Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144402.roa
File:                     AS144402.roa (raw, json)
Hash identifier:          rdX59nLm9N58JhQ9hS1G/m4nLtG577jZaWzG8KlG8CE=
Subject key identifier:   50:94:82:42:BC:7A:13:DA:9F:74:F2:99:0B:AE:39:0A:87:7D:A2:D6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4B19F273B0C050B847870D3A900F602D233911F5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144402.roa
Signing time:             Tue 26 May 2026 01:12:54 +0000
ROA not before:           Tue 26 May 2026 01:07:54 +0000
ROA not after:            Tue 25 May 2027 01:12:54 +0000
asID:                     144402
IP address blocks:        240a:a6d8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:19:f2:73:b0:c0:50:b8:47:87:0d:3a:90:0f:60:2d:23:39:11:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:07:54 2026 GMT
            Not After : May 25 01:12:54 2027 GMT
        Subject: CN=50948242BC7A13DA9F74F2990BAE390A877DA2D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:7b:a0:db:98:2a:41:1b:bb:a1:42:a8:3d:
                    96:59:39:e7:f7:61:53:a8:f6:81:63:ca:1c:e8:d2:
                    53:d9:1e:8f:3c:96:55:2e:5e:df:99:f7:6b:82:ec:
                    a2:24:02:44:23:2b:88:96:49:26:91:d7:0d:e3:9f:
                    87:b6:08:ae:7b:85:ce:7d:52:0a:e4:aa:86:4c:d9:
                    11:1c:a2:e1:8e:8c:c0:06:eb:9f:f6:9d:bf:6b:0e:
                    10:8f:48:3c:01:81:d3:89:25:5f:35:03:96:6d:0c:
                    5f:81:fa:56:a9:3d:56:64:c6:d6:25:0a:54:d4:66:
                    c8:a9:a6:e6:45:a6:d4:3b:4e:f3:cc:92:4a:1c:9e:
                    93:5f:49:d0:8a:c1:9e:02:88:8f:b4:88:59:26:02:
                    4d:d8:08:a4:3b:37:0d:6c:5a:36:89:3a:e5:af:4e:
                    ee:ea:7c:20:d9:3e:f9:61:f9:65:11:da:6e:43:41:
                    cc:ae:5a:ad:18:82:86:80:18:82:94:50:e9:c2:8d:
                    db:11:2d:10:b1:1e:ad:b6:16:c7:ec:66:65:b8:df:
                    3e:fe:e1:37:2d:b2:a9:ec:c5:2d:8a:2c:d1:b5:6e:
                    1e:42:df:3d:7e:73:59:4e:9c:18:c3:d4:fb:41:59:
                    4d:a9:c6:43:c4:7d:41:bd:dc:20:f3:52:6e:f5:a2:
                    a3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:94:82:42:BC:7A:13:DA:9F:74:F2:99:0B:AE:39:0A:87:7D:A2:D6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144402.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:bb:0b:65:91:18:64:c1:c6:67:6d:80:55:a9:63:a5:b1:04:
         dc:6e:0d:14:75:f7:59:9f:91:d3:28:c3:1e:d5:a0:5e:ee:76:
         22:6b:9c:af:72:16:5f:28:9b:f7:aa:0a:de:60:70:44:71:80:
         a3:1e:db:c3:d4:a3:6b:23:2a:3c:68:4c:c0:82:92:84:47:54:
         19:f3:cf:a7:f2:03:bf:b7:37:83:d7:a7:b0:9d:3d:e2:26:ac:
         2a:b0:de:4a:2b:ca:43:a4:17:f5:cd:a0:a5:50:7c:bd:78:c1:
         b1:ac:75:1a:6e:ca:ab:87:52:77:44:e4:92:be:1d:cb:c3:6b:
         2b:6b:b9:23:67:bb:e5:86:0f:ed:26:61:08:29:f3:b5:ba:9e:
         60:b0:28:af:8c:0c:2f:7d:55:b6:f0:c8:ac:52:3b:de:bc:48:
         79:2f:6e:aa:0e:b7:50:ba:df:5e:f7:a3:f6:20:18:0e:da:58:
         f5:da:3b:c7:46:b3:2b:83:65:3a:7c:8d:ef:6c:1e:7c:9b:d9:
         2e:ab:81:91:9d:43:ff:6d:b7:a0:25:c2:13:24:8b:05:ff:e4:
         2d:d0:6b:b8:0a:9e:1f:a2:35:5b:39:0c:66:52:ed:f3:74:38:
         1a:1f:e4:6d:59:4c:3b:19:8f:11:e9:ac:ba:bd:28:9e:ad:5e:
         18:4d:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:18 2026 by rpki-client