Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144336.roa
File:                     AS144336.roa (raw, json)
Hash identifier:          RnPxobHisJsE9H4jRU0Ewo0qRaAKy5kCD92BrcDUYZQ=
Subject key identifier:   EC:14:2F:37:E5:F4:40:6E:C7:31:28:BD:FE:8F:E0:34:6C:D7:C1:00
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       15016D72A3925C7D0DC942D4E06C2F278590481D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144336.roa
Signing time:             Mon 25 May 2026 01:51:22 +0000
ROA not before:           Mon 25 May 2026 01:46:22 +0000
ROA not after:            Mon 24 May 2027 01:51:22 +0000
asID:                     144336
IP address blocks:        240a:a696::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:01:6d:72:a3:92:5c:7d:0d:c9:42:d4:e0:6c:2f:27:85:90:48:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:22 2026 GMT
            Not After : May 24 01:51:22 2027 GMT
        Subject: CN=EC142F37E5F4406EC73128BDFE8FE0346CD7C100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:06:21:75:31:09:49:4f:1a:fc:fc:65:ed:
                    93:81:5b:23:83:ec:9c:ac:b7:84:8e:94:85:73:52:
                    1e:f5:cd:dd:b1:33:cd:08:bb:b3:b7:b0:ad:71:31:
                    8f:fc:b9:6f:01:fe:99:81:20:f5:ca:7a:9a:be:e2:
                    1d:0f:4b:6d:79:55:a3:7e:1c:b3:d3:7f:ac:a4:db:
                    75:9b:be:d4:08:21:b4:5d:a0:d2:a1:92:e3:ac:57:
                    48:35:82:fb:5f:de:7b:bf:03:e0:b6:4b:97:82:30:
                    eb:4b:8f:df:eb:58:5f:12:9b:5b:b5:f5:a3:e2:95:
                    f3:84:bd:2a:52:8c:48:72:19:30:0e:cb:67:22:57:
                    c2:d2:72:74:38:3e:df:78:6b:f5:ae:be:8d:22:52:
                    ee:35:fd:62:40:bb:c9:cd:63:7d:3c:5a:32:4a:f3:
                    0c:ff:d5:b2:20:c7:df:0f:dd:a7:29:46:49:6f:44:
                    fb:5c:99:8b:76:e4:15:22:87:c7:bd:c9:93:f8:28:
                    f7:8c:f2:f5:ee:76:41:3f:e3:d4:b3:5a:d1:48:c0:
                    e8:63:96:b7:a5:2a:d1:6f:f7:f1:63:a0:34:48:d6:
                    a5:66:9d:6f:59:e3:6c:ac:71:b5:54:54:36:20:e1:
                    d1:97:d0:f7:79:05:c5:26:99:e7:0e:db:ee:cf:2b:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:14:2F:37:E5:F4:40:6E:C7:31:28:BD:FE:8F:E0:34:6C:D7:C1:00
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a696::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:f5:09:f3:6e:e1:70:26:80:ea:b5:09:74:ad:7d:7e:fb:
         55:d2:c2:c9:7b:ed:8a:7e:a8:9f:9c:95:39:b9:b7:47:a4:d6:
         3c:17:43:26:88:7d:10:17:61:a3:32:e0:d8:9a:1d:c1:92:68:
         23:a0:92:22:4e:61:7e:6c:1e:03:fb:35:b0:e1:17:d4:d8:f8:
         c9:70:18:b9:3f:e6:e2:a6:98:f6:1e:d5:8d:80:99:1c:3e:b2:
         ed:55:a3:7e:5c:0a:b0:15:95:b6:7f:33:5e:73:f0:fe:13:26:
         a2:37:f4:dc:83:70:04:25:15:91:76:33:dc:98:35:f1:2f:cd:
         cc:af:66:8c:1b:68:c0:66:09:88:f4:2c:9b:2a:a7:58:19:61:
         6d:06:e7:1d:df:cf:71:12:3a:9f:92:eb:a9:83:29:c8:80:87:
         1e:f8:75:c8:ef:4b:bd:b6:82:54:65:3a:70:06:70:da:b9:a8:
         b6:a4:d7:77:91:70:b7:9f:eb:d8:b7:d4:c9:e9:44:7c:59:12:
         b4:74:c6:2a:6b:17:64:ef:cc:19:27:14:ae:db:8e:fa:1c:63:
         45:63:92:00:83:e8:4a:1c:9f:57:f0:25:ae:86:9a:e7:bf:68:
         10:cb:f6:ff:b7:50:2d:2a:d9:4e:8a:7d:09:3c:04:d5:7a:6b:
         b0:ec:ff:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:51 2026 by rpki-client