Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144403.roa
File:                     AS144403.roa (raw, json)
Hash identifier:          YELmHIFizEc6pWcotaHtLI0g81LkwgZByJtYN/znPgQ=
Subject key identifier:   4F:37:8A:CE:40:25:7E:22:EE:31:AF:07:46:19:F9:4B:AF:B3:D7:8D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       187919EFB6CBACEEC10C9078A4E2C45CA65254A0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144403.roa
Signing time:             Mon 25 May 2026 02:22:41 +0000
ROA not before:           Mon 25 May 2026 02:17:41 +0000
ROA not after:            Mon 24 May 2027 02:22:41 +0000
asID:                     144403
IP address blocks:        240a:a6d9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:79:19:ef:b6:cb:ac:ee:c1:0c:90:78:a4:e2:c4:5c:a6:52:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:41 2026 GMT
            Not After : May 24 02:22:41 2027 GMT
        Subject: CN=4F378ACE40257E22EE31AF074619F94BAFB3D78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:f9:4b:9f:2e:46:ba:42:88:ff:bb:8d:bc:
                    45:a8:37:43:22:7d:4e:fd:b6:b1:45:a2:1e:0b:1e:
                    89:68:16:7e:06:4d:0c:17:e8:da:20:a0:c0:92:58:
                    a4:8e:81:67:8e:5d:d7:7a:4b:7e:69:a6:60:ed:91:
                    a1:23:f5:72:87:fb:de:22:7f:4b:b0:b2:b0:68:92:
                    7d:f4:9d:cd:7d:19:e0:48:c1:58:24:53:bf:75:a8:
                    41:5a:94:d7:e1:10:d8:6e:63:f0:74:da:c0:fa:25:
                    1f:13:f0:1f:e2:30:98:c3:85:7a:a2:0d:66:ac:05:
                    b5:ea:d2:7f:b1:20:10:77:bf:10:8a:02:50:5f:e2:
                    92:da:ab:cf:79:72:4d:e1:b0:1a:cb:14:5e:5e:fe:
                    82:86:fa:cf:d8:0e:8b:79:f3:73:55:b5:aa:06:ad:
                    28:df:8f:ed:16:80:6d:c2:7f:61:f5:da:75:37:5d:
                    8c:55:67:8c:fd:b9:6e:d4:c6:bd:ed:65:d5:72:d2:
                    f0:90:4a:93:63:03:23:04:fc:a5:38:2e:43:85:0f:
                    87:05:28:48:33:87:82:67:0c:f5:75:4e:49:a8:87:
                    32:7f:c9:f9:c5:1a:95:eb:2f:f1:76:e7:2f:b4:8e:
                    14:8a:3d:8b:2a:6a:97:67:86:39:2e:33:21:1c:8c:
                    1f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:37:8A:CE:40:25:7E:22:EE:31:AF:07:46:19:F9:4B:AF:B3:D7:8D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144403.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6d9::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:24:26:86:88:55:6e:e6:e0:0b:a3:5d:00:6e:6f:f5:31:94:
         01:d3:cb:7b:28:97:3d:e5:bb:7a:82:0b:bf:a1:7d:0f:04:de:
         b3:5f:a2:78:90:ea:26:1a:b4:5f:b3:9d:bf:9e:80:d2:90:f4:
         cf:f2:76:a8:ee:96:69:a6:da:5d:4f:c2:b7:94:b7:07:96:0d:
         b8:1e:20:5f:52:38:2c:3b:e9:bd:73:24:81:f4:71:8d:6e:77:
         96:53:21:d0:a1:fb:23:0b:e2:a9:9b:ed:7d:3b:9f:fb:ae:bc:
         b3:db:0f:d8:20:e6:45:ee:e7:e9:fa:a4:c2:d7:8c:96:2e:95:
         ba:2f:ab:1e:6e:cc:11:68:97:0c:e8:6c:06:c5:68:5a:95:46:
         eb:23:ef:e5:45:6f:1d:01:ba:8c:66:00:22:5d:91:86:ba:0f:
         52:e7:0f:a9:ef:b2:11:7e:c5:0c:d1:8d:e8:7e:d3:e4:44:a6:
         da:15:8a:1c:01:47:7d:aa:dd:29:90:ae:2b:30:50:f8:ef:a3:
         80:28:5c:db:cc:f1:7a:39:89:5b:0e:55:1d:c0:0c:ab:dd:c4:
         64:1a:a0:3c:99:1e:2e:d0:72:0e:7b:d6:db:b7:2d:44:3b:29:
         db:18:fe:ff:80:fc:d2:ee:c2:4a:cc:fe:34:90:87:08:7a:94:
         45:b4:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:38 2026 by rpki-client