Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144377.roa
File:                     AS144377.roa (raw, json)
Hash identifier:          YQe//yNw4+bbNhah53l4bNUlluVHxa5Finfq8md1UZI=
Subject key identifier:   A5:F9:8E:DE:12:76:93:72:2A:2B:51:6E:9C:D1:72:0A:F2:99:E4:6E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       168FBAD90D36B8B8EB16A1F4607CA46BDB69C594
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144377.roa
Signing time:             Fri 22 May 2026 07:09:12 +0000
ROA not before:           Fri 22 May 2026 07:04:12 +0000
ROA not after:            Fri 21 May 2027 07:09:12 +0000
asID:                     144377
IP address blocks:        240a:a6bf::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8f:ba:d9:0d:36:b8:b8:eb:16:a1:f4:60:7c:a4:6b:db:69:c5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:04:12 2026 GMT
            Not After : May 21 07:09:12 2027 GMT
        Subject: CN=A5F98EDE127693722A2B516E9CD1720AF299E46E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:91:45:39:4c:2e:05:03:c7:15:40:34:98:8c:
                    da:61:47:a9:71:9e:56:b9:f6:c4:39:41:5b:34:6d:
                    65:2d:c7:8e:bd:f0:e2:44:d1:82:3e:db:b5:ea:5d:
                    d0:7f:df:df:a6:aa:eb:39:22:e8:00:99:98:ea:73:
                    5b:25:03:6c:4b:96:51:d8:65:76:ff:69:03:d2:ae:
                    b5:cc:4f:3d:10:ce:0c:8c:8e:6c:1e:a5:73:70:b9:
                    1f:c0:c9:97:95:3b:be:b8:68:8c:fb:81:93:a4:85:
                    fa:bd:8b:f9:1a:bf:64:88:da:eb:2a:18:55:80:ea:
                    fa:5f:aa:3c:d9:2b:fe:e7:c3:4f:b2:4c:dd:0f:e7:
                    03:bd:e4:07:ac:1e:48:53:c8:cb:42:00:f5:74:10:
                    86:e0:36:7c:c5:3f:42:4b:28:58:b1:64:5b:62:58:
                    3d:d6:6d:70:58:4f:73:8f:32:03:04:7e:ba:16:d4:
                    fd:c7:b3:63:56:75:a5:1d:60:09:dd:ed:df:bf:37:
                    f4:09:88:99:53:0a:14:18:86:f5:53:f2:2c:bf:8c:
                    f9:48:75:7b:c3:33:a9:19:65:0b:69:d6:fd:cd:70:
                    cf:7d:98:82:95:c1:74:7f:7f:c1:1e:e4:9e:96:ae:
                    d2:ee:b5:8c:17:01:30:67:40:90:9f:97:cf:2f:17:
                    65:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F9:8E:DE:12:76:93:72:2A:2B:51:6E:9C:D1:72:0A:F2:99:E4:6E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144377.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6bf::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:4e:25:a8:98:8b:ff:65:dc:cf:65:a8:54:b6:81:18:1d:99:
         29:e9:c3:36:fe:8a:4c:be:0b:51:e8:64:33:de:70:a9:4c:5b:
         68:5e:39:5f:96:7d:aa:f4:23:72:4a:79:2c:8e:45:a6:a6:f4:
         f2:40:85:5e:fd:27:af:d5:d0:cb:a0:1b:a2:8e:f5:8f:fa:20:
         71:b9:c5:27:19:2c:fa:47:2a:87:dd:a9:22:08:19:3d:91:75:
         8c:8e:c2:3f:83:8a:87:5f:20:9d:ff:d1:41:9c:92:dc:a6:e9:
         7e:0d:4a:9d:8e:46:ea:52:ea:36:6b:a5:16:4c:c6:0c:15:29:
         59:d5:1c:6a:7c:00:70:9a:7e:35:53:44:89:33:1c:e1:fa:21:
         2b:ba:f6:e7:3c:1f:03:c1:a2:55:03:09:11:be:68:8f:03:d4:
         b1:a6:12:57:3b:c4:f5:92:e3:8a:b5:52:39:3d:d9:3a:a8:a1:
         df:de:c2:da:e7:ed:70:49:2b:7d:b7:13:3e:8b:91:c1:ac:59:
         c8:0e:58:66:d9:cb:bf:e7:70:be:01:41:60:00:4e:cc:3d:9a:
         ee:e6:55:38:6f:ca:9a:88:8c:c1:a2:6a:cb:7e:42:37:85:de:
         a6:ea:74:90:6d:65:47:80:ef:b5:17:10:db:bb:de:7b:cc:7b:
         96:4c:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:49 2026 by rpki-client