Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144430.roa
File:                     AS144430.roa (raw, json)
Hash identifier:          gmCoL1mbEqCE0ZTy+H7hrq1btRGSf5djuR/U117mltg=
Subject key identifier:   4F:C2:74:72:9C:49:7D:FF:9C:75:CE:62:CC:B7:36:3B:C0:CD:33:7F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6AFE008793C032B4583157A87521F2E6E3DE5ACF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144430.roa
Signing time:             Fri 22 May 2026 06:58:23 +0000
ROA not before:           Fri 22 May 2026 06:53:23 +0000
ROA not after:            Fri 21 May 2027 06:58:23 +0000
asID:                     144430
IP address blocks:        240a:a6f4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fe:00:87:93:c0:32:b4:58:31:57:a8:75:21:f2:e6:e3:de:5a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:23 2026 GMT
            Not After : May 21 06:58:23 2027 GMT
        Subject: CN=4FC274729C497DFF9C75CE62CCB7363BC0CD337F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:bc:fb:1c:5e:57:16:20:87:30:d5:be:0c:
                    72:c3:1c:f9:47:e0:fb:20:23:64:92:df:ef:93:0d:
                    26:b8:0e:0c:45:c4:d9:36:b2:53:ad:9e:d5:05:8c:
                    68:d2:69:85:92:81:27:e9:3c:50:71:7b:6c:d7:60:
                    ad:3b:d2:a3:fe:3b:1e:29:35:03:82:68:4c:0a:c5:
                    26:19:73:65:ba:4f:ce:43:2a:5f:c6:77:3d:2f:6e:
                    c5:be:b4:a8:d0:ad:d5:25:cf:c7:9e:3d:51:28:0b:
                    ac:67:32:70:36:da:84:d9:7d:e1:99:35:94:f9:4e:
                    0d:eb:72:e9:6f:0f:a4:e2:0a:22:3c:01:8b:b2:39:
                    41:84:9b:c1:7f:99:ed:db:eb:8d:7b:de:a8:e1:44:
                    d7:88:7a:b2:92:4e:ed:e4:57:25:2d:70:33:b7:6a:
                    bf:42:95:fd:0a:05:d7:ba:b5:7b:67:d0:03:0e:34:
                    31:33:82:0b:00:8e:37:bd:c8:89:2c:af:33:46:cb:
                    d7:e8:06:e8:4f:48:54:94:f6:a9:e9:32:49:53:27:
                    f1:f1:39:fe:50:c5:0e:27:3a:8e:c3:a0:88:f4:bf:
                    83:4e:28:c2:38:c9:59:a6:91:4d:8d:e0:99:b8:b4:
                    06:a4:b0:14:9a:84:3f:01:76:26:cf:8c:fd:61:ae:
                    d4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C2:74:72:9C:49:7D:FF:9C:75:CE:62:CC:B7:36:3B:C0:CD:33:7F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a6f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:6e:fe:bd:3e:fc:1a:e6:ff:00:8e:6c:fc:12:dd:4a:c3:09:
         75:87:df:54:ae:58:ce:a2:ae:b8:86:8d:22:63:88:99:7b:af:
         8b:16:bc:df:2a:7d:34:fa:38:34:af:c4:13:27:bd:bf:64:d5:
         99:d0:68:a2:f0:df:56:4f:19:d2:0f:6f:0b:5a:f0:6f:a8:76:
         e8:2f:29:3f:33:f8:5e:98:f7:cd:fa:2f:76:6a:5d:a9:bc:53:
         a7:8b:60:b1:3e:d3:7b:d8:7e:84:c5:31:c4:f5:74:63:9a:b0:
         fc:50:41:97:1e:21:0b:10:8f:3e:4b:92:2e:74:3e:55:49:13:
         0b:4a:d5:16:2b:58:db:03:f6:13:4f:6f:d0:05:c6:14:1e:07:
         de:55:a3:94:23:6b:ee:d0:f0:2b:5a:01:52:cc:27:06:a8:9e:
         5c:0c:9e:02:4f:cd:6c:c8:f0:02:9c:6d:c4:84:7e:22:d3:33:
         59:c5:2b:a0:2f:38:98:ec:12:eb:3f:2d:dc:28:39:87:b6:9a:
         4c:7e:9a:e6:03:52:56:db:c0:36:da:9a:ee:c5:67:9b:e3:c4:
         99:18:30:df:20:ff:3a:2a:0c:df:47:4b:09:40:f1:8d:8b:d0:
         36:30:0a:14:87:4e:fb:75:c3:a2:0d:61:3d:21:44:98:a7:ee:
         7a:f4:9b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:43 2026 by rpki-client