Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144278.roa
File:                     AS144278.roa (raw, json)
Hash identifier:          Mc78K0yJdsLgYoZuBgyZGEvYvoi69wl74m91UfnlH38=
Subject key identifier:   C6:64:04:98:6A:F7:AA:9B:F2:D1:FE:B7:AF:4D:80:C1:DD:F9:90:A4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7B99FA3E5AD7FF14D774A09E33940BFBFAEA2F6D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144278.roa
Signing time:             Tue 26 May 2026 03:16:39 +0000
ROA not before:           Tue 26 May 2026 03:11:39 +0000
ROA not after:            Tue 25 May 2027 03:16:39 +0000
asID:                     144278
IP address blocks:        240a:a65c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:99:fa:3e:5a:d7:ff:14:d7:74:a0:9e:33:94:0b:fb:fa:ea:2f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:39 2026 GMT
            Not After : May 25 03:16:39 2027 GMT
        Subject: CN=C66404986AF7AA9BF2D1FEB7AF4D80C1DDF990A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:d4:ae:97:25:40:ec:f2:42:da:6d:61:00:
                    84:fd:1f:2d:45:87:e2:40:39:06:a4:70:bc:32:c9:
                    7b:a8:5a:2c:c1:ea:6f:02:72:10:c8:c9:b9:6e:c7:
                    2c:89:53:4e:f7:05:4e:f9:36:52:9e:77:3f:95:20:
                    46:7d:36:54:ad:8f:40:b7:9e:92:f7:6a:7b:72:59:
                    15:4f:89:5f:da:e3:49:d2:5f:f4:78:17:7e:dc:40:
                    a3:65:55:ed:d4:bd:93:aa:6e:37:b6:1d:9a:e8:d5:
                    2a:6e:39:fc:91:32:1d:f5:b4:77:c5:25:67:ae:2e:
                    d3:ce:fa:bf:af:dc:fc:7e:2f:a8:b6:1d:d5:64:8a:
                    fe:27:49:db:af:6f:b7:14:bd:4c:43:e3:bc:3b:b3:
                    53:90:ee:8e:14:57:f9:01:3b:1a:78:a8:69:b8:77:
                    94:84:bc:40:53:23:04:9f:e6:64:ce:45:2f:92:15:
                    6b:4b:05:fc:df:62:e5:ac:00:92:27:4b:09:6c:0d:
                    c8:a5:20:9f:20:71:c0:56:e4:41:43:85:ef:22:12:
                    09:6b:24:15:39:ef:83:19:51:48:c5:00:b7:26:47:
                    3b:48:28:73:0d:07:36:3b:02:e4:d4:27:3c:7c:04:
                    8c:ef:43:bc:b7:a5:28:24:66:fe:0d:4c:19:d0:13:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:64:04:98:6A:F7:AA:9B:F2:D1:FE:B7:AF:4D:80:C1:DD:F9:90:A4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144278.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a65c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:03:75:e2:49:c4:5e:5c:00:5d:22:b1:b8:70:ef:e3:62:7f:
         e7:59:52:fb:c3:5d:37:a1:2d:78:48:b6:4b:4a:39:17:30:98:
         e1:6a:27:c0:77:c1:9a:37:c5:44:a0:a4:4e:db:17:9b:59:94:
         cf:ce:40:6e:99:a0:8c:08:87:37:9c:c3:a1:82:5e:5d:64:44:
         27:07:2e:ec:0a:c9:26:8a:39:cf:db:0b:9b:97:71:d5:5d:a0:
         5e:0f:78:61:7e:55:10:3a:7d:5b:36:06:ed:12:80:0f:3e:e0:
         d0:99:7b:d4:c4:9b:e9:99:96:64:02:8c:1a:2b:c6:a0:45:1f:
         a7:8a:75:e1:ed:ca:b6:f3:ad:b0:17:06:12:d7:72:b2:dc:d3:
         41:73:93:a4:03:2e:d9:5d:e5:10:6a:ca:72:b7:fa:69:18:a0:
         db:12:fa:e8:46:0f:3f:98:6e:3d:3c:cc:b1:3d:22:0a:e0:a5:
         87:26:8d:f8:65:88:d1:d6:49:38:46:5e:3f:74:4e:89:86:a3:
         7e:e0:a1:2c:c5:46:6c:ad:9a:30:42:ce:87:bd:4b:bf:c9:a3:
         db:01:0b:8e:a5:42:6d:15:bb:b0:c2:b0:63:4b:df:4c:ea:d9:
         16:84:d9:7e:be:32:94:7b:5a:dd:5a:6e:2a:e1:23:c5:03:83:
         a3:fb:54:04
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUe5n6PlrX/xTXdKCeM5QL+/rqL20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExMzlaFw0yNzA1MjUwMzE2MzlaMDMxMTAvBgNV
BAMTKEM2NjQwNDk4NkFGN0FBOUJGMkQxRkVCN0FGNEQ4MEMxRERGOTkwQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2YNSulyVA7PJC2m1hAIT9Hy1F
h+JAOQakcLwyyXuoWizB6m8CchDIybluxyyJU073BU75NlKedz+VIEZ9NlStj0C3
npL3antyWRVPiV/a40nSX/R4F37cQKNlVe3UvZOqbje2HZro1SpuOfyRMh31tHfF
JWeuLtPO+r+v3Px+L6i2HdVkiv4nSduvb7cUvUxD47w7s1OQ7o4UV/kBOxp4qGm4
d5SEvEBTIwSf5mTORS+SFWtLBfzfYuWsAJInSwlsDcilIJ8gccBW5EFDhe8iEglr
JBU574MZUUjFALcmRztIKHMNBzY7AuTUJzx8BIzvQ7y3pSgkZv4NTBnQEwY7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUxmQEmGr3qpvy0f63r02Awd35kKQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0Mjc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmXDANBgkqhkiG9w0BAQsFAAOCAQEATAN1
4knEXlwAXSKxuHDv42J/51lS+8NdN6EteEi2S0o5FzCY4WonwHfBmjfFRKCkTtsX
m1mUz85AbpmgjAiHN5zDoYJeXWREJwcu7ArJJoo5z9sLm5dx1V2gXg94YX5VEDp9
WzYG7RKADz7g0Jl71MSb6ZmWZAKMGivGoEUfp4p14e3KtvOtsBcGEtdystzTQXOT
pAMu2V3lEGrKcrf6aRig2xL66EYPP5huPTzMsT0iCuClhyaN+GWI0dZJOEZeP3RO
iYajfuChLMVGbK2aMELOh71Lv8mj2wELjqVCbRW7sMKwY0vfTOrZFoTZfr4ylHta
3VpuKuEjxQODo/tUBA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:28 2026 by rpki-client