Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144465.roa
File:                     AS144465.roa (raw, json)
Hash identifier:          RqSnn8BsOHOmfeqZbN18CHUufVfPnmUqkt2kLki5ypc=
Subject key identifier:   8E:D1:00:69:32:CB:CD:29:6A:1A:1F:C3:1D:91:66:22:EB:D4:A0:33
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       79A3161ABC30EEA3561053DAA8DEC5D111EDE6CE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144465.roa
Signing time:             Fri 22 May 2026 06:27:36 +0000
ROA not before:           Fri 22 May 2026 06:22:36 +0000
ROA not after:            Fri 21 May 2027 06:27:36 +0000
asID:                     144465
IP address blocks:        240a:a717::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a3:16:1a:bc:30:ee:a3:56:10:53:da:a8:de:c5:d1:11:ed:e6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:36 2026 GMT
            Not After : May 21 06:27:36 2027 GMT
        Subject: CN=8ED1006932CBCD296A1A1FC31D916622EBD4A033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:9e:c4:52:26:70:97:1f:fd:f5:70:68:93:
                    d5:a3:b5:e3:9e:02:58:3f:55:4e:9d:55:01:77:0c:
                    a9:44:e0:48:8a:5f:50:40:33:dc:f2:f8:46:22:8e:
                    c6:40:0a:3c:a1:61:34:a1:bf:30:0e:11:8c:de:58:
                    c9:a5:10:82:4e:71:47:9a:e9:5a:c3:02:10:1c:3c:
                    75:94:ce:23:cd:49:37:5b:7e:0d:be:01:2d:7c:96:
                    60:0c:7e:ba:bc:9b:09:c3:35:05:d4:a2:3b:93:de:
                    c1:6b:32:f4:99:d2:a8:c3:24:a8:b6:05:24:ca:db:
                    86:84:47:ad:7f:2a:6b:15:2e:75:cf:3d:bf:a4:c4:
                    22:ff:95:be:80:d8:f2:e0:5b:76:05:18:98:f2:cd:
                    da:62:2b:d8:60:ae:85:6e:a3:f1:5a:1d:55:c4:1f:
                    af:5a:6c:ba:bf:d9:1e:c4:6f:93:06:17:99:4a:25:
                    6f:21:1f:7b:e5:98:ef:a6:24:e1:4f:a9:3c:16:a0:
                    a0:3f:65:92:ff:ae:05:e8:ab:9e:35:8f:4a:76:eb:
                    ea:9f:4c:e3:c8:cf:0b:c8:ef:c2:2b:90:1b:20:00:
                    80:db:61:bc:79:30:41:41:d2:b4:17:d1:da:91:30:
                    f1:70:39:a0:d5:36:5e:20:78:3d:61:63:71:8b:df:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D1:00:69:32:CB:CD:29:6A:1A:1F:C3:1D:91:66:22:EB:D4:A0:33
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144465.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a717::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:f5:41:17:a3:41:75:1c:65:de:10:de:6c:3e:54:7e:95:79:
         23:f9:b9:07:a7:64:6f:4d:40:fd:c4:75:38:f9:85:63:7c:a1:
         7e:65:65:05:01:1f:61:63:75:06:79:62:b2:fa:c4:c7:cd:ed:
         3d:df:6e:ac:1c:f3:07:45:51:f3:16:a3:42:88:e3:52:d9:14:
         63:aa:01:9d:35:3a:94:2b:2d:bf:1e:77:d0:0a:81:ff:28:c6:
         5a:de:c5:70:05:d0:db:b2:65:ae:b4:80:95:df:2c:d6:dd:56:
         7f:5f:cc:bb:ae:85:45:ce:ea:c3:37:00:14:59:d7:77:54:a2:
         59:b8:5a:0e:85:d0:d1:58:00:f2:93:e4:ae:c9:98:fc:67:2c:
         f4:db:53:95:0e:ab:16:75:6c:07:8b:2a:26:7e:31:31:c2:8c:
         61:98:d8:cc:1d:48:ae:9c:c3:76:01:2b:c8:a6:28:c0:98:68:
         0e:b2:73:ef:2e:c9:00:30:82:ca:b6:7a:45:7c:0a:68:51:7a:
         22:f2:58:d9:09:20:69:39:12:65:68:fc:6c:0c:e8:4f:ea:1b:
         40:05:19:d5:0e:e9:87:1b:70:83:89:c5:8b:48:50:2d:f3:45:
         9e:eb:19:17:90:39:4a:6f:8e:ab:d9:6f:84:c2:11:99:ca:a0:
         0c:8f:83:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:42 2026 by rpki-client