Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144371.roa
File:                     AS144371.roa (raw, json)
Hash identifier:          0WhjdoqEFEGRA1dCnOoZ3TUhoqf686E2HvWiXnzRvas=
Subject key identifier:   F6:79:BD:4B:50:52:33:96:37:41:41:BF:16:92:5A:7B:B5:72:93:EC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       76F2120C034535F8987BC5B060C3391FEE068B7A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144371.roa
Signing time:             Fri 22 May 2026 07:40:53 +0000
ROA not before:           Fri 22 May 2026 07:35:53 +0000
ROA not after:            Fri 21 May 2027 07:40:53 +0000
asID:                     144371
IP address blocks:        240a:a6b9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f2:12:0c:03:45:35:f8:98:7b:c5:b0:60:c3:39:1f:ee:06:8b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:35:53 2026 GMT
            Not After : May 21 07:40:53 2027 GMT
        Subject: CN=F679BD4B50523396374141BF16925A7BB57293EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:3e:fa:c7:65:2f:08:cf:6c:0b:9f:48:02:
                    0f:f1:c6:31:20:5c:9f:bc:8b:4d:0e:46:39:88:0c:
                    c3:10:cb:09:23:8e:c8:24:57:58:ed:e8:bb:a8:36:
                    c6:0b:86:c0:cf:bd:44:22:cf:eb:33:b1:03:85:d2:
                    af:93:c1:c7:b2:b7:1c:30:aa:0a:e8:db:2a:df:b5:
                    18:8b:3f:56:b7:93:ca:6e:99:f4:32:ad:a1:2d:fa:
                    f0:30:03:5d:c1:c2:b0:0d:e3:0e:88:22:7f:4b:bc:
                    65:33:af:7a:53:1d:9e:af:4d:e4:9b:58:2f:9d:38:
                    31:75:8c:ab:5d:c9:ff:92:cf:7f:86:18:30:43:63:
                    3f:4a:57:63:5f:a2:83:d2:f8:85:2c:49:42:67:7c:
                    23:50:a9:43:15:69:97:ca:63:8d:78:fa:b7:fa:68:
                    d6:6c:37:18:95:d2:06:28:5b:39:ec:ca:33:be:bd:
                    f4:f8:1f:c1:e3:3c:50:d9:99:73:b0:eb:49:7e:ec:
                    ef:8e:17:a4:a6:68:82:74:10:8b:a4:10:f2:04:82:
                    81:5c:ce:c9:04:e5:aa:1c:aa:a2:65:8b:5f:87:c5:
                    98:6c:b3:a9:a2:e2:22:d7:68:b3:af:89:05:10:fe:
                    be:86:d2:8c:ae:a9:8b:3b:6a:16:95:bd:40:1a:a7:
                    8f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:79:BD:4B:50:52:33:96:37:41:41:BF:16:92:5A:7B:B5:72:93:EC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144371.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6b9::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:fa:e0:57:a9:b0:e4:d4:57:ee:65:49:28:01:02:64:7a:
         b7:06:0e:da:77:74:c3:73:e2:7a:14:8a:69:74:d6:32:22:df:
         c3:a2:97:b1:a7:dc:fc:1a:3f:a2:38:56:3a:70:5c:54:2a:cf:
         1f:12:44:22:3d:e9:f2:3f:8c:c6:31:ea:41:23:3d:9e:15:77:
         38:2a:b6:ce:47:88:ce:91:f6:97:46:d7:5f:81:7a:e3:43:73:
         d0:93:27:cc:98:58:80:e1:8c:b3:1f:b1:2b:54:c4:bb:b4:6d:
         c7:d2:10:c1:49:9d:7e:41:6b:6a:f3:a5:3d:c5:11:e0:97:13:
         a9:18:1e:00:3e:5f:25:18:94:1e:cb:78:25:9e:60:cc:9a:94:
         f5:d5:d6:0e:ff:b3:bb:44:8d:8e:3c:40:60:00:56:a5:01:cf:
         e5:aa:12:df:6f:46:47:a2:88:98:9b:ba:0d:f5:cb:83:14:d7:
         a0:b8:3c:40:cd:4e:be:dc:2f:7e:da:b2:47:a7:3e:e5:57:70:
         2a:7b:df:3d:17:bc:d2:9f:40:8c:78:6f:b1:7d:ca:b9:11:04:
         2c:98:02:45:6c:40:5e:a0:04:e5:c9:f4:e8:12:8a:9c:41:e2:
         cb:26:8f:f9:92:a1:df:d4:ef:5e:5d:7e:56:ba:6d:2d:26:16:
         2d:82:18:de
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdvISDANFNfiYe8WwYMM5H+4Gi3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM1NTNaFw0yNzA1MjEwNzQwNTNaMDMxMTAvBgNV
BAMTKEY2NzlCRDRCNTA1MjMzOTYzNzQxNDFCRjE2OTI1QTdCQjU3MjkzRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzj76x2UvCM9sC59IAg/xxjEg
XJ+8i00ORjmIDMMQywkjjsgkV1jt6LuoNsYLhsDPvUQiz+szsQOF0q+Twceytxww
qgro2yrftRiLP1a3k8pumfQyraEt+vAwA13BwrAN4w6IIn9LvGUzr3pTHZ6vTeSb
WC+dODF1jKtdyf+Sz3+GGDBDYz9KV2NfooPS+IUsSUJnfCNQqUMVaZfKY414+rf6
aNZsNxiV0gYoWznsyjO+vfT4H8HjPFDZmXOw60l+7O+OF6SmaIJ0EIukEPIEgoFc
zskE5aocqqJli1+HxZhss6mi4iLXaLOviQUQ/r6G0oyuqYs7ahaVvUAap49LAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU9nm9S1BSM5Y3QUG/FpJae7Vyk+wwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0MzcxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqmuTANBgkqhkiG9w0BAQsFAAOCAQEAM6r6
4FepsOTUV+5lSSgBAmR6twYO2nd0w3PiehSKaXTWMiLfw6KXsafc/Bo/ojhWOnBc
VCrPHxJEIj3p8j+MxjHqQSM9nhV3OCq2zkeIzpH2l0bXX4F640Nz0JMnzJhYgOGM
sx+xK1TEu7Rtx9IQwUmdfkFravOlPcUR4JcTqRgeAD5fJRiUHst4JZ5gzJqU9dXW
Dv+zu0SNjjxAYABWpQHP5aoS329GR6KImJu6DfXLgxTXoLg8QM1OvtwvftqyR6c+
5VdwKnvfPRe80p9AjHhvsX3KuREELJgCRWxAXqAE5cn06BKKnEHiyyaP+ZKh39Tv
Xl1+VrptLSYWLYIY3g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:06 2026 by rpki-client