Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144460.roa
File:                     AS144460.roa (raw, json)
Hash identifier:          tuuRouUv/O+Og+wApGV92SoqntwGtNEyF4QAY32+y40=
Subject key identifier:   95:E3:EC:C3:A2:A7:2B:B2:80:AB:B8:91:4F:1A:E2:C9:5F:04:CB:14
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       44374FA23D67A4C576CBA130788887F773205C67
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144460.roa
Signing time:             Fri 22 May 2026 06:05:20 +0000
ROA not before:           Fri 22 May 2026 06:00:20 +0000
ROA not after:            Fri 21 May 2027 06:05:20 +0000
asID:                     144460
IP address blocks:        240a:a712::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:37:4f:a2:3d:67:a4:c5:76:cb:a1:30:78:88:87:f7:73:20:5c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:20 2026 GMT
            Not After : May 21 06:05:20 2027 GMT
        Subject: CN=95E3ECC3A2A72BB280ABB8914F1AE2C95F04CB14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:8d:b9:e9:fa:d6:98:b4:ed:cc:a1:15:0f:
                    62:91:d2:91:c8:47:c6:52:4a:9a:22:45:16:ca:59:
                    6e:8d:b4:71:9d:eb:fa:5f:4f:8b:1e:8e:71:f2:e4:
                    a7:47:6e:1b:8b:e8:82:83:37:4a:a8:40:a6:7a:05:
                    14:f3:29:4a:98:8d:7a:97:de:21:2c:8d:88:22:82:
                    a1:69:87:89:c0:01:15:61:c3:87:f9:62:e1:ca:6d:
                    53:f0:25:c0:7e:4a:39:c2:59:c8:9c:f5:d0:82:ab:
                    cd:48:81:2f:59:dc:5c:6b:f4:c8:83:46:02:cc:e9:
                    84:38:3a:7c:a6:83:6a:fa:77:8b:ed:0b:cd:a8:3b:
                    91:24:1d:7f:58:24:b5:2c:fa:fc:37:69:6e:03:9c:
                    cf:43:7f:0f:a2:81:54:08:52:28:08:7e:b7:25:76:
                    63:49:1e:22:3c:bd:dc:85:db:88:67:51:03:b7:f2:
                    0c:07:98:03:f9:f5:ac:ff:21:f3:a7:b3:41:7d:93:
                    4d:34:16:09:05:ad:ad:59:fc:7d:b1:01:40:55:74:
                    0c:3e:9f:ea:e4:17:6e:0e:67:6c:63:4a:a4:6d:ca:
                    90:46:2f:6c:d4:16:71:2b:1f:76:17:26:b8:ad:b4:
                    8f:e4:68:57:07:f0:f9:c3:3d:20:e0:14:7c:a4:97:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E3:EC:C3:A2:A7:2B:B2:80:AB:B8:91:4F:1A:E2:C9:5F:04:CB:14
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144460.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a712::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:11:d0:e3:56:96:63:03:26:a3:e6:d9:53:92:ed:6e:a6:6e:
         49:1e:d9:dd:48:e6:92:63:43:97:95:3f:0f:ff:ce:7c:f7:c1:
         b9:7c:20:06:11:c9:c6:59:18:b1:55:8a:45:26:bc:55:6a:83:
         09:e8:47:dd:44:a6:d2:16:8b:27:59:62:35:fe:e6:81:ae:16:
         68:e1:17:a4:81:92:9f:6d:f6:56:0b:cf:af:a3:7e:44:4b:06:
         55:9e:0d:4b:78:0f:61:b2:c7:93:18:e8:e2:4a:71:8c:52:2d:
         83:28:76:c0:66:e5:b5:27:77:4f:b6:ad:c3:83:0b:a1:73:89:
         01:ec:09:60:b2:fe:f3:7e:ac:4b:02:ad:e1:38:b9:2a:53:e8:
         05:a1:11:b8:1a:02:a8:25:0e:b3:a6:bd:7f:dc:f1:ca:3b:ae:
         f7:42:c8:52:ac:02:a2:85:6d:5b:4c:40:bb:73:6b:33:8a:7b:
         23:bd:f1:40:34:24:0e:32:4b:36:9d:56:d6:b8:fa:52:ed:a8:
         af:a1:9b:61:75:ee:19:c2:a1:ba:d1:2d:00:7a:0b:8f:cc:9e:
         d4:47:a1:15:8a:46:e3:e2:71:64:1b:7a:6f:cd:ef:cb:47:ef:
         cc:8d:fa:3d:48:dd:96:ec:58:f4:69:05:be:44:98:2c:d8:e7:
         a0:de:df:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:21 2026 by rpki-client