Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144461.roa
File:                     AS144461.roa (raw, json)
Hash identifier:          iIvCEZQmaEXSsJG+hFtAjkB1IY/8VOwh2EYgVqixICE=
Subject key identifier:   17:28:91:A2:8B:32:ED:39:6F:0E:5B:07:17:BA:BD:4A:BF:80:E0:70
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       194C029646857E039A47407CF692BB68BA4A60B3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144461.roa
Signing time:             Tue 26 May 2026 06:31:06 +0000
ROA not before:           Tue 26 May 2026 06:26:06 +0000
ROA not after:            Tue 25 May 2027 06:31:06 +0000
asID:                     144461
IP address blocks:        240a:a713::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4c:02:96:46:85:7e:03:9a:47:40:7c:f6:92:bb:68:ba:4a:60:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:26:06 2026 GMT
            Not After : May 25 06:31:06 2027 GMT
        Subject: CN=172891A28B32ED396F0E5B0717BABD4ABF80E070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:bb:b1:ba:f2:eb:20:75:71:0b:56:73:d9:
                    f1:17:4f:e3:9a:d5:06:8a:2e:ce:b2:55:19:1a:48:
                    1c:4e:1a:5a:7f:ac:9e:6f:46:e8:f4:6a:06:39:c7:
                    be:65:6c:ec:4c:b8:45:b2:9d:84:c8:5e:af:e5:52:
                    33:21:12:3b:43:c7:03:a0:84:6c:85:02:75:0b:03:
                    aa:4f:c7:a5:f8:38:57:6c:53:04:9d:c8:e6:13:ba:
                    09:df:7a:ae:c7:ac:78:8c:91:9b:72:e7:0e:5a:31:
                    fc:72:dc:5e:40:6e:d7:dc:40:8e:7b:e1:8a:79:00:
                    fb:35:e8:6c:c4:62:09:bf:eb:e4:83:12:04:89:94:
                    54:f4:62:7f:fd:f3:89:8f:5d:9c:20:eb:e4:9a:43:
                    59:80:27:09:e9:ec:4a:8d:fb:74:6b:be:0c:13:09:
                    98:b3:a4:77:fb:64:5a:f4:63:2f:49:48:f2:3f:05:
                    cd:80:ee:88:28:07:9e:c8:82:b1:31:6a:8f:35:a7:
                    b1:3b:a4:65:c8:8a:5c:ab:7d:22:fd:3e:60:ae:25:
                    7c:c0:f4:e8:7e:01:19:dd:2f:d8:14:ca:39:b7:51:
                    98:95:57:15:5b:34:d9:2b:39:24:f1:0c:6e:04:fe:
                    fa:c0:9b:a2:56:26:6e:58:79:bf:fe:78:23:87:74:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:28:91:A2:8B:32:ED:39:6F:0E:5B:07:17:BA:BD:4A:BF:80:E0:70
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144461.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a713::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:42:42:5b:15:e0:f6:73:12:d0:c8:ec:fc:60:c6:e9:84:56:
         eb:7b:bf:52:c4:c9:b6:e4:42:e6:6d:b6:d8:89:8a:bc:65:75:
         bb:1f:17:38:11:0b:46:e6:1b:ce:a7:c4:2f:13:2b:0e:b1:e6:
         e4:c0:7c:64:11:f8:25:89:cb:1c:d8:fc:82:53:5c:5d:9e:15:
         dd:b0:4a:64:60:a1:27:5c:26:be:b3:29:12:b9:32:2f:c0:4d:
         1e:f9:be:4b:75:c2:e8:52:6e:48:bb:ac:63:d3:ff:ec:00:d3:
         eb:e0:1b:9e:37:e4:2c:a8:7f:4c:e0:d3:9a:1c:d9:3b:8b:3b:
         f4:50:79:41:4e:f9:ff:d5:a0:cf:be:c2:26:34:7b:2c:8f:ad:
         2b:f6:69:79:0f:d9:6e:49:b9:57:bd:21:a3:38:16:c8:3f:54:
         58:c6:0b:82:23:26:99:4f:11:86:8a:27:7f:18:da:e1:06:54:
         5c:1b:c4:f2:2f:c5:99:5f:df:d9:2f:9d:d6:ea:79:fa:73:33:
         21:65:02:c0:09:58:d1:56:82:49:52:85:e4:ff:74:90:74:8d:
         86:28:3b:ff:fc:d2:54:bf:d0:34:97:74:35:47:25:cf:57:cf:
         98:5b:7d:fc:eb:75:e1:02:a6:71:06:0b:ff:13:59:1e:0d:6c:
         1e:58:ef:f5
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGUwClkaFfgOaR0B89pK7aLpKYLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI2MDZaFw0yNzA1MjUwNjMxMDZaMDMxMTAvBgNV
BAMTKDE3Mjg5MUEyOEIzMkVEMzk2RjBFNUIwNzE3QkFCRDRBQkY4MEUwNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmLuxuvLrIHVxC1Zz2fEXT+Oa
1QaKLs6yVRkaSBxOGlp/rJ5vRuj0agY5x75lbOxMuEWynYTIXq/lUjMhEjtDxwOg
hGyFAnULA6pPx6X4OFdsUwSdyOYTugnfeq7HrHiMkZty5w5aMfxy3F5AbtfcQI57
4Yp5APs16GzEYgm/6+SDEgSJlFT0Yn/984mPXZwg6+SaQ1mAJwnp7EqN+3RrvgwT
CZizpHf7ZFr0Yy9JSPI/Bc2A7ogoB57IgrExao81p7E7pGXIilyrfSL9PmCuJXzA
9Oh+ARndL9gUyjm3UZiVVxVbNNkrOSTxDG4E/vrAm6JWJm5Yeb/+eCOHdFn5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUFyiRoosy7TlvDlsHF7q9Sr+A4HAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NDYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnEzANBgkqhkiG9w0BAQsFAAOCAQEAK0JC
WxXg9nMS0Mjs/GDG6YRW63u/UsTJtuRC5m222ImKvGV1ux8XOBELRuYbzqfELxMr
DrHm5MB8ZBH4JYnLHNj8glNcXZ4V3bBKZGChJ1wmvrMpErkyL8BNHvm+S3XC6FJu
SLusY9P/7ADT6+AbnjfkLKh/TODTmhzZO4s79FB5QU75/9Wgz77CJjR7LI+tK/Zp
eQ/Zbkm5V70hozgWyD9UWMYLgiMmmU8Rhoonfxja4QZUXBvE8i/FmV/f2S+d1up5
+nMzIWUCwAlY0VaCSVKF5P90kHSNhig7//zSVL/QNJd0NUclz1fPmFt9/Ot14QKm
cQYL/xNZHg1sHljv9Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:08 2026 by rpki-client