Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144344.roa
File:                     AS144344.roa (raw, json)
Hash identifier:          rx+6p/3GLRg5iPu8lvs0C3VrExhnq5irxe674J+XTYM=
Subject key identifier:   5E:63:0C:4D:3F:ED:FF:A7:6C:C4:08:D1:F3:FC:58:23:CE:99:2C:6B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4BDD6A7F57168FA6AA19D603EA153FDE46DF55FA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144344.roa
Signing time:             Fri 22 May 2026 07:40:59 +0000
ROA not before:           Fri 22 May 2026 07:35:59 +0000
ROA not after:            Fri 21 May 2027 07:40:59 +0000
asID:                     144344
IP address blocks:        240a:a69e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:dd:6a:7f:57:16:8f:a6:aa:19:d6:03:ea:15:3f:de:46:df:55:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:59 2026 GMT
            Not After : May 21 07:40:59 2027 GMT
        Subject: CN=5E630C4D3FEDFFA76CC408D1F3FC5823CE992C6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:1b:15:5d:65:82:25:68:77:52:83:1d:b0:
                    d8:ea:88:de:a2:d9:48:25:5c:45:51:93:20:24:bc:
                    a0:9c:36:2a:91:83:08:13:a4:d7:25:39:ce:6f:5d:
                    ca:09:34:10:c6:84:c7:4d:bf:ca:fd:ad:25:cf:db:
                    7e:a3:75:66:1a:9d:ed:76:d0:f9:f7:9e:b6:b2:5d:
                    8a:3f:6f:a4:a9:75:c7:32:d1:b2:df:44:31:9b:43:
                    bd:19:db:39:69:92:36:c1:73:5f:70:cd:1a:d6:6a:
                    39:d6:60:5a:73:02:67:89:0c:71:7c:95:da:ca:5e:
                    36:ae:7b:89:dc:44:d6:f5:48:cf:4b:e3:89:1d:58:
                    c9:25:a4:b7:45:55:c3:bf:f3:a9:ea:93:2b:8f:a4:
                    f3:b3:87:b0:9a:e1:62:62:4b:cb:5d:ae:48:d4:98:
                    c8:1c:05:e6:09:6c:d9:4a:9e:d1:c9:fd:63:f6:fc:
                    10:5b:37:37:e4:ca:72:07:3a:41:93:4f:ea:bd:63:
                    2a:fd:86:ca:4d:46:d2:3b:7b:b8:46:db:81:a4:f9:
                    11:a8:b0:ce:39:8c:dc:0e:40:7a:e6:1b:be:18:71:
                    3b:f4:94:85:3e:29:c2:51:43:38:11:f6:51:51:13:
                    e8:82:1d:98:90:ac:a9:9d:ad:0f:64:3c:d5:a7:39:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:63:0C:4D:3F:ED:FF:A7:6C:C4:08:D1:F3:FC:58:23:CE:99:2C:6B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144344.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a69e::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:d2:a1:a1:1e:ad:37:a2:df:95:15:a6:3a:9d:d9:ff:0d:ab:
         fb:ef:a3:11:0f:a6:8d:a9:e5:c9:33:6e:db:6c:a6:94:e2:5f:
         22:44:97:32:9c:a8:42:7a:1d:82:01:dc:85:f1:67:ba:f3:f0:
         7a:4d:a4:d4:97:a6:a7:5a:a8:ab:f4:83:5f:46:bb:f4:9d:04:
         6f:47:1d:fe:47:e8:1f:44:79:23:08:7b:4b:7f:fc:2b:5e:43:
         71:c2:cb:5d:b2:e8:69:87:d5:10:37:b0:bb:7e:70:15:2a:a2:
         27:d3:f0:11:a6:08:6b:61:7d:b9:24:28:f3:cd:a5:43:ac:73:
         ec:46:fc:5a:0b:d3:d0:51:f7:bc:e3:2b:49:41:db:6f:33:61:
         99:b3:2e:f7:e3:7d:af:7b:df:1f:ba:c9:74:93:7d:53:1b:d9:
         ff:97:fc:88:ba:f1:47:47:e0:40:b3:e2:16:10:c8:b4:e5:15:
         ab:71:ea:05:61:6d:38:aa:85:77:5c:da:fe:5a:83:5f:ea:16:
         5f:dc:01:7b:c9:ed:46:af:bd:7c:af:22:18:5a:0f:43:ab:50:
         aa:17:82:ec:d0:f0:ea:36:66:5c:d3:c6:2d:81:3e:f9:99:0f:
         cb:b5:b2:ce:54:c4:33:1c:4f:60:65:3b:c0:33:ba:fe:a1:3f:
         ee:66:2b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:18 2026 by rpki-client