Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144416.roa
File:                     AS144416.roa (raw, json)
Hash identifier:          LK1eLtayU8C7BAot23xo0s8anybYtNitUpUG15DfSXo=
Subject key identifier:   47:2D:01:B2:07:B3:32:B9:17:8B:97:63:37:74:F2:82:6F:FC:AA:A2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       11302059262A2BE2B0F4F626CA7691E2F7DEC594
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144416.roa
Signing time:             Mon 25 May 2026 01:38:21 +0000
ROA not before:           Mon 25 May 2026 01:33:21 +0000
ROA not after:            Mon 24 May 2027 01:38:21 +0000
asID:                     144416
IP address blocks:        240a:a6e6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:30:20:59:26:2a:2b:e2:b0:f4:f6:26:ca:76:91:e2:f7:de:c5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:21 2026 GMT
            Not After : May 24 01:38:21 2027 GMT
        Subject: CN=472D01B207B332B9178B97633774F2826FFCAAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:33:1b:a7:53:c9:86:e5:bf:ca:02:88:81:
                    9f:24:c2:1c:82:6c:ab:6a:82:37:62:a9:e5:00:63:
                    0f:31:77:c6:58:51:e5:bf:4a:f8:9d:e3:fd:a6:32:
                    e8:a3:9f:7f:14:03:39:a2:4f:3e:35:76:88:99:4f:
                    95:d9:c2:f1:fe:38:b2:e2:e6:a1:9d:1e:de:30:77:
                    94:80:8e:30:59:3f:09:bf:90:0b:fd:da:07:02:69:
                    c1:4a:10:23:7a:cf:2d:1e:6b:62:29:a4:f8:d0:57:
                    49:84:34:6d:38:c8:1d:a6:b3:ee:a3:e1:11:00:c0:
                    bd:43:30:f5:9e:20:1b:98:a5:17:f3:11:cb:64:ac:
                    7b:13:38:23:a2:26:07:d9:3c:9e:9f:a4:96:39:d1:
                    22:69:21:e5:d1:f6:5b:01:97:65:59:f7:00:aa:95:
                    8f:22:06:43:04:66:4f:58:8b:54:2f:fd:5d:49:70:
                    bf:35:a5:27:fa:77:4f:23:5d:31:8c:c6:b1:dc:c9:
                    e8:e8:27:d2:45:f4:23:8c:7e:3e:dd:e0:d9:78:f5:
                    da:68:4f:5d:4f:a0:c4:d2:f5:d6:f0:9b:0f:c4:cd:
                    38:c9:01:8d:db:4b:55:c5:ef:40:7a:57:40:27:e3:
                    c7:df:f6:bb:b9:35:c5:37:ee:e4:a5:de:23:81:62:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2D:01:B2:07:B3:32:B9:17:8B:97:63:37:74:F2:82:6F:FC:AA:A2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144416.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:09:40:bf:ef:31:d7:90:e2:65:5b:de:61:bb:fc:c2:24:ba:
         d1:f7:3a:af:b3:93:c5:53:e2:c4:53:44:4b:4e:1c:6e:a9:e6:
         6b:4d:1d:ea:94:7b:c1:f0:72:a8:16:94:a2:79:2e:8d:e0:28:
         f4:1f:4f:b4:72:fd:f6:af:8d:4c:b8:07:a6:d6:1b:fc:f2:16:
         4e:ee:7d:67:cc:20:b9:b8:b5:f2:d1:30:e6:e4:24:ea:97:7b:
         d4:d7:d5:43:7b:81:d7:cf:74:36:cd:f3:c8:e0:46:44:4b:30:
         96:e1:72:bc:88:49:9f:90:66:0c:b8:5f:3d:9e:79:23:fa:23:
         46:1d:7f:5e:0d:1a:14:57:17:45:22:43:ec:02:cd:a6:40:fd:
         e8:6f:94:fb:9f:cc:62:a2:0c:f8:38:24:24:b0:b6:26:31:3c:
         98:33:91:c4:3f:d5:54:51:5c:9c:5d:b4:a0:b0:4d:81:19:83:
         13:41:fa:7a:10:b1:47:99:ae:f7:b3:c9:78:62:2c:48:8a:41:
         ad:3b:1c:d1:d3:d5:01:cd:0d:59:0c:64:49:cb:5e:52:0f:d4:
         53:f9:6a:aa:50:ea:e5:6d:2d:8e:21:e8:41:d8:8a:d8:84:84:
         48:d5:ac:f0:22:c8:05:f9:b0:89:0e:c8:d2:38:22:e3:9d:e5:
         27:e8:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:03 2026 by rpki-client