Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144315.roa
File:                     AS144315.roa (raw, json)
Hash identifier:          T3VXAcq8CWfGCpOBkjaaDoz9dYJAzySOtaEh9nARHOc=
Subject key identifier:   0B:85:BF:CA:5A:C4:90:EA:5C:8A:36:4A:59:BA:54:2C:9B:42:A1:13
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0BA563BFDBAA80E519105880DD67D0FF79B561B2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144315.roa
Signing time:             Mon 25 May 2026 01:51:11 +0000
ROA not before:           Mon 25 May 2026 01:46:11 +0000
ROA not after:            Mon 24 May 2027 01:51:11 +0000
asID:                     144315
IP address blocks:        240a:a681::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a5:63:bf:db:aa:80:e5:19:10:58:80:dd:67:d0:ff:79:b5:61:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:11 2026 GMT
            Not After : May 24 01:51:11 2027 GMT
        Subject: CN=0B85BFCA5AC490EA5C8A364A59BA542C9B42A113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:eb:91:84:fc:3c:68:f8:c8:06:5f:01:0e:7f:
                    00:80:bc:9f:d5:b9:d4:c1:25:01:36:92:ab:81:48:
                    8e:61:87:df:ca:b3:1d:6c:aa:65:ae:a2:31:c5:20:
                    8f:c8:57:4c:62:45:b6:26:ff:99:cb:2e:66:64:11:
                    a3:b5:7b:43:d8:07:dc:a9:98:06:51:41:f0:56:83:
                    ae:5c:d5:cc:d9:22:94:c1:a8:6c:ca:f9:eb:3f:78:
                    75:71:5e:69:18:0d:13:8e:91:c9:7c:29:8f:7c:a1:
                    7b:26:9d:dd:16:4c:55:75:41:4f:a7:16:d5:36:a9:
                    97:e0:75:f9:68:23:35:25:0d:d2:4a:18:9a:bf:a5:
                    fa:04:b5:f6:a4:85:73:43:c2:67:1c:b1:cd:bc:73:
                    69:57:5d:6c:30:78:cd:97:ac:cf:32:74:8f:24:3e:
                    5e:08:47:76:ab:c1:63:53:6f:4c:66:3d:d8:bb:8a:
                    0e:7c:ed:df:81:c4:38:e5:9b:d0:37:24:1d:4f:67:
                    e6:d9:8e:66:d1:b7:11:97:54:c9:6c:55:43:06:c2:
                    a3:28:b3:72:35:a8:ad:b2:ec:bc:0a:d0:06:19:f4:
                    fc:6a:55:54:ff:77:32:a1:e9:f6:7a:3f:98:64:5a:
                    d9:0a:e6:c1:73:da:6d:b5:51:d7:3f:1a:d1:30:d8:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:85:BF:CA:5A:C4:90:EA:5C:8A:36:4A:59:BA:54:2C:9B:42:A1:13
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a681::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:f1:c5:74:15:e9:26:0c:0d:05:0c:ce:85:29:cc:d3:20:cf:
         12:56:bd:07:e1:3b:22:e2:83:fb:65:42:21:4a:94:ec:05:02:
         a6:fd:63:f3:37:50:0e:34:57:7f:f8:35:fa:a6:47:68:d0:dd:
         74:12:c1:12:65:17:b9:31:5a:ba:82:31:00:96:84:1c:4b:81:
         27:4d:fa:f7:2b:72:7b:5c:d8:4d:43:b6:54:51:92:ef:ac:bf:
         ae:d2:11:78:02:4a:5e:8e:0e:38:70:bc:33:e0:b0:9f:c9:09:
         21:35:09:b1:aa:47:2b:62:91:32:95:49:ff:63:fc:0c:ef:a5:
         d4:ab:d0:fd:8e:b4:bb:6b:bc:b7:82:80:f5:d8:4e:ba:37:00:
         05:ce:7c:4c:22:10:7f:a8:e9:17:bc:f3:b7:59:2a:e9:f6:54:
         d6:57:20:3e:c5:08:da:58:3d:56:e4:e7:45:93:27:78:f5:e6:
         fd:79:cb:4a:dc:d0:4b:a1:5f:bc:43:70:d0:1b:0e:fe:2b:88:
         fa:8e:62:59:0e:b1:15:96:47:7e:3f:04:f9:53:f9:37:53:27:
         d5:b1:cc:a0:d3:e3:54:35:66:33:35:dd:8a:5f:13:21:f7:ab:
         ce:0c:f9:32:ac:00:fd:8f:a1:1b:33:b4:e4:ba:3f:16:ef:ab:
         82:7e:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:49 2026 by rpki-client