Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144313.roa
File:                     AS144313.roa (raw, json)
Hash identifier:          V0IBkiJ5o88eiX8YpzIZD4pdhT5rvdIYV2U/40ISEG8=
Subject key identifier:   A9:5F:BA:F0:4E:C4:6F:53:FE:1F:0D:EC:2F:74:65:E5:FB:11:9F:9E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       45A56776ADCC89C645ED8CBF3D94EBD4A43FE8E6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144313.roa
Signing time:             Tue 26 May 2026 06:12:38 +0000
ROA not before:           Tue 26 May 2026 06:07:38 +0000
ROA not after:            Tue 25 May 2027 06:12:38 +0000
asID:                     144313
IP address blocks:        240a:a67f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a5:67:76:ad:cc:89:c6:45:ed:8c:bf:3d:94:eb:d4:a4:3f:e8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:38 2026 GMT
            Not After : May 25 06:12:38 2027 GMT
        Subject: CN=A95FBAF04EC46F53FE1F0DEC2F7465E5FB119F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:b7:b7:0c:8a:03:57:9e:ca:fa:52:93:05:
                    d5:2b:7d:26:9b:0d:5e:a7:7f:6b:de:04:a8:80:74:
                    e3:ee:66:22:cc:1c:22:bd:76:1c:b7:d2:8b:29:8e:
                    07:63:a1:e2:07:6e:ef:31:d2:8b:2f:ea:eb:45:a7:
                    b3:c3:d0:3d:34:8a:dc:b2:65:8c:31:31:ce:44:d7:
                    a6:14:2c:cc:c9:84:c6:39:f6:29:16:a7:da:48:f4:
                    7f:08:af:3b:9a:31:18:7d:62:31:23:d2:dc:9a:59:
                    dc:57:7b:95:9e:1e:68:7e:d6:37:67:46:be:e0:2d:
                    63:34:74:89:be:aa:cb:c9:2b:37:1c:a1:1d:f7:73:
                    ca:d9:58:71:1a:df:eb:69:d3:dc:72:18:94:6f:a2:
                    0c:ab:19:a3:a4:32:9b:38:f4:e7:36:a9:b4:63:54:
                    b5:00:45:e8:39:91:1f:0a:cd:ad:2e:b1:73:ea:03:
                    22:81:ec:eb:df:1a:82:fd:89:79:22:d5:e3:dd:4d:
                    a5:07:3d:67:db:87:c7:1b:6d:cb:fe:14:6f:25:ff:
                    24:e0:3c:e7:88:11:82:14:e0:19:4d:ea:63:1e:96:
                    dc:0a:48:4c:2e:c4:2a:16:a0:af:3e:a0:40:18:7a:
                    93:e2:48:e7:6b:b1:34:09:fc:a7:ba:e0:e0:71:ca:
                    d8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5F:BA:F0:4E:C4:6F:53:FE:1F:0D:EC:2F:74:65:E5:FB:11:9F:9E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144313.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a67f::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:14:20:e3:f5:99:c2:c1:4b:9b:c2:37:dd:50:41:b1:65:99:
         c3:4c:36:ba:bb:23:37:e2:9c:c9:56:09:c5:aa:59:fc:41:46:
         df:35:55:88:9a:8a:91:af:e6:be:5a:38:84:04:ad:08:44:82:
         a3:12:ed:e1:1a:65:9a:89:21:61:9f:3d:7d:69:b5:b6:b5:61:
         c5:b0:3e:be:ac:a4:6b:06:74:64:a0:76:7c:fc:0e:9b:27:53:
         54:cc:47:be:cb:3a:22:49:50:e5:ec:66:5c:cc:9e:88:b3:19:
         da:f9:0c:f6:70:49:41:d5:36:43:ad:23:c4:21:89:40:f2:61:
         93:4e:a1:b9:cb:a2:5a:50:e5:56:d1:3a:e8:f7:7a:01:cf:71:
         49:c4:11:25:25:c9:68:b8:52:31:2a:b2:4d:6b:40:8b:71:80:
         72:8a:ac:68:0a:db:bd:0b:a6:62:d6:b0:ed:da:22:db:f4:d9:
         65:11:e5:67:0d:bc:e7:4b:df:b3:fd:a6:6e:3a:3f:bd:e7:1e:
         61:b9:56:3b:e7:e4:c0:82:01:d1:a9:b7:ef:30:b8:da:15:8f:
         8e:86:f1:4a:32:3b:7c:d4:d4:d8:6c:eb:a6:65:6e:03:d6:96:
         49:a4:c2:63:a8:34:d1:34:fd:ae:cd:e3:ad:3c:f6:e3:85:6e:
         8b:8c:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:37 2026 by rpki-client