Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144287.roa
File:                     AS144287.roa (raw, json)
Hash identifier:          BTqdeZcUCfmmHTHZQdFHcQm0PXYFiEPy8CpmLBXkNRE=
Subject key identifier:   15:0D:1E:93:BA:69:BE:66:36:B6:D2:66:0E:C6:B4:0A:2C:C1:C4:D4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       45E8DFC082030DC2D172D418E5AE61BB7FF9C629
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144287.roa
Signing time:             Fri 22 May 2026 07:24:33 +0000
ROA not before:           Fri 22 May 2026 07:19:33 +0000
ROA not after:            Fri 21 May 2027 07:24:33 +0000
asID:                     144287
IP address blocks:        240a:a665::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e8:df:c0:82:03:0d:c2:d1:72:d4:18:e5:ae:61:bb:7f:f9:c6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:33 2026 GMT
            Not After : May 21 07:24:33 2027 GMT
        Subject: CN=150D1E93BA69BE6636B6D2660EC6B40A2CC1C4D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:aa:0b:81:ed:c6:07:62:01:bd:e5:3b:dc:
                    2d:a3:3b:f6:ab:ab:f0:d9:46:ec:27:d0:08:0c:58:
                    7b:02:91:a8:c0:26:af:df:b0:d4:42:94:07:bd:49:
                    be:e6:ae:5d:b8:53:69:30:81:97:41:09:cc:e2:cf:
                    7f:bf:23:f0:58:f4:ef:bf:ec:a7:ed:21:cb:d2:68:
                    ad:38:9e:69:7c:a9:8e:5b:d2:54:fd:85:15:37:11:
                    00:af:c3:2e:e5:cf:1c:95:32:0f:30:0e:9a:83:90:
                    da:3c:82:c2:02:43:47:67:3c:08:57:91:c9:89:0e:
                    31:3a:06:64:06:66:ce:2b:45:25:75:87:8e:76:2d:
                    98:0d:fb:fe:0a:12:0d:85:a1:b1:c7:a9:32:d1:97:
                    64:11:de:cb:4e:3a:94:7a:cb:ec:e6:78:1a:7c:62:
                    19:5e:10:e6:18:59:34:b5:53:c5:39:18:b2:0c:39:
                    bf:cd:81:17:07:04:fa:8f:79:cb:3a:09:4d:d6:44:
                    16:9d:db:11:4a:1d:3b:a5:b5:89:fb:6e:db:ca:0c:
                    a7:17:e3:59:2d:08:23:3d:d2:75:1f:17:bc:2f:8d:
                    02:e4:6e:97:92:7a:a8:29:ed:1e:57:a9:ab:7b:19:
                    7c:da:02:07:ef:9b:38:ad:38:ef:1a:a1:fe:93:db:
                    50:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0D:1E:93:BA:69:BE:66:36:B6:D2:66:0E:C6:B4:0A:2C:C1:C4:D4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a665::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:4c:38:eb:13:09:97:14:0f:80:16:fb:6a:eb:be:96:03:b1:
         92:3f:5b:64:10:9d:ad:2b:e5:b8:5e:fa:49:56:fd:2e:1c:52:
         d8:d6:d6:96:bf:20:97:dc:de:da:0a:66:f1:02:b5:70:8a:a9:
         dc:56:1f:cf:9d:15:05:80:b7:c7:95:a5:ef:e0:e4:08:23:10:
         78:31:1b:b1:5a:2c:42:ba:41:d6:16:ef:0d:c0:93:56:a7:47:
         51:fd:58:7a:c6:e3:0a:86:5e:9d:28:aa:c8:34:26:54:88:34:
         1a:86:ac:c5:e4:2a:3b:4c:d3:3d:f2:51:8f:71:97:cd:e6:51:
         23:ae:df:33:85:67:57:14:6c:d5:f5:1c:e2:54:37:8e:8d:54:
         cb:d2:8e:61:5a:e5:17:fe:fb:88:b5:ab:5a:7e:f8:3f:df:3e:
         e5:33:32:37:e7:6c:f9:40:2e:94:b5:1f:9b:99:2a:fc:4e:9b:
         06:f4:ef:29:0c:08:0d:cf:de:ae:8f:cb:a8:a7:bd:48:cd:e6:
         d5:9d:fe:e4:04:ac:e9:d4:be:3e:14:4f:86:f3:b1:2e:60:8b:
         2a:c2:27:bb:47:5a:8d:67:66:90:c8:7c:ec:a9:f6:11:b0:87:
         12:e9:9a:27:5b:7a:f5:2d:5d:97:6d:27:06:b7:b2:2e:10:bb:
         c0:8d:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:51 2026 by rpki-client