Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144413.roa
File:                     AS144413.roa (raw, json)
Hash identifier:          A5l0sKfklSyYW6vz9ZIgww0ggEMeQb+23HVgNZt2K5o=
Subject key identifier:   05:5E:BC:A4:89:08:60:37:EF:77:06:D2:12:49:72:2D:93:BD:66:1C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       69C28EDB7B577F2A9F3F5AC93C45618953375CFA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144413.roa
Signing time:             Tue 26 May 2026 02:34:58 +0000
ROA not before:           Tue 26 May 2026 02:29:58 +0000
ROA not after:            Tue 25 May 2027 02:34:58 +0000
asID:                     144413
IP address blocks:        240a:a6e3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c2:8e:db:7b:57:7f:2a:9f:3f:5a:c9:3c:45:61:89:53:37:5c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:29:58 2026 GMT
            Not After : May 25 02:34:58 2027 GMT
        Subject: CN=055EBCA489086037EF7706D21249722D93BD661C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:33:1a:ee:0d:59:e6:f5:40:f6:89:4a:e5:
                    77:f9:9e:c7:e5:1a:e4:12:0b:b4:11:e2:55:c8:91:
                    86:bd:db:c1:ca:d4:68:f3:0e:8a:9b:a2:64:48:8c:
                    46:23:cd:17:7a:2e:94:9e:17:f7:95:74:5d:c2:8c:
                    2a:b8:ec:12:a8:cb:06:a9:fc:a8:63:e8:53:82:94:
                    bf:1f:d4:6e:c0:68:9f:77:b0:7a:b2:4c:ed:c0:7c:
                    1f:78:81:c5:b5:19:e7:0a:42:3a:bf:2d:ee:d2:f2:
                    01:ab:80:b0:f8:ee:4b:cd:17:f2:20:a0:17:fe:a0:
                    2f:e5:f0:f9:83:49:f4:5d:69:88:5f:03:c4:7d:f9:
                    fc:ca:96:94:27:81:50:a0:ec:61:33:ba:b0:26:00:
                    fa:51:30:b1:fb:b5:8b:9a:e6:3f:d3:6c:fa:9e:e7:
                    f1:16:d2:b8:9a:b4:8c:f3:fb:09:b4:0e:fb:0f:27:
                    92:4e:b0:59:e1:31:99:cf:8c:f8:ee:a0:90:00:0a:
                    16:dc:7b:7e:1e:a9:02:f8:66:a5:1e:98:f6:70:00:
                    7b:e5:0f:81:cd:ee:05:a3:7f:59:93:9a:83:8a:ec:
                    aa:9e:8b:90:57:e8:50:83:e2:a1:27:3a:a5:f5:22:
                    e2:23:ab:4c:c3:eb:47:02:f1:e0:21:e2:37:78:1e:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5E:BC:A4:89:08:60:37:EF:77:06:D2:12:49:72:2D:93:BD:66:1C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144413.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6e3::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:fb:b7:37:84:53:84:c0:33:82:6b:93:c8:3a:0b:2b:95:2a:
         2f:5f:26:f8:4b:d3:05:a7:18:14:13:a9:59:2c:3f:39:24:e8:
         c0:e0:57:4d:10:f7:41:4c:69:b8:1b:0b:b9:2c:49:a2:9c:0f:
         9f:05:ce:84:0b:c1:45:ee:f4:11:e9:63:01:1c:12:58:aa:28:
         ef:24:08:0e:26:a5:f1:3d:a0:80:b1:b2:0c:df:67:c6:d2:58:
         b3:0e:cc:e8:54:7e:88:b0:6f:30:d3:14:59:e4:97:bc:19:57:
         4a:69:af:4e:63:8a:00:d0:04:e1:0d:94:8e:8a:43:3d:c6:f2:
         d2:8c:3a:6e:4b:10:3f:42:16:7c:2a:64:5c:a1:ca:73:7b:ac:
         13:b0:cf:5e:f6:7f:ad:a8:6e:30:94:38:53:32:43:b7:f6:ec:
         ab:56:06:ca:7f:b8:57:96:e8:5f:76:dc:f8:4d:dc:15:13:77:
         c7:38:ac:39:23:ca:59:bb:c3:6d:e2:b5:3f:25:bb:e9:c0:dd:
         19:4e:c4:29:ad:e0:2b:d3:a0:57:d8:66:eb:6c:5c:59:bb:66:
         7e:17:cf:96:82:ba:60:f8:c2:b9:2e:13:ff:15:4d:b6:77:95:
         62:25:c2:ef:a2:88:b1:fc:b0:8a:59:7c:0d:98:d9:2b:3d:8c:
         95:d3:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:18 2026 by rpki-client