Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144308.roa
File:                     AS144308.roa (raw, json)
Hash identifier:          2T8RgGrXpnnA/zoPohy7MVC6eLJO36wnm8AMPrRuZNc=
Subject key identifier:   62:EE:3E:5F:B1:7A:52:2F:4C:E0:F3:B8:61:47:06:C8:5C:D3:C4:B4
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       67EABFAD0B61EFBDAF929F89D0C0C30D2C86DE26
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144308.roa
Signing time:             Fri 22 May 2026 06:58:34 +0000
ROA not before:           Fri 22 May 2026 06:53:34 +0000
ROA not after:            Fri 21 May 2027 06:58:34 +0000
asID:                     144308
IP address blocks:        240a:a67a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ea:bf:ad:0b:61:ef:bd:af:92:9f:89:d0:c0:c3:0d:2c:86:de:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:34 2026 GMT
            Not After : May 21 06:58:34 2027 GMT
        Subject: CN=62EE3E5FB17A522F4CE0F3B8614706C85CD3C4B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:a3:c0:4c:67:44:54:f0:02:0f:c4:7f:b8:
                    58:9c:e7:a6:1b:e0:15:c7:e7:ea:08:1e:3f:60:2f:
                    39:39:b6:75:53:34:68:34:2a:b8:3d:f9:35:a2:fa:
                    17:9c:f9:29:e1:56:41:2d:ec:59:8e:94:1f:7c:b4:
                    c0:f9:12:dc:e8:e8:df:17:0d:54:e7:85:d3:5c:90:
                    b7:b6:c2:b3:f1:af:c6:3a:84:bc:64:ef:43:f0:df:
                    a1:59:85:f6:44:5a:c1:5c:67:3f:19:86:75:6a:51:
                    57:0a:1e:4c:1f:4f:5d:af:7e:37:be:55:d8:b0:9c:
                    38:fd:08:bf:9f:a4:18:08:9c:8b:0b:56:36:34:f7:
                    75:f3:02:eb:d2:5a:be:82:85:a4:85:3f:20:f4:17:
                    7e:b2:48:2f:96:1e:3e:a2:0a:bd:2b:72:46:7f:f7:
                    57:c0:32:56:cb:94:e3:c1:f9:24:2c:8a:18:64:b1:
                    c1:91:29:0e:de:27:c4:94:24:aa:7e:41:cb:8e:a8:
                    95:e0:12:5a:37:34:1e:11:0d:88:0c:20:ec:ad:c4:
                    f1:23:c7:50:70:1b:99:91:8e:99:8e:ff:88:27:b8:
                    2b:b8:93:dd:e5:1c:51:94:a9:9e:b0:9e:83:a2:3c:
                    dd:50:6b:79:5e:b5:11:93:bb:e3:0e:36:67:09:f4:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EE:3E:5F:B1:7A:52:2F:4C:E0:F3:B8:61:47:06:C8:5C:D3:C4:B4
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144308.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a67a::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:f6:be:30:f1:1d:86:78:b6:97:92:d0:c6:a5:5a:97:04:48:
         6d:e4:f5:b6:aa:e9:d2:d4:98:28:33:98:4e:5e:b7:4b:1b:d2:
         6c:8e:0f:01:6b:1a:29:89:ec:d2:87:ab:37:f1:fc:a1:02:3e:
         e1:f3:d9:e5:a8:34:f2:2d:14:59:8e:a2:79:7b:ef:c5:af:bc:
         ad:b7:98:55:24:4c:de:0a:65:18:ab:e7:6f:f8:d1:cd:8a:66:
         a5:64:63:13:f4:d3:26:af:50:c9:30:17:4d:2b:ad:09:8d:6b:
         ce:fa:21:b6:80:bf:dc:19:a3:69:b3:7a:86:24:8e:07:ba:00:
         7a:e6:04:ad:f9:67:aa:39:b9:eb:25:71:e0:ff:fc:9f:5a:ee:
         83:e1:3c:65:f2:8e:64:a9:96:f8:de:63:88:9d:3d:43:98:3b:
         f2:46:3e:84:2e:6f:ad:a7:eb:fe:84:e9:b1:e0:69:a1:90:e6:
         3a:63:a2:e8:01:92:93:84:62:e9:10:ae:0e:25:b7:ff:2f:eb:
         a0:2a:89:b6:95:d2:f8:7a:7f:93:32:8a:d0:31:80:9d:64:b8:
         74:75:92:0a:43:f2:e2:45:4f:0f:08:c4:83:c2:23:f5:e3:77:
         e0:f8:e6:b1:77:ca:ca:60:62:98:aa:54:a9:93:28:a0:2b:a9:
         ed:13:02:aa
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZ+q/rQth772vkp+J0MDDDSyG3iYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMzRaFw0yNzA1MjEwNjU4MzRaMDMxMTAvBgNV
BAMTKDYyRUUzRTVGQjE3QTUyMkY0Q0UwRjNCODYxNDcwNkM4NUNEM0M0QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBaPATGdEVPACD8R/uFic56Yb
4BXH5+oIHj9gLzk5tnVTNGg0Krg9+TWi+hec+SnhVkEt7FmOlB98tMD5Etzo6N8X
DVTnhdNckLe2wrPxr8Y6hLxk70Pw36FZhfZEWsFcZz8ZhnVqUVcKHkwfT12vfje+
VdiwnDj9CL+fpBgInIsLVjY093XzAuvSWr6ChaSFPyD0F36ySC+WHj6iCr0rckZ/
91fAMlbLlOPB+SQsihhkscGRKQ7eJ8SUJKp+QcuOqJXgElo3NB4RDYgMIOytxPEj
x1BwG5mRjpmO/4gnuCu4k93lHFGUqZ6wnoOiPN1Qa3letRGTu+MONmcJ9Ib/AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUYu4+X7F6Ui9M4PO4YUcGyFzTxLQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzA4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmejANBgkqhkiG9w0BAQsFAAOCAQEAPPa+
MPEdhni2l5LQxqValwRIbeT1tqrp0tSYKDOYTl63SxvSbI4PAWsaKYns0oerN/H8
oQI+4fPZ5ag08i0UWY6ieXvvxa+8rbeYVSRM3gplGKvnb/jRzYpmpWRjE/TTJq9Q
yTAXTSutCY1rzvohtoC/3BmjabN6hiSOB7oAeuYErflnqjm56yVx4P/8n1rug+E8
ZfKOZKmW+N5jiJ09Q5g78kY+hC5vrafr/oTpseBpoZDmOmOi6AGSk4Ri6RCuDiW3
/y/roCqJtpXS+Hp/kzKK0DGAnWS4dHWSCkPy4kVPDwjEg8Ij9eN34PjmsXfKymBi
mKpUqZMooCup7RMCqg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:23 2026 by rpki-client