Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144406.roa
File:                     AS144406.roa (raw, json)
Hash identifier:          Y+nl03n/EKLIsoN9Le6c2FS9XGNi7NjH/DKuyGLfDmU=
Subject key identifier:   9E:83:77:6F:26:F8:86:C2:08:E2:FB:17:DA:23:A7:A4:D7:DC:72:BF
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       57E5ABC38D0A5970355646CA37B65AE49D0F5811
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144406.roa
Signing time:             Fri 22 May 2026 06:46:16 +0000
ROA not before:           Fri 22 May 2026 06:41:16 +0000
ROA not after:            Fri 21 May 2027 06:46:16 +0000
asID:                     144406
IP address blocks:        240a:a6dc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e5:ab:c3:8d:0a:59:70:35:56:46:ca:37:b6:5a:e4:9d:0f:58:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:16 2026 GMT
            Not After : May 21 06:46:16 2027 GMT
        Subject: CN=9E83776F26F886C208E2FB17DA23A7A4D7DC72BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:9d:96:20:e4:27:e3:6e:f1:04:b5:fe:3a:
                    bb:df:06:cb:c3:15:68:3e:21:4a:38:3b:a2:46:9c:
                    45:fc:c0:df:d4:15:03:14:e5:a3:91:ed:a1:96:51:
                    cb:62:07:40:96:22:c4:21:42:6e:e2:6b:72:c7:dd:
                    b1:0e:6b:ab:0b:88:41:ff:23:d9:b6:78:15:b3:39:
                    d5:06:53:9a:28:04:66:ff:c9:c8:34:bd:17:2c:01:
                    71:97:10:4e:93:df:c9:5e:56:31:62:8a:1e:ed:35:
                    69:53:16:b2:77:51:cc:d6:da:bb:93:a1:89:ac:0e:
                    16:31:7d:b2:76:40:2c:37:7c:87:8a:7e:27:8a:e7:
                    21:1f:bc:08:23:b5:8a:1b:45:12:10:a1:2f:52:ef:
                    bd:ca:e4:45:45:80:32:2a:c3:2f:70:5c:ea:5c:c3:
                    06:e1:13:ac:f2:c0:2a:87:81:86:68:e3:6c:4a:0c:
                    13:42:ae:89:fc:cf:ed:86:9b:4c:f8:ce:42:31:8d:
                    0a:b8:d7:66:91:fc:08:69:60:5a:bd:5a:b2:ff:ea:
                    13:cf:52:c8:5a:b9:51:6f:8c:ef:f9:a3:f5:41:2b:
                    8a:1b:13:7b:a0:58:11:5d:a3:4a:58:98:fd:95:82:
                    96:45:79:ec:52:e0:4c:7a:77:42:c3:00:9d:0d:2a:
                    04:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:83:77:6F:26:F8:86:C2:08:E2:FB:17:DA:23:A7:A4:D7:DC:72:BF
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144406.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:70:a8:ca:28:18:10:9d:e6:2b:a5:29:90:f0:e4:f2:e8:01:
         5d:c1:2d:2a:2e:f0:6c:5f:3e:f0:cf:cd:47:6f:46:10:49:65:
         82:33:b6:56:c8:f4:2b:98:08:6b:fe:15:de:09:25:35:32:0a:
         85:99:87:78:4c:4c:ca:78:ce:15:54:89:68:2f:b1:a6:74:c7:
         0a:eb:f5:da:fc:ea:52:2b:ee:77:bd:fb:5f:13:e0:b0:0f:d4:
         4a:56:d3:05:a7:9b:34:b9:85:7d:0c:af:ce:67:87:28:80:98:
         74:cd:65:ea:35:4f:f3:a1:63:ec:94:ae:1b:d8:f8:29:52:5c:
         07:09:f1:a0:b2:9d:99:29:04:c9:63:ea:a3:6c:a6:f2:96:ce:
         0e:82:53:43:b0:64:19:6e:07:82:85:ec:af:35:bd:11:7d:c5:
         ce:01:b0:fd:13:30:f6:8a:f1:d2:d2:3d:15:0a:19:ac:39:8b:
         83:0e:b1:0d:95:16:c9:61:e9:47:3d:cd:0a:3d:ed:4f:cd:71:
         2c:57:54:83:7a:65:02:cf:20:cc:66:db:2c:7c:bc:37:55:11:
         87:1f:d2:fa:d2:18:fc:5d:d2:06:3e:75:b4:7a:48:50:c1:4c:
         f4:8a:25:56:8f:e4:17:82:90:f7:56:43:04:ff:02:f2:9e:4f:
         73:2d:8a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:21 2026 by rpki-client