Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144378.roa
File:                     AS144378.roa (raw, json)
Hash identifier:          8QNVbJ5rQOZp6ZeZdvyU/y6PsQaQuiApTarJ8QRE/nw=
Subject key identifier:   1C:B4:75:C6:16:60:49:23:5F:38:79:51:21:41:F9:D8:50:4F:72:4E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3C8DFFECF0A29A1E996EEEFD652991CB84710681
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144378.roa
Signing time:             Mon 25 May 2026 06:28:52 +0000
ROA not before:           Mon 25 May 2026 06:23:52 +0000
ROA not after:            Mon 24 May 2027 06:28:52 +0000
asID:                     144378
IP address blocks:        240a:a6c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8d:ff:ec:f0:a2:9a:1e:99:6e:ee:fd:65:29:91:cb:84:71:06:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:23:52 2026 GMT
            Not After : May 24 06:28:52 2027 GMT
        Subject: CN=1CB475C6166049235F3879512141F9D8504F724E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:87:f1:88:7b:05:7a:09:54:42:a9:9e:db:bc:
                    fa:6f:e4:b8:01:3b:e6:64:f1:f2:6f:0f:54:22:27:
                    8a:9d:80:bf:b4:94:61:88:85:bb:32:e1:5b:d8:d9:
                    48:40:10:9e:20:20:c1:34:4c:ed:85:f2:d8:42:3e:
                    6a:96:e8:09:21:aa:d1:98:35:f2:23:31:41:73:33:
                    22:b3:d0:dd:09:40:29:c1:2a:49:c5:a0:ce:2c:6f:
                    00:32:52:2c:46:aa:57:9c:68:5f:34:22:0b:fa:70:
                    bd:de:50:97:75:1e:17:fc:51:04:72:ce:5f:f0:6c:
                    9d:28:a3:b0:11:ee:d5:ee:35:19:b2:43:a7:75:8b:
                    f9:de:ea:df:a7:9c:f5:f5:4c:6c:36:8b:12:7a:97:
                    56:73:ca:e2:46:37:99:e1:08:eb:86:1e:41:02:8c:
                    ad:7a:ad:6c:e8:ba:b0:71:b5:c9:df:9e:ef:f1:39:
                    86:23:5a:b7:1a:d0:0e:6f:b2:70:53:df:c9:c2:ee:
                    a2:8d:36:0e:a5:52:0f:ad:f3:6a:88:c3:b1:57:2c:
                    ac:ad:98:a0:78:e1:67:34:ff:db:eb:3c:63:23:90:
                    ef:ed:fc:37:19:bc:10:eb:0f:2a:0f:50:a5:7f:ca:
                    1d:1c:87:e8:c9:a7:06:a3:ed:38:6a:b3:78:ed:1e:
                    56:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B4:75:C6:16:60:49:23:5F:38:79:51:21:41:F9:D8:50:4F:72:4E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144378.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:2e:3d:01:f4:63:5b:98:15:bb:ed:3f:35:51:34:02:7e:74:
         09:9e:c7:be:b9:b7:1c:4d:02:06:bd:9a:7c:1d:1d:77:da:05:
         4f:f7:4f:79:89:85:6a:56:b3:d0:4a:d7:44:da:32:5d:ba:13:
         ba:1b:f4:b4:e0:19:0b:97:e6:9e:e9:2e:28:aa:f5:01:02:4d:
         b1:c7:2a:58:b1:ed:30:c3:b3:99:68:d4:f4:58:98:7e:d4:51:
         f6:09:6e:55:04:03:45:c1:7c:d8:a0:9c:24:15:0b:d0:74:41:
         e7:aa:e8:c0:5e:ff:bb:c7:e0:25:a7:22:47:3f:30:d5:cc:c8:
         e7:c6:79:94:55:16:69:85:ec:2a:b9:51:ae:0e:c9:94:4c:ad:
         40:e9:89:bc:72:df:4d:21:a2:cc:6e:99:e6:4f:98:91:c1:b4:
         e5:fa:b5:69:fc:2b:aa:6c:09:d2:7a:4d:8a:cc:38:62:5d:bc:
         ef:a4:35:9f:2a:9c:e6:50:b4:2f:b0:34:8f:c2:96:b3:14:be:
         ed:46:75:68:c3:47:9f:83:ee:a2:52:b4:a7:56:3a:78:5e:7e:
         d4:1e:6a:a5:b4:ff:67:61:a5:42:de:37:66:6e:8f:99:37:77:
         59:c4:c9:8a:51:45:7d:62:f7:02:ea:23:59:66:03:a4:ae:bb:
         3a:2c:6b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:01 2026 by rpki-client