Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144326.roa
File:                     AS144326.roa (raw, json)
Hash identifier:          p+7kGeHQWLetPjfpVSTSmsU2gNP5PmPEqiXAUyCRAn8=
Subject key identifier:   76:38:43:D0:93:2D:7C:21:40:23:97:FC:CE:ED:F8:F3:67:92:13:01
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       2C8797C6ECA60DD1B5F23E1005C58D9822E9663C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144326.roa
Signing time:             Fri 22 May 2026 06:58:18 +0000
ROA not before:           Fri 22 May 2026 06:53:18 +0000
ROA not after:            Fri 21 May 2027 06:58:18 +0000
asID:                     144326
IP address blocks:        240a:a68c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:87:97:c6:ec:a6:0d:d1:b5:f2:3e:10:05:c5:8d:98:22:e9:66:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:18 2026 GMT
            Not After : May 21 06:58:18 2027 GMT
        Subject: CN=763843D0932D7C21402397FCCEEDF8F367921301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2b:4d:be:dc:b8:35:f8:df:4c:fd:c0:4b:37:
                    87:b3:41:54:f9:5e:d5:84:60:0b:3f:1d:2b:73:c1:
                    47:ff:f0:0c:fa:0b:51:10:23:cb:08:a3:8e:4b:96:
                    fb:06:9a:b0:eb:20:2a:82:60:54:56:c0:93:05:38:
                    ae:69:4f:40:a2:0e:39:66:24:6a:c7:6b:d4:fe:2c:
                    cf:b3:ff:58:cf:4c:77:ae:41:18:82:cf:0b:e4:f4:
                    38:d7:a3:6e:49:70:f0:ee:9e:cb:50:17:01:61:3a:
                    46:b7:ac:61:7d:10:78:8e:44:16:02:64:f5:16:6b:
                    47:d4:97:0e:ce:21:0c:39:7a:5d:ab:d2:97:7f:bc:
                    9f:f2:44:b1:3d:91:fe:72:2c:c3:62:0a:b2:c8:50:
                    cb:d1:0e:ee:3e:f3:42:b7:c5:1f:fc:10:bf:c3:78:
                    3f:1e:ed:ec:d0:36:3e:a5:52:92:d3:fb:a2:ee:9a:
                    76:29:28:9c:2a:63:60:8e:3e:7a:80:02:cf:f7:d3:
                    6d:48:5f:bd:cd:64:a8:12:c7:0c:19:b5:cc:ca:2b:
                    54:6b:92:4a:98:72:35:aa:1d:13:2e:56:36:68:5d:
                    19:45:b9:2f:07:fd:ed:45:49:6a:5f:e1:ec:1b:4c:
                    a4:a7:da:13:70:bc:5d:45:7a:a1:a9:ee:a1:fe:55:
                    73:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:38:43:D0:93:2D:7C:21:40:23:97:FC:CE:ED:F8:F3:67:92:13:01
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144326.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a68c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:e0:43:fb:b9:03:ed:3a:05:62:dd:b0:b1:8a:7a:f1:8b:5b:
         3c:c4:f0:ee:b6:8f:a5:81:7d:b6:af:b4:a9:9f:af:5c:2f:0e:
         4e:0e:d4:a6:ca:23:25:9c:9f:50:d5:87:67:67:94:77:c4:a7:
         97:06:8e:29:8c:08:42:75:0d:f9:89:a9:8a:db:7f:ba:92:6f:
         95:eb:8d:fc:b4:73:23:0f:f1:e7:c5:8a:b8:66:3b:89:04:fd:
         4e:62:73:3b:16:25:1c:22:40:b9:f9:9f:93:a0:55:f3:a3:9f:
         5a:59:af:e0:18:ac:5f:c0:bc:e6:a0:97:e9:ce:58:22:a1:db:
         b6:ec:6c:60:1b:5f:06:37:70:4b:d7:86:42:0c:97:82:52:09:
         88:53:58:c6:7e:2f:ba:50:71:7c:9d:1e:1c:85:bb:54:83:8d:
         db:85:6f:b0:d4:e4:7a:5b:80:e3:ac:fd:46:9f:ef:5f:1f:e2:
         1c:9a:d1:f1:ec:76:ca:05:8a:93:77:3c:0a:19:19:f4:b0:66:
         62:c9:fc:02:9b:ce:eb:0f:b4:fd:30:28:cd:3d:21:bb:92:f0:
         da:11:02:9f:ee:dc:7c:99:d1:7d:09:83:e9:14:cd:90:95:11:
         14:41:c9:00:4a:ff:08:a8:3e:00:c6:25:fa:ca:9b:12:0a:a7:
         4a:85:12:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:22 2026 by rpki-client