Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144452.roa
File:                     AS144452.roa (raw, json)
Hash identifier:          ZvwNufuagqJkVXqRQLcmxE/bScHENwROlL9XZcS/QwI=
Subject key identifier:   27:B5:F6:12:F4:31:54:14:48:1C:96:12:E7:00:57:13:91:24:B3:48
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       77E72F3316EEB86592725920519FD2B444A76801
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144452.roa
Signing time:             Tue 26 May 2026 02:35:08 +0000
ROA not before:           Tue 26 May 2026 02:30:08 +0000
ROA not after:            Tue 25 May 2027 02:35:08 +0000
asID:                     144452
IP address blocks:        240a:a70a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e7:2f:33:16:ee:b8:65:92:72:59:20:51:9f:d2:b4:44:a7:68:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:30:08 2026 GMT
            Not After : May 25 02:35:08 2027 GMT
        Subject: CN=27B5F612F4315414481C9612E70057139124B348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:25:4a:9f:9c:b1:a2:39:b0:82:b9:cb:16:c9:
                    bf:fb:3d:1f:49:de:77:57:48:27:fe:e3:74:09:bc:
                    02:f8:55:30:2c:0f:f1:f6:6e:68:d7:99:d6:d0:c9:
                    17:40:3c:05:43:35:f1:95:d1:81:2e:7e:ea:28:ba:
                    95:6f:89:ef:61:e5:92:30:0b:86:dc:0c:72:63:10:
                    a7:ec:4d:ef:7b:9b:b6:60:db:8e:7d:95:0f:da:51:
                    c1:46:d6:5a:a5:6e:c1:86:73:e5:cf:9b:16:47:7e:
                    9f:d7:da:29:ab:3d:23:b8:0f:04:e1:5d:bc:07:e5:
                    0f:bf:00:d1:e6:81:90:72:3c:48:c1:c0:fc:f1:ad:
                    b6:e4:bd:2e:ea:a2:3f:24:a1:54:44:f0:bf:f0:9d:
                    2d:58:ca:6f:4c:37:f6:22:ff:f8:42:29:8c:40:eb:
                    29:80:67:04:c3:67:b5:7e:c6:cf:5e:f2:08:5c:61:
                    bf:84:80:f7:67:a4:dd:4c:d0:5a:cf:d0:ff:04:48:
                    fb:a6:f8:68:be:9c:80:ad:f8:1a:58:25:fb:7a:fd:
                    6c:03:f9:b7:fe:11:a2:de:b5:45:fc:e3:91:fb:ae:
                    e7:b2:a1:06:cf:21:67:68:26:8f:66:6d:8f:a0:30:
                    e2:fe:00:8d:25:a8:91:04:eb:11:7b:9a:d4:4d:1b:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B5:F6:12:F4:31:54:14:48:1C:96:12:E7:00:57:13:91:24:B3:48
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144452.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a70a::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:ab:fd:d5:8a:4d:2c:b7:8f:a0:f5:1d:9f:10:43:9b:1e:99:
         dd:82:63:7c:f9:a4:90:39:0a:da:ca:b3:d7:e9:e8:83:d4:eb:
         df:20:20:76:61:76:b5:75:c2:ee:49:33:71:2c:36:2d:cd:9c:
         ba:a9:b9:55:08:c5:19:a2:4d:33:c5:f0:e6:c4:d3:94:a7:4f:
         0d:74:ae:56:68:ce:de:58:25:14:71:0a:15:0f:a8:70:38:0c:
         91:04:c3:d4:56:e3:15:37:15:54:ee:09:be:d7:c5:6e:6c:f6:
         c6:ad:2f:36:63:71:88:08:bb:0f:67:dd:8d:1f:ca:3c:3b:7b:
         67:ca:43:35:67:d1:26:ff:9a:ac:e3:bd:65:32:97:40:ef:17:
         16:ff:33:d6:6e:c2:3d:a7:a4:f1:79:44:e3:98:77:9c:d6:ab:
         6d:96:0a:3f:b0:31:9e:e1:f6:58:c1:7b:58:26:b0:c6:cb:39:
         3e:56:60:f4:2b:5f:81:41:dc:36:36:6b:56:19:c0:fb:95:f5:
         da:54:60:32:6b:a6:e0:70:d9:61:7a:37:27:3a:e7:43:39:40:
         e0:0b:20:cc:eb:3e:df:f8:90:6a:48:2b:20:bb:57:8a:07:5e:
         a0:be:bb:45:09:c3:15:47:78:29:1e:17:e2:5e:ae:11:ca:ca:
         d2:c0:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:59 2026 by rpki-client