Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144362.roa
File:                     AS144362.roa (raw, json)
Hash identifier:          2Khb4lMBqXSU13NvJuviPLyHfX7KzJUx0JiBqVhicZA=
Subject key identifier:   11:7F:23:30:F8:91:30:79:F7:D0:19:7F:04:A0:53:50:F9:69:8C:5F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7468BD5DBC4F4DC8D52B6E7A12290E27D14D3175
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144362.roa
Signing time:             Tue 26 May 2026 06:12:47 +0000
ROA not before:           Tue 26 May 2026 06:07:47 +0000
ROA not after:            Tue 25 May 2027 06:12:47 +0000
asID:                     144362
IP address blocks:        240a:a6b0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:68:bd:5d:bc:4f:4d:c8:d5:2b:6e:7a:12:29:0e:27:d1:4d:31:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:07:47 2026 GMT
            Not After : May 25 06:12:47 2027 GMT
        Subject: CN=117F2330F8913079F7D0197F04A05350F9698C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ec:d5:e6:36:1d:d7:df:5f:67:01:72:0f:65:
                    a9:b3:97:9f:8d:f9:3a:dd:c0:40:d4:db:83:80:b0:
                    ff:24:35:3d:28:20:d0:f4:f1:3b:12:55:82:5d:10:
                    5b:12:9c:69:89:92:61:11:79:40:6f:e2:e8:a3:7c:
                    ba:89:92:07:d4:46:ab:e0:4d:16:ff:67:45:06:b0:
                    a0:f9:7d:ec:f7:f6:71:f2:d2:e8:47:53:a9:f1:01:
                    87:fb:24:e1:79:ec:9b:5d:a6:5a:03:10:28:44:d5:
                    57:f1:87:72:ee:c0:c6:df:fb:5f:c7:a0:6a:c9:ce:
                    c7:1f:de:9c:1f:a4:5c:90:96:8b:c3:f2:bb:5f:f5:
                    a2:dc:d0:fe:4a:a6:12:25:f6:d8:0d:2e:db:1c:be:
                    06:d3:4b:91:37:72:4e:c1:87:0d:56:bf:1b:37:bd:
                    67:57:90:a1:3b:5f:3c:c6:02:fc:63:2e:1b:16:5f:
                    69:3c:d8:33:85:65:f0:8b:a7:d6:b4:28:85:2a:c0:
                    46:ac:b6:36:89:ee:41:fc:86:5f:94:00:1a:06:0e:
                    ee:cd:e8:ed:83:1b:5d:22:5e:75:27:9c:b7:49:89:
                    56:0e:4f:80:de:eb:39:64:de:b8:dc:ba:00:de:41:
                    24:d4:f2:a5:ae:a0:5e:16:9f:a1:cd:49:61:cb:79:
                    2f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7F:23:30:F8:91:30:79:F7:D0:19:7F:04:A0:53:50:F9:69:8C:5F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144362.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:58:bd:f5:d3:1d:30:68:a6:57:53:ee:32:a8:8b:8c:0c:7e:
         d6:f2:e4:4b:f8:e2:60:f0:80:bb:82:97:44:4e:ea:9c:7c:a4:
         2c:51:fc:b9:ea:8d:91:c1:47:b2:9e:70:40:26:2e:3f:26:c3:
         a7:f7:a5:3a:b0:4d:37:7f:4a:92:42:22:8e:63:14:dc:32:c1:
         44:21:a6:e4:92:56:4e:35:80:7a:26:a2:47:78:7f:c0:28:60:
         50:31:86:d9:50:32:16:c1:0c:8f:10:db:3c:4b:19:c5:f7:09:
         df:dc:df:e8:b0:9b:f5:17:d0:69:af:48:c5:ef:5a:91:fd:d7:
         8a:50:c8:a7:89:6e:82:b6:34:26:e7:8b:2d:43:1c:91:f6:05:
         e0:59:9b:b6:cc:f8:c4:22:48:16:7a:79:59:6c:18:25:c9:db:
         44:8e:8e:09:29:44:d6:a0:58:79:39:8b:c6:f1:ea:5d:74:45:
         20:71:1e:b2:a8:55:37:0d:1b:22:a3:f7:ba:02:0c:ab:2c:ad:
         a7:03:9c:f5:07:48:cb:b7:94:a7:8e:80:a5:0d:21:79:ac:81:
         c5:4b:33:5a:bd:88:57:c9:75:0c:eb:04:9a:61:96:aa:7e:13:
         2b:5d:70:d5:fd:90:6a:6b:7c:f4:16:76:28:c0:92:10:1e:02:
         2c:46:c0:aa
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdGi9XbxPTcjVK256EikOJ9FNMXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3NDdaFw0yNzA1MjUwNjEyNDdaMDMxMTAvBgNV
BAMTKDExN0YyMzMwRjg5MTMwNzlGN0QwMTk3RjA0QTA1MzUwRjk2OThDNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl7NXmNh3X319nAXIPZamzl5+N
+TrdwEDU24OAsP8kNT0oIND08TsSVYJdEFsSnGmJkmEReUBv4uijfLqJkgfURqvg
TRb/Z0UGsKD5fez39nHy0uhHU6nxAYf7JOF57JtdploDEChE1Vfxh3LuwMbf+1/H
oGrJzscf3pwfpFyQlovD8rtf9aLc0P5KphIl9tgNLtscvgbTS5E3ck7Bhw1Wvxs3
vWdXkKE7XzzGAvxjLhsWX2k82DOFZfCLp9a0KIUqwEastjaJ7kH8hl+UABoGDu7N
6O2DG10iXnUnnLdJiVYOT4De6zlk3rjcugDeQSTU8qWuoF4Wn6HNSWHLeS9zAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUEX8jMPiRMHn30Bl/BKBTUPlpjF8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmsDANBgkqhkiG9w0BAQsFAAOCAQEAdFi9
9dMdMGimV1PuMqiLjAx+1vLkS/jiYPCAu4KXRE7qnHykLFH8ueqNkcFHsp5wQCYu
PybDp/elOrBNN39KkkIijmMU3DLBRCGm5JJWTjWAeiaiR3h/wChgUDGG2VAyFsEM
jxDbPEsZxfcJ39zf6LCb9RfQaa9Ixe9akf3XilDIp4lugrY0JueLLUMckfYF4Fmb
tsz4xCJIFnp5WWwYJcnbRI6OCSlE1qBYeTmLxvHqXXRFIHEesqhVNw0bIqP3ugIM
qyytpwOc9QdIy7eUp46ApQ0heayBxUszWr2IV8l1DOsEmmGWqn4TK11w1f2Qamt8
9BZ2KMCSEB4CLEbAqg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:34 2026 by rpki-client