1:31:0c:93:0a:f7:4b:f2:d5:
                    ed:1c:6f:cd:d8:8b:75:ff:79:21:e8:b2:6e:76:48:
                    f8:c4:32:d6:ca:e3:31:91:01:a1:3f:ce:8f:8b:c0:
                    8e:64:9d:7e:74:63:df:52:73:57:7c:c7:8c:f5:f0:
                    20:d2:54:dc:16:cb:a8:98:7a:9b:28:6b:48:65:42:
                    d0:2c:5a:0e:0d:8a:50:e8:84:75:19:7d:80:e0:36:
                    61:89:86:5c:8a:8e:07:bc:14:2d:4a:df:0e:04:3f:
                    15:7b:69:18:5b:42:98:c2:88:c4:f1:9f:28:81:d2:
                    ee:ed:cf:af:01:49:2a:bf:df:b6:22:35:f5:be:2d:
                    ff:02:f4:f5:d9:96:01:15:ba:37:c6:d8:24:86:a0:
                    5c:a5:ba:4c:c5:fc:1b:3a:68:18:b0:8a:a5:59:92:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:01:AD:B9:AD:31:2D:2C:91:F4:D3:41:5F:32:E0:18:8C:D4:DF:C0
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144273.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a657::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:3e:42:56:cc:84:63:4a:f0:5a:ba:37:0b:fb:c0:f3:5c:f5:
         62:f0:16:87:3c:88:8a:3d:ef:65:fa:29:65:62:35:22:7f:0b:
         ff:2b:04:7d:c2:08:aa:23:db:ea:4b:e5:23:b1:21:bd:ca:15:
         80:05:d9:5d:d8:fa:c2:1b:05:f5:06:1c:03:3b:3f:64:f7:37:
         38:bd:88:16:b1:c1:8a:b9:84:2f:0f:64:fc:4f:e8:21:c9:9c:
         ee:ef:28:92:79:d3:26:0c:63:85:d5:60:83:5f:54:0f:78:e2:
         c5:07:46:62:d1:bd:dc:36:bf:14:7f:4a:e5:f8:86:e9:0e:95:
         32:ae:00:ff:55:d1:db:09:94:00:6f:ac:ac:a1:df:05:b0:3c:
         ef:0e:25:28:e4:be:75:f2:9f:b2:5f:6d:0a:36:58:5c:0d:dc:
         a7:d3:e8:57:95:43:1c:1a:e8:c1:06:57:44:2d:4a:ab:eb:4b:
         f3:88:72:d0:e9:71:63:a2:28:fe:4f:70:b6:d8:94:90:16:bd:
         41:a8:cb:07:49:f9:f0:50:41:4e:c8:87:d6:d1:e6:70:82:8a:
         d1:32:05:cc:73:f1:88:62:f4:49:ab:b3:ec:ad:94:da:64:4a:
         84:75:8a:86:c4:cd:4f:bd:80:0e:f3:56:7c:ac:b5:6a:00:55:
         af:85:6c:a7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUE/azYgIsL7fxNTjAra+prt7G+SEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyNDhaFw0yNzA1MjEwMjQ3NDhaMDMxMTAvBgNV
BAMTKDA2MDFBREI5QUQzMTJEMkM5MUY0RDM0MTVGMzJFMDE4OENENERGQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZeHIBtEjRF7aG3JuBea3749w2
kwP6js0tddRSdg7kBeV7U7AOZ4ChH83x/w1qA7GmA8SDtv/JPwCmFdTBPr8Mu9rd
bWwUuvxXg2EunuhyulXGmqpX/1q1z74p2IQCWKExDJMK90vy1e0cb83Yi3X/eSHo
sm52SPjEMtbK4zGRAaE/zo+LwI5knX50Y99Sc1d8x4z18CDSVNwWy6iYepsoa0hl
QtAsWg4NilDohHUZfYDgNmGJhlyKjge8FC1K3w4EPxV7aRhbQpjCiMTxnyiB0u7t
z68BSSq/37YiNfW+Lf8C9PXZlgEVujfG2CSGoFylukzF/Bs6aBiwiqVZkjnPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUBgGtua0xLSyR9NNBXzLgGIzU38AwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MjczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmVzANBgkqhkiG9w0BAQsFAAOCAQEAez5C
VsyEY0rwWro3C/vA81z1YvAWhzyIij3vZfopZWI1In8L/ysEfcIIqiPb6kvlI7Eh
vcoVgAXZXdj6whsF9QYcAzs/ZPc3OL2IFrHBirmELw9k/E/oIcmc7u8oknnTJgxj
hdVgg19UD3jixQdGYtG93Da/FH9K5fiG6Q6VMq4A/1XR2wmUAG+srKHfBbA87w4l
KOS+dfKfsl9tCjZYXA3cp9PoV5VDHBrowQZXRC1Kq+tL84hy0OlxY6Io/k9wttiU
kBa9QajLB0n58FBBTsiH1tHmcIKK0TIFzHPxiGL0Sauz7K2U2mRKhHWKhsTNT72A
DvNWfKy1agBVr4Vspw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client