Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144442.roa
File:                     AS144442.roa (raw, json)
Hash identifier:          vvyI5BsEbdH4uGm9XLI9qCu8imvA0YXqTNor+P1lWaM=
Subject key identifier:   FB:3D:2E:7E:CF:C3:62:69:B0:A7:81:2D:B9:D9:91:4E:81:95:33:09
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3B5D7CE139D871D649B3F4EB2E0D2082927C149C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144442.roa
Signing time:             Tue 26 May 2026 01:13:29 +0000
ROA not before:           Tue 26 May 2026 01:08:29 +0000
ROA not after:            Tue 25 May 2027 01:13:29 +0000
asID:                     144442
IP address blocks:        240a:a700::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5d:7c:e1:39:d8:71:d6:49:b3:f4:eb:2e:0d:20:82:92:7c:14:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:29 2026 GMT
            Not After : May 25 01:13:29 2027 GMT
        Subject: CN=FB3D2E7ECFC36269B0A7812DB9D9914E81953309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:96:33:98:e8:a4:63:c4:1f:18:32:3f:f1:33:
                    49:b9:e1:b9:fa:1f:e0:54:47:44:73:97:60:47:7d:
                    5f:e1:89:25:8d:3d:f8:73:a4:14:56:7e:db:64:d2:
                    60:0b:62:7d:8e:6f:9e:b9:91:d4:01:d8:60:f8:ad:
                    4f:3a:de:30:a3:aa:09:c4:d4:e6:40:c2:b1:bd:e4:
                    c9:71:cd:ff:1f:15:f7:5c:14:45:bd:9a:2a:25:d0:
                    90:a7:c3:eb:93:11:b7:0c:a1:fa:4e:7f:4e:82:cc:
                    3c:52:a4:30:de:d3:71:a4:b4:47:b0:08:8c:eb:59:
                    cc:80:f7:8f:cb:51:68:44:8a:cf:a8:76:4a:d1:3c:
                    3c:00:62:08:b3:aa:85:ce:ed:0a:4f:e0:86:93:6d:
                    ef:78:d5:33:9b:3b:d3:b6:ad:42:00:23:96:85:92:
                    ed:81:ef:55:27:0b:07:67:95:f4:6d:c3:20:0b:f3:
                    41:02:a3:07:29:3b:5f:94:cf:49:f1:bc:1a:0d:4a:
                    29:4b:2c:f1:ec:f4:7b:b5:cd:6f:8b:2e:57:fe:d4:
                    87:fa:75:0f:91:48:dd:a1:c6:eb:7e:bf:5d:b0:9a:
                    d4:12:4b:eb:bf:7b:4c:06:b0:de:19:e8:88:f1:18:
                    84:da:1e:48:f1:b4:9b:f2:ae:e7:34:9c:2b:05:8b:
                    b6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3D:2E:7E:CF:C3:62:69:B0:A7:81:2D:B9:D9:91:4E:81:95:33:09
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144442.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a700::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:38:65:e9:11:b9:ad:de:cd:95:8d:63:ba:36:25:8b:9b:09:
         96:09:58:fc:39:35:92:3d:28:76:2a:d9:cc:94:be:c6:73:fc:
         be:28:03:1c:2b:b3:2f:be:e8:2f:18:aa:45:18:66:17:8c:38:
         75:f5:53:58:2b:d8:1d:80:f6:b1:18:d4:56:19:96:eb:bb:4d:
         bc:96:31:e0:cc:90:7d:e5:80:0d:ab:ae:a4:c4:26:af:f2:3c:
         a7:23:15:73:1f:a1:28:7a:64:e9:1d:28:eb:c7:c1:a7:4f:03:
         f8:2d:08:0c:75:bc:ff:66:67:e2:9f:46:c4:e7:33:11:6a:1c:
         c8:1a:4a:a9:f4:07:fd:55:d5:74:5c:94:ea:d2:71:24:cf:15:
         5d:08:d9:63:b9:35:0b:bb:80:e2:47:55:27:fa:cf:89:7a:bf:
         2b:d5:6e:5f:18:b2:8a:20:45:3c:37:b0:10:50:f2:47:db:b8:
         e1:b5:0e:54:10:ec:17:9f:fa:96:5e:da:4a:f7:5f:83:19:b1:
         0d:3d:1a:fd:df:de:b5:6f:f9:01:18:51:b1:6b:a1:08:b3:12:
         1b:44:12:6e:af:d4:9a:1c:fe:51:ee:6c:69:f9:1b:30:5a:83:
         54:70:f2:4f:13:37:57:01:2b:69:b6:8c:06:bd:64:52:e7:d4:
         c5:43:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client