Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144422.roa
File:                     AS144422.roa (raw, json)
Hash identifier:          2rkcoAjBD9C9fB3hkOPMuoGKxv63e3Ei2jtKgbcEGSo=
Subject key identifier:   84:A8:1C:22:44:07:9C:6F:28:CC:CA:7D:C0:89:2B:C3:CB:3D:B3:1C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       50EF6B142B91AC019DBDC02484465CE644695DA2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144422.roa
Signing time:             Tue 26 May 2026 02:34:55 +0000
ROA not before:           Tue 26 May 2026 02:29:55 +0000
ROA not after:            Tue 25 May 2027 02:34:55 +0000
asID:                     144422
IP address blocks:        240a:a6ec::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ef:6b:14:2b:91:ac:01:9d:bd:c0:24:84:46:5c:e6:44:69:5d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:29:55 2026 GMT
            Not After : May 25 02:34:55 2027 GMT
        Subject: CN=84A81C2244079C6F28CCCA7DC0892BC3CB3DB31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:13:56:60:43:02:54:cd:12:76:a7:61:10:
                    eb:b7:8d:fb:f9:98:2d:45:af:13:15:0c:ae:73:03:
                    ae:a3:f6:79:76:1c:1f:70:9e:56:20:14:42:12:9d:
                    36:00:8c:bf:62:17:f6:b7:a9:fd:61:e8:8f:61:e7:
                    58:f7:30:4d:07:3c:1a:39:73:bb:3e:12:41:25:77:
                    81:e7:46:4e:25:a1:46:31:5e:9e:b0:ae:c9:bf:ce:
                    f2:5b:1d:d6:f1:5c:83:13:8d:1e:f1:95:d1:43:45:
                    cd:2a:be:db:e5:cd:80:3e:5f:7d:c2:69:b3:84:20:
                    b3:82:b5:44:a9:e3:fe:01:6b:d3:00:44:3c:2c:0d:
                    07:19:83:26:86:ce:d2:b7:23:70:fa:3f:f9:c6:93:
                    5c:b6:e8:38:52:ec:63:a8:bc:68:ca:11:d8:89:83:
                    46:34:04:13:e4:c9:f1:6a:d2:c8:cd:69:31:1d:ad:
                    ae:cf:e3:62:81:53:16:3b:5e:16:44:33:a7:f3:ba:
                    d4:97:ea:ab:7d:06:84:76:3d:3c:c0:81:0d:84:9e:
                    2f:3b:ed:ac:36:cf:69:7a:88:5f:cc:a5:71:c5:2a:
                    b4:51:08:00:cd:89:0c:77:9b:af:f7:08:ca:7b:c6:
                    1a:81:77:d2:92:78:9f:4e:76:65:9e:a7:e5:47:2e:
                    d1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A8:1C:22:44:07:9C:6F:28:CC:CA:7D:C0:89:2B:C3:CB:3D:B3:1C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144422.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:28:7d:3a:1e:92:ca:f6:3e:a5:9e:af:3f:db:d9:a6:56:f1:
         20:03:cf:ec:c6:d5:00:e3:fb:97:8e:50:7c:cf:59:a2:26:27:
         7f:9e:55:ce:ae:c8:35:fc:c7:3d:0c:11:a2:20:5b:a1:22:5a:
         af:06:68:58:bf:94:a0:3f:c0:06:a3:24:13:b3:9e:e3:2c:88:
         6a:c2:af:e0:69:51:69:9e:d1:e7:63:6c:be:92:40:2a:62:7c:
         d9:ba:96:84:37:b4:13:69:07:a1:64:8f:63:fd:3a:49:5d:da:
         1c:9f:b5:b3:7d:e4:25:c4:7d:92:35:92:17:d9:9a:f9:02:96:
         e3:de:8c:f1:ed:a0:b2:37:8b:76:c8:8f:35:7e:f8:53:36:4c:
         68:ce:ee:6c:43:d1:98:3b:f8:aa:cc:f4:ed:88:86:14:ce:e4:
         d8:04:1a:56:66:03:ca:1e:50:ae:f4:58:e6:6e:b5:32:e1:3e:
         8c:ad:d6:c8:92:75:f7:80:4b:cc:25:45:21:3c:2a:47:72:2e:
         66:d8:cc:ce:88:0e:e4:69:62:ba:d9:5b:b1:d3:bb:9c:45:b7:
         2c:6c:8f:dc:04:27:07:2c:08:a5:f0:e3:65:54:45:ba:08:ef:
         69:8c:7d:3a:00:1a:87:39:4e:02:55:b1:9d:95:8a:1c:c1:29:
         98:cb:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:41 2026 by rpki-client