Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144281.roa
File:                     AS144281.roa (raw, json)
Hash identifier:          ukKp8jEF1csHgX/U1Dow5xSSxNW4lAMNl7BQWVvathY=
Subject key identifier:   E7:FD:DE:C3:A2:D8:7F:82:01:15:1A:75:83:97:D5:DF:EA:81:A9:54
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       36B8E6EE869A12BCCAB394CCCDF52C72A0C5E446
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144281.roa
Signing time:             Fri 22 May 2026 04:27:06 +0000
ROA not before:           Fri 22 May 2026 04:22:06 +0000
ROA not after:            Fri 21 May 2027 04:27:06 +0000
asID:                     144281
IP address blocks:        240a:a65f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b8:e6:ee:86:9a:12:bc:ca:b3:94:cc:cd:f5:2c:72:a0:c5:e4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:22:06 2026 GMT
            Not After : May 21 04:27:06 2027 GMT
        Subject: CN=E7FDDEC3A2D87F8201151A758397D5DFEA81A954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:f6:c4:b7:67:5e:58:4f:a5:74:c4:e9:de:
                    41:92:79:95:e7:ee:f6:45:71:77:f8:22:b8:c5:bc:
                    bb:b9:e9:7a:5c:5d:c6:0d:d1:d1:1e:26:10:f1:b5:
                    2c:14:de:15:dc:18:52:f8:b4:91:58:bf:65:83:96:
                    bb:f3:56:8e:1f:37:32:26:65:e9:9f:1b:68:d5:fa:
                    99:7d:86:ca:89:60:36:b9:a4:09:35:a2:62:04:11:
                    da:b1:44:b6:c1:a5:b3:bf:07:c9:b9:34:3e:02:6f:
                    41:e3:2c:22:1e:cf:8e:74:a1:6c:be:7c:73:ed:69:
                    b0:b1:a3:d2:03:1d:2f:8a:d3:9f:d0:38:42:e8:9a:
                    2a:99:a4:4d:42:6f:29:e7:db:7b:f1:fb:9f:88:97:
                    b0:16:4a:e2:ec:86:08:dc:9f:b3:c5:e3:fe:e8:dc:
                    f6:91:9d:ab:f9:b1:05:7a:db:d5:b6:c5:dc:b3:20:
                    65:f1:e0:e2:78:f3:98:e7:9d:76:e2:a7:ac:7e:40:
                    32:15:05:32:55:18:14:76:9d:8b:ea:87:69:79:62:
                    b0:14:52:87:df:63:7d:b9:50:92:ed:98:9b:e8:77:
                    ac:cc:e6:11:01:37:11:5a:94:ab:eb:70:e2:87:a3:
                    c7:6b:bd:b6:dd:83:ed:4e:19:4d:be:bb:27:66:b4:
                    fe:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FD:DE:C3:A2:D8:7F:82:01:15:1A:75:83:97:D5:DF:EA:81:A9:54
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144281.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a65f::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:2e:ec:5f:78:54:89:15:bf:3a:6f:af:55:bb:30:52:a6:80:
         58:19:ad:76:98:cf:24:f8:19:0c:bd:af:80:65:6c:89:dc:3f:
         44:5e:0c:c0:3b:59:24:b9:e4:b8:6e:ca:f2:4c:81:b9:9b:f4:
         1c:ad:61:f1:70:03:aa:a9:f5:90:a7:a7:d8:6f:39:cc:fc:fe:
         2e:a1:14:cc:61:07:1d:e6:68:1a:08:7c:cd:4b:24:70:d7:8b:
         3d:91:de:c2:23:a8:9b:bb:ff:99:02:89:2e:dc:6d:a8:8a:a7:
         9f:a0:7e:6a:df:19:4f:57:26:c4:6d:aa:4b:83:6b:7c:df:65:
         51:50:22:ea:20:d7:47:4c:23:41:21:87:a1:13:0a:cd:bb:d1:
         ab:09:02:12:48:ba:72:0a:2e:f7:39:d3:28:e8:62:ba:75:48:
         28:77:c0:a6:38:da:48:fb:1c:a7:76:16:c9:00:64:36:fa:2a:
         cc:3c:81:95:09:e6:60:9e:ce:d7:75:8d:03:1a:88:bd:34:e6:
         ef:a1:1d:31:bf:4c:3d:b8:5a:59:a4:86:84:62:e5:b5:c2:4b:
         bb:24:f6:4b:31:ed:3e:35:5a:f9:40:47:6c:12:e2:f2:fa:bd:
         04:b5:e3:09:38:38:bd:df:25:3e:05:4e:39:8d:3c:29:38:27:
         34:4b:e7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:35 2026 by rpki-client