Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144446.roa
File:                     AS144446.roa (raw, json)
Hash identifier:          F/toSPu7NztwmkdDIJoPuJidu6seswPaQxOEy5jn6BE=
Subject key identifier:   90:FB:A3:FA:04:A5:66:02:9C:0D:C7:98:7C:56:0F:72:FC:79:A9:9B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       75ADE04D16449B36FFD377FFE61E4C8B520D3C92
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144446.roa
Signing time:             Mon 25 May 2026 01:38:37 +0000
ROA not before:           Mon 25 May 2026 01:33:37 +0000
ROA not after:            Mon 24 May 2027 01:38:37 +0000
asID:                     144446
IP address blocks:        240a:a704::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ad:e0:4d:16:44:9b:36:ff:d3:77:ff:e6:1e:4c:8b:52:0d:3c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:37 2026 GMT
            Not After : May 24 01:38:37 2027 GMT
        Subject: CN=90FBA3FA04A566029C0DC7987C560F72FC79A99B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:59:9b:7f:30:9c:62:ca:56:6b:55:b7:5f:6f:
                    9a:66:97:c4:89:d2:ef:2d:59:10:1b:d1:31:06:99:
                    21:1d:ae:9b:af:b9:38:57:12:57:18:6c:2a:64:63:
                    b0:ae:09:bb:01:81:30:87:5a:6c:40:7a:61:6e:3e:
                    c1:87:b4:70:2e:41:6c:90:8c:f8:7d:f5:0b:62:87:
                    dd:b6:8c:1a:4e:0a:72:b3:ae:4c:91:91:ad:94:4e:
                    6b:57:15:15:3d:4b:95:c8:f9:27:01:57:08:67:2d:
                    0e:a8:e8:e5:08:dc:90:e8:6f:55:00:44:4a:b6:d3:
                    e3:c0:2d:31:09:7f:8e:b5:6c:b1:da:d2:97:1c:fa:
                    c5:0d:03:48:da:8d:5b:c4:54:fe:c8:9b:f1:a0:d4:
                    b9:da:c3:07:aa:1a:ea:3d:a0:17:06:f3:97:73:0d:
                    a9:20:5e:79:f0:b2:9f:6d:7a:5f:02:84:7f:77:2d:
                    ca:47:7f:86:d3:7b:7c:c0:44:dd:a6:be:a6:44:8e:
                    da:aa:a5:7f:c8:0d:2d:8d:2e:e1:d3:8e:a9:fc:d1:
                    ad:db:89:1a:90:74:aa:bd:53:0d:50:ba:81:65:1f:
                    61:2f:41:27:d7:e4:7c:bd:19:4e:6f:b5:5c:97:34:
                    9d:df:91:87:7f:de:3d:fd:6e:20:af:20:75:03:d1:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FB:A3:FA:04:A5:66:02:9C:0D:C7:98:7C:56:0F:72:FC:79:A9:9B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144446.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a704::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:5c:b0:64:64:63:b9:c9:6f:66:d5:38:4e:48:07:70:a2:4f:
         69:95:de:e0:ab:82:b9:a2:e5:c9:1d:b0:0d:09:9c:a9:fa:56:
         e3:5f:81:b2:e4:ce:48:0a:f7:fd:cd:aa:08:1c:11:42:77:b6:
         b6:d1:9b:89:53:04:9e:df:aa:07:be:dd:8b:64:be:2e:c3:2a:
         9e:9a:cb:45:39:2e:05:ee:13:59:85:29:df:e4:08:d6:8e:3f:
         63:e7:98:4b:51:80:59:41:92:3a:6b:cf:df:d9:c5:42:2c:92:
         62:bf:25:b1:68:fe:51:1c:80:04:36:ab:44:68:95:ac:e3:ef:
         40:44:a1:4c:df:40:0a:a8:3e:4a:f0:fb:35:16:87:1e:69:9d:
         99:56:9d:e9:59:58:e3:52:77:37:66:9d:c2:84:87:d9:5d:40:
         c6:3e:ea:cb:b4:f6:64:b3:62:b8:31:71:3e:58:95:1f:21:89:
         43:66:77:69:eb:18:9d:6e:6e:a0:4f:7c:86:b5:e9:98:95:ea:
         a4:d0:25:07:ff:c4:83:e5:39:7b:be:2e:f2:94:6c:2e:6d:8a:
         76:09:d3:3c:15:02:d2:79:7b:0b:d5:bb:d3:4a:94:91:25:45:
         16:48:31:b2:9c:32:0a:67:96:32:63:77:30:ad:a8:06:69:73:
         24:f6:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:30 2026 by rpki-client