Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144388.roa
File:                     AS144388.roa (raw, json)
Hash identifier:          HfCcyXnDh6n3U6lpeivf41M9eptPj6vjkrcYGF19A8k=
Subject key identifier:   FC:80:AC:FA:8C:F7:4F:AD:27:D6:31:2F:0A:88:73:B8:2C:B2:CD:E7
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6AF4E58CDD39233699C16992381241E40B86061C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144388.roa
Signing time:             Mon 25 May 2026 03:19:47 +0000
ROA not before:           Mon 25 May 2026 03:14:47 +0000
ROA not after:            Mon 24 May 2027 03:19:47 +0000
asID:                     144388
IP address blocks:        240a:a6ca::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f4:e5:8c:dd:39:23:36:99:c1:69:92:38:12:41:e4:0b:86:06:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:47 2026 GMT
            Not After : May 24 03:19:47 2027 GMT
        Subject: CN=FC80ACFA8CF74FAD27D6312F0A8873B82CB2CDE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:41:48:e0:70:12:85:ff:c6:77:a2:47:53:
                    6d:f1:a6:0e:be:9c:89:0d:0e:a1:f1:5d:aa:7a:56:
                    87:15:25:96:3b:20:9e:34:41:41:fd:d9:0d:b8:9c:
                    78:61:ac:d3:b9:c0:13:d8:0e:c7:76:d4:ea:d2:9d:
                    da:00:2b:64:47:b9:56:64:66:bd:4e:9f:ce:79:fd:
                    5c:3a:59:46:03:63:ed:ac:bf:92:f0:21:55:56:e0:
                    e6:de:38:0c:fd:f3:14:bd:1e:c8:b3:68:9f:3b:53:
                    e5:4d:37:a8:91:d6:32:68:05:35:29:5a:85:18:bf:
                    91:e4:16:e8:b4:a2:23:3f:32:b1:b5:66:6e:e4:ea:
                    79:cc:a6:a4:85:f6:af:95:3d:7a:22:ef:df:7a:cc:
                    87:75:50:ea:15:e5:e3:ec:31:92:25:24:eb:2a:e8:
                    7b:4e:62:e0:54:17:e0:dc:4d:52:73:b3:c9:09:1f:
                    6b:e2:c8:e6:d9:51:fb:69:3e:04:c2:84:8f:f8:9f:
                    4f:df:eb:10:3d:fe:14:f9:8a:4d:ff:57:9f:11:d9:
                    34:e2:f8:e9:07:00:de:db:d5:15:04:19:00:89:4d:
                    38:b2:6b:ed:40:f7:6a:ad:9c:3a:1a:83:d8:12:a0:
                    af:04:02:cc:1a:90:47:2e:5c:f0:a9:23:09:4a:40:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:80:AC:FA:8C:F7:4F:AD:27:D6:31:2F:0A:88:73:B8:2C:B2:CD:E7
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144388.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6ca::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:d3:2f:06:d1:95:f8:5c:ed:ad:db:05:da:96:1b:9a:f5:12:
         90:4f:77:dc:2d:94:8d:c5:1f:2e:8f:e3:6b:d3:43:6b:66:97:
         25:c8:fd:f0:1f:db:73:7e:f5:a2:84:fa:47:fa:26:03:06:e4:
         17:52:81:fe:6f:a5:ab:91:3c:50:2e:89:ae:8e:ed:01:cd:cd:
         95:81:6f:cd:3c:a3:48:44:d6:52:96:fd:f0:53:17:7c:a0:10:
         ac:b9:90:7f:39:f2:fc:66:eb:d6:7c:b8:92:fd:36:fd:dd:b5:
         4c:ec:0e:81:f4:d3:63:f2:82:ab:94:44:7a:f4:3c:1e:de:57:
         08:c0:91:ea:10:df:7d:da:ea:5e:d7:18:e8:25:2e:de:ab:b8:
         9d:20:94:f5:da:fa:dd:ed:13:26:66:9e:ad:0e:bc:2a:fb:80:
         b3:97:02:87:32:74:33:32:2a:af:fa:ae:4b:be:8c:16:2f:05:
         74:d4:ac:79:c0:4c:0e:26:fd:4b:ce:d1:79:af:05:d3:ae:df:
         ab:b4:7d:53:65:ca:04:4e:d3:75:7e:31:a5:4e:10:a0:8a:be:
         de:e6:0c:77:4c:c8:b5:b9:05:ad:fb:8a:25:5c:c5:e3:d3:c1:
         3a:1e:49:20:a2:fe:85:cc:82:b0:ad:95:dd:1b:1b:53:05:78:
         75:67:e7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:29 2026 by rpki-client