Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144366.roa
File:                     AS144366.roa (raw, json)
Hash identifier:          Tb3IM9C3vcNqOdii0UadtDBltYqBlPhVgDpqkb9sxlU=
Subject key identifier:   A2:83:06:B5:6F:08:60:CE:FC:06:68:93:D6:C7:D2:56:9C:75:AE:A6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4FEC09CD18394CDE0FB2AE9052D3029EDE019EB8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144366.roa
Signing time:             Fri 22 May 2026 06:46:02 +0000
ROA not before:           Fri 22 May 2026 06:41:02 +0000
ROA not after:            Fri 21 May 2027 06:46:02 +0000
asID:                     144366
IP address blocks:        240a:a6b4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ec:09:cd:18:39:4c:de:0f:b2:ae:90:52:d3:02:9e:de:01:9e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:02 2026 GMT
            Not After : May 21 06:46:02 2027 GMT
        Subject: CN=A28306B56F0860CEFC066893D6C7D2569C75AEA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:0b:40:a2:d6:04:5c:db:ee:02:8c:4e:bf:
                    fb:df:82:9d:65:ab:01:12:aa:02:dd:23:17:49:65:
                    67:1d:3d:79:ee:7c:df:41:b4:87:b8:77:cf:e6:c7:
                    0a:fc:56:eb:e3:85:df:03:53:d2:15:32:a2:c6:be:
                    47:fa:7e:22:66:c2:8d:fb:2c:e7:60:8e:8e:4e:90:
                    ac:c9:cd:a3:2e:3b:77:ef:f9:2f:dd:7c:c2:3f:c9:
                    c0:ef:69:b8:d7:0c:76:6e:90:d0:fb:ba:e1:38:5c:
                    74:e0:21:d6:1b:c4:71:56:4f:c8:db:8d:ed:a4:02:
                    ce:a0:c8:28:7a:a1:6a:50:ed:17:2f:a5:3c:7c:e0:
                    57:ee:12:eb:cf:d5:8a:28:2d:21:08:98:ff:ef:bb:
                    69:c2:79:d4:82:28:0b:a8:c9:02:bb:62:60:54:b4:
                    0c:98:db:c1:a8:22:4e:c3:3c:9e:fd:5c:17:ec:c2:
                    89:fd:aa:44:4f:6c:6f:98:15:e0:fc:19:3a:f3:95:
                    34:c7:31:c5:c4:23:8c:84:23:24:10:e9:41:70:10:
                    47:6d:66:2c:a8:bf:25:0b:e8:0f:39:29:1f:69:e1:
                    c0:1e:60:e3:98:56:89:a3:68:53:8b:bb:98:3f:ff:
                    8d:d1:51:4d:1e:46:fd:43:00:c6:78:a9:62:87:33:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:83:06:B5:6F:08:60:CE:FC:06:68:93:D6:C7:D2:56:9C:75:AE:A6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144366.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:26:37:ba:03:b8:19:da:de:76:db:60:fa:3d:f5:1a:d6:
         66:79:c2:3b:03:23:9d:cf:49:7f:98:9d:05:88:eb:27:17:1f:
         56:18:50:22:cf:4f:32:ed:6a:45:c7:50:ab:49:f3:7f:68:67:
         3d:28:a5:b9:22:e1:eb:17:05:5f:de:bc:1b:12:f0:ac:6e:23:
         fd:8e:1c:85:07:66:fd:24:5f:c0:cd:14:ca:3d:a0:6e:ff:be:
         61:9b:bf:b7:d5:a8:e1:27:9f:a6:9b:a7:ab:15:42:96:c4:fa:
         17:9b:39:ee:67:89:86:93:f0:db:b6:21:71:f4:cf:f3:6f:80:
         e5:9e:3b:11:6e:36:67:0f:26:80:46:c1:c2:2a:70:a0:5b:0e:
         1e:ef:9f:a7:dd:47:00:17:b7:78:2b:ed:d2:32:cd:cf:f6:cd:
         81:41:b0:14:40:d1:c7:1d:c5:7c:cf:62:f9:44:5f:90:3e:b9:
         e4:98:29:d7:29:d9:b8:c3:a9:91:0d:53:81:5f:9f:47:ad:75:
         2c:f2:ae:ff:a5:9d:e2:c3:a2:3b:a0:11:58:0f:56:5a:d5:3b:
         f7:ae:0e:23:d2:b5:03:63:ab:3a:9e:87:1a:3d:c1:4d:f1:9f:
         06:29:6e:41:5e:21:43:fa:2c:42:f8:ae:5d:92:6b:0d:36:4b:
         9b:17:4d:15
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUT+wJzRg5TN4Psq6QUtMCnt4BnrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMDJaFw0yNzA1MjEwNjQ2MDJaMDMxMTAvBgNV
BAMTKEEyODMwNkI1NkYwODYwQ0VGQzA2Njg5M0Q2QzdEMjU2OUM3NUFFQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vwtAotYEXNvuAoxOv/vfgp1l
qwESqgLdIxdJZWcdPXnufN9BtIe4d8/mxwr8Vuvjhd8DU9IVMqLGvkf6fiJmwo37
LOdgjo5OkKzJzaMuO3fv+S/dfMI/ycDvabjXDHZukND7uuE4XHTgIdYbxHFWT8jb
je2kAs6gyCh6oWpQ7RcvpTx84FfuEuvP1YooLSEImP/vu2nCedSCKAuoyQK7YmBU
tAyY28GoIk7DPJ79XBfswon9qkRPbG+YFeD8GTrzlTTHMcXEI4yEIyQQ6UFwEEdt
ZiyovyUL6A85KR9p4cAeYOOYVomjaFOLu5g//43RUU0eRv1DAMZ4qWKHM+T3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUooMGtW8IYM78BmiT1sfSVpx1rqYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmtDANBgkqhkiG9w0BAQsFAAOCAQEAjZYm
N7oDuBna3nbbYPo99RrWZnnCOwMjnc9Jf5idBYjrJxcfVhhQIs9PMu1qRcdQq0nz
f2hnPSiluSLh6xcFX968GxLwrG4j/Y4chQdm/SRfwM0Uyj2gbv++YZu/t9Wo4Sef
ppunqxVClsT6F5s57meJhpPw27YhcfTP82+A5Z47EW42Zw8mgEbBwipwoFsOHu+f
p91HABe3eCvt0jLNz/bNgUGwFEDRxx3FfM9i+URfkD655Jgp1ynZuMOpkQ1TgV+f
R611LPKu/6Wd4sOiO6ARWA9WWtU7964OI9K1A2OrOp6HGj3BTfGfBiluQV4hQ/os
QviuXZJrDTZLmxdNFQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:58 2026 by rpki-client