Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144429.roa
File:                     AS144429.roa (raw, json)
Hash identifier:          afcu8d67BWLFtVZ5cP8O0dXlmQhQ8p+exsgQ0CF/mdw=
Subject key identifier:   15:D9:31:82:49:57:E2:71:C2:97:C1:0E:28:B6:8D:64:03:6F:31:6A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6C5F6FFBA69BDFF370EE95BB5B27ACAF9B7022FB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144429.roa
Signing time:             Mon 25 May 2026 01:51:35 +0000
ROA not before:           Mon 25 May 2026 01:46:35 +0000
ROA not after:            Mon 24 May 2027 01:51:35 +0000
asID:                     144429
IP address blocks:        240a:a6f3::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5f:6f:fb:a6:9b:df:f3:70:ee:95:bb:5b:27:ac:af:9b:70:22:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:35 2026 GMT
            Not After : May 24 01:51:35 2027 GMT
        Subject: CN=15D931824957E271C297C10E28B68D64036F316A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:59:a4:3c:1a:82:1d:64:21:5b:19:6b:18:48:
                    26:2f:5e:8b:62:fd:09:0d:f6:b1:bf:43:20:63:32:
                    1e:2c:f1:6e:fa:33:64:ab:90:3b:b7:5b:02:08:fc:
                    88:47:ec:ca:2e:8f:90:eb:92:09:a6:85:e3:60:35:
                    18:d2:dc:74:66:b6:95:38:c9:b2:36:34:61:96:37:
                    05:bc:52:1a:8b:90:d0:20:9b:2a:b4:bb:97:8f:0a:
                    97:03:b9:37:32:5b:d0:53:93:0b:9b:2f:fe:67:ec:
                    c3:e8:8f:e1:d8:96:0f:13:fe:fb:93:2a:4b:cb:b5:
                    c2:79:db:12:c9:d1:f6:1e:2b:fc:bf:16:f0:a4:c6:
                    5f:67:92:82:05:70:f3:5c:0e:51:93:c0:cf:a7:d8:
                    88:a5:09:a9:cd:13:4f:47:bf:b7:80:88:d9:49:b3:
                    ab:be:01:f3:79:49:33:3b:85:e5:03:15:ff:f7:f7:
                    61:8d:4f:e9:2f:cb:07:98:0c:84:84:ab:2c:00:b5:
                    e6:fe:e3:08:a3:d7:a8:6b:a6:1e:40:35:57:57:15:
                    11:4f:d0:f7:3f:6f:4b:82:0c:90:91:60:e9:3c:9b:
                    0c:c7:77:f1:c4:30:27:07:5e:16:18:96:3d:43:7d:
                    77:7a:ae:31:ae:0a:9d:8f:6c:14:41:fc:a1:72:a0:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D9:31:82:49:57:E2:71:C2:97:C1:0E:28:B6:8D:64:03:6F:31:6A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144429.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6f3::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:0c:46:19:62:5a:fa:19:69:1e:4f:ba:25:80:3e:5a:f2:43:
         6f:3b:41:c1:73:49:f6:8f:6a:f3:cc:5f:79:11:24:4b:43:4d:
         f6:1c:6b:71:38:3a:f8:85:b5:7d:18:3e:26:e7:fa:77:e6:16:
         64:63:0b:df:4d:94:b8:cf:84:f3:d9:16:f2:f2:6a:c9:11:ba:
         c6:0a:b1:92:c0:c7:94:32:f4:a9:89:f5:c4:74:27:6f:a7:08:
         39:2f:21:ec:0c:57:d6:4e:f6:25:5a:46:4a:a0:e5:dc:6d:c8:
         11:8a:e4:4f:f5:6a:9c:9e:40:07:2a:97:8b:3e:9f:91:98:1a:
         7f:f0:2c:d8:5a:d8:aa:8f:4e:57:d4:73:95:5a:4e:1f:d1:4f:
         45:62:63:6e:a0:fa:71:2e:23:4b:f3:f8:3c:70:23:10:68:3d:
         6f:e7:f3:3c:43:eb:f7:9c:56:12:76:10:cc:6b:d9:75:ed:00:
         27:09:e6:5e:63:7b:82:61:43:61:a9:7a:e5:bb:1e:7c:af:93:
         2a:5f:68:d0:a3:71:dd:6b:f7:7d:f3:c7:7d:23:b9:4e:7e:fb:
         98:6f:79:03:99:66:b8:5b:8c:5a:c2:ef:4d:0e:e5:ad:26:71:
         eb:cc:ec:66:96:c3:57:c2:6a:fb:dd:06:36:5a:57:24:4b:ba:
         88:10:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:57 2026 by rpki-client