Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144454.roa
File:                     AS144454.roa (raw, json)
Hash identifier:          PR758D2n7ck949hRLOjCbk19jLVeY3SIKk7ES4KnaZg=
Subject key identifier:   EA:56:89:BB:1A:D0:3B:FA:C2:39:1C:8B:8C:13:A5:05:4C:CB:63:54
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       438DD30DF721CAB66F541CB52B7FA4D3862DC8D3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144454.roa
Signing time:             Mon 25 May 2026 01:20:35 +0000
ROA not before:           Mon 25 May 2026 01:15:35 +0000
ROA not after:            Mon 24 May 2027 01:20:35 +0000
asID:                     144454
IP address blocks:        240a:a70c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8d:d3:0d:f7:21:ca:b6:6f:54:1c:b5:2b:7f:a4:d3:86:2d:c8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:35 2026 GMT
            Not After : May 24 01:20:35 2027 GMT
        Subject: CN=EA5689BB1AD03BFAC2391C8B8C13A5054CCB6354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:80:bd:ca:07:a1:e4:a2:c1:19:ca:eb:24:
                    e9:66:c9:76:fe:d6:e8:29:74:8e:e8:d0:fa:3d:09:
                    4d:ed:45:4d:fc:2d:b0:31:10:d4:ef:ce:27:7e:6f:
                    59:b5:8e:9d:d5:b3:08:7b:98:0a:5f:9b:55:0c:82:
                    10:d9:a1:35:04:73:0f:7d:42:36:8b:a4:fb:d3:e5:
                    4a:78:51:c5:a7:82:4a:df:8c:ef:19:85:d0:f3:1b:
                    3c:bc:e4:f9:d9:4a:10:84:ec:7a:d0:1d:d1:08:e2:
                    28:eb:0f:67:19:36:e9:7a:9b:34:95:3a:77:5e:38:
                    64:28:6a:d6:b7:76:2c:4c:76:b1:63:f5:9a:c9:54:
                    c8:81:95:f2:0e:a0:be:db:2f:01:32:fe:6c:db:a1:
                    07:1e:ae:e4:9c:74:97:87:08:67:26:05:1b:9b:0b:
                    59:a6:23:4c:0d:9a:ba:39:2e:4c:16:4f:24:b6:7a:
                    1d:5d:99:be:94:20:9d:9c:5c:8d:cd:cb:d5:3d:d7:
                    0a:75:93:8a:34:4e:fe:f8:d4:06:ba:21:e7:3f:0a:
                    05:fd:19:2b:96:25:4b:14:2f:e1:40:1f:c4:3f:5c:
                    b8:a5:0b:aa:13:f6:c1:6b:3a:42:9a:42:32:cf:9a:
                    f0:a7:aa:9e:0a:d0:9f:b5:b9:5b:67:e5:4a:3f:89:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:56:89:BB:1A:D0:3B:FA:C2:39:1C:8B:8C:13:A5:05:4C:CB:63:54
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a70c::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:f6:6c:bb:08:85:e5:47:61:37:bf:74:26:c0:2e:4b:70:ba:
         b1:33:fa:6c:47:46:41:12:f1:33:3b:c0:6f:ae:f8:7d:3e:49:
         c0:b6:38:1e:b5:b1:bf:f4:b6:93:a2:d1:af:ba:c4:d7:b2:c7:
         15:44:a8:0c:e0:70:6c:81:91:b1:6d:cb:38:8f:40:99:56:e2:
         fe:db:08:ac:bf:de:f5:5c:1d:ba:fc:3d:cc:50:0f:2b:98:7a:
         1a:16:07:da:a3:73:38:26:f2:14:fb:ed:6a:71:1c:6d:47:37:
         8d:cb:a4:58:f5:e4:e8:52:e8:24:43:8f:2a:b8:c2:31:05:67:
         1d:8c:fe:6b:d8:06:6a:91:04:2b:e0:d3:1d:a7:7f:b7:88:1c:
         9a:6c:8a:1e:5e:55:35:ef:58:9a:23:a2:e5:b4:94:1c:e2:e2:
         47:11:85:2f:72:e3:4c:79:d2:21:6c:0b:e3:23:cb:c5:fd:25:
         a9:cb:1f:39:4e:b2:2d:91:9a:1f:f8:8f:a5:b4:64:86:01:33:
         9e:6c:f5:b1:c9:e8:c6:4d:54:e0:3f:81:b8:cd:ab:5d:f0:54:
         40:94:c0:0f:e4:c2:a1:ba:66:83:43:69:71:bb:65:37:b3:23:
         c6:a6:4a:57:f9:5f:b3:9a:bf:9d:54:6d:b3:3c:19:99:55:97:
         5c:e8:dc:a8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQ43TDfchyrZvVBy1K3+k04YtyNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MzVaFw0yNzA1MjQwMTIwMzVaMDMxMTAvBgNV
BAMTKEVBNTY4OUJCMUFEMDNCRkFDMjM5MUM4QjhDMTNBNTA1NENDQjYzNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdbIC9ygeh5KLBGcrrJOlmyXb+
1ugpdI7o0Po9CU3tRU38LbAxENTvzid+b1m1jp3Vswh7mApfm1UMghDZoTUEcw99
QjaLpPvT5Up4UcWngkrfjO8ZhdDzGzy85PnZShCE7HrQHdEI4ijrD2cZNul6mzSV
OndeOGQoata3dixMdrFj9ZrJVMiBlfIOoL7bLwEy/mzboQceruScdJeHCGcmBRub
C1mmI0wNmro5LkwWTyS2eh1dmb6UIJ2cXI3Ny9U91wp1k4o0Tv741Aa6Iec/CgX9
GSuWJUsUL+FAH8Q/XLilC6oT9sFrOkKaQjLPmvCnqp4K0J+1uVtn5Uo/iRd5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU6laJuxrQO/rCORyLjBOlBUzLY1QwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NDU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnDDANBgkqhkiG9w0BAQsFAAOCAQEAZvZs
uwiF5UdhN790JsAuS3C6sTP6bEdGQRLxMzvAb674fT5JwLY4HrWxv/S2k6LRr7rE
17LHFUSoDOBwbIGRsW3LOI9AmVbi/tsIrL/e9Vwduvw9zFAPK5h6GhYH2qNzOCby
FPvtanEcbUc3jcukWPXk6FLoJEOPKrjCMQVnHYz+a9gGapEEK+DTHad/t4gcmmyK
Hl5VNe9YmiOi5bSUHOLiRxGFL3LjTHnSIWwL4yPLxf0lqcsfOU6yLZGaH/iPpbRk
hgEznmz1scnoxk1U4D+BuM2rXfBUQJTAD+TCobpmg0NpcbtlN7MjxqZKV/lfs5q/
nVRtszwZmVWXXOjcqA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:42 2026 by rpki-client