Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144367.roa
File:                     AS144367.roa (raw, json)
Hash identifier:          VWrPCFGeC+TsNj46Rh9dUF+XVkvXDusnIh3a0NTcYiU=
Subject key identifier:   52:88:D3:60:4A:70:3B:B3:00:BD:B7:49:0E:81:33:B2:25:81:6C:5C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       15D29B8C8551A573F14FFE19E06D7E3414B0F755
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144367.roa
Signing time:             Tue 26 May 2026 06:30:55 +0000
ROA not before:           Tue 26 May 2026 06:25:55 +0000
ROA not after:            Tue 25 May 2027 06:30:55 +0000
asID:                     144367
IP address blocks:        240a:a6b5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d2:9b:8c:85:51:a5:73:f1:4f:fe:19:e0:6d:7e:34:14:b0:f7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:55 2026 GMT
            Not After : May 25 06:30:55 2027 GMT
        Subject: CN=5288D3604A703BB300BDB7490E8133B225816C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:cf:50:4a:6b:a1:47:a6:6b:c7:a9:50:dd:
                    4c:8e:1b:e9:f0:8d:1f:7f:0f:7b:7f:35:d6:a4:19:
                    9d:41:07:73:ed:9f:89:5d:e6:b2:25:12:d9:bf:b8:
                    1e:b9:6e:80:72:72:5e:4f:9d:c8:af:66:8e:93:d8:
                    08:2a:fe:3d:ed:40:36:0e:39:be:74:4e:37:ce:3e:
                    fe:20:34:0e:22:50:e7:f5:56:2f:51:94:cb:f9:ee:
                    9a:03:2d:00:6e:72:f9:aa:b8:7b:df:3d:ad:1e:f4:
                    31:17:3c:3a:e2:ed:3a:af:8a:75:c6:71:03:bb:d6:
                    5b:95:ba:7d:b2:3e:83:c9:95:72:4d:65:e8:79:9e:
                    04:a3:38:2a:78:d2:76:78:a4:5a:b0:08:7c:2c:19:
                    c3:30:14:a3:d2:8f:05:c9:13:7f:78:7e:00:fb:93:
                    74:b0:c6:4a:41:bf:39:e3:e6:c9:99:bb:d6:90:1a:
                    6d:54:38:8c:2c:bc:92:0e:28:7a:27:63:91:88:8f:
                    28:77:61:37:25:44:de:28:54:18:64:aa:21:d1:42:
                    05:39:1a:5c:47:c9:8f:9c:55:44:8b:35:a9:2b:81:
                    9b:b5:02:f2:68:0d:d2:fb:14:26:28:02:b1:8e:1d:
                    a0:5a:54:62:26:f9:45:6d:01:97:58:9b:e7:3a:d9:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:88:D3:60:4A:70:3B:B3:00:BD:B7:49:0E:81:33:B2:25:81:6C:5C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144367.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6b5::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:7c:9e:dd:ea:27:bc:fc:2e:38:81:48:78:b6:7e:57:69:54:
         68:3e:a5:67:21:5f:c4:34:3a:ae:85:2b:5b:cc:12:37:d1:aa:
         0e:a8:61:13:57:db:ef:b7:ad:37:b0:c1:85:af:9e:33:15:82:
         01:1f:3d:6e:8c:2b:07:66:3c:7a:13:42:da:46:83:ae:6a:ce:
         20:da:8f:41:5d:ce:5b:17:12:f3:e1:b5:95:2e:76:a3:e7:d9:
         8e:a7:a3:43:30:82:69:96:80:93:30:71:00:44:3f:57:1e:fd:
         20:10:05:05:16:a7:4a:d5:ca:98:af:49:83:8d:95:ff:b8:99:
         59:f4:6e:70:fb:6a:4e:51:0a:a8:e7:85:4f:e9:f0:84:bc:4f:
         ff:ac:33:ec:1d:b9:e7:a8:36:b0:1b:69:14:d8:c2:d2:2f:8d:
         66:f3:51:cf:55:59:15:58:25:6f:43:2b:d4:e7:0b:e9:1b:00:
         05:88:6b:7a:fb:78:63:cf:a9:53:5f:1e:f5:a3:47:df:97:53:
         bc:63:bb:7f:4e:80:4b:7f:86:f2:f9:f7:af:23:77:4c:e6:d8:
         77:84:c2:f8:90:27:ec:b2:c6:7b:90:b8:66:3c:94:f0:17:20:
         50:9b:95:be:23:81:0e:51:12:b3:fa:f0:66:5d:e7:ed:98:2c:
         93:16:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:51 2026 by rpki-client