Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144481.roa
File:                     AS144481.roa (raw, json)
Hash identifier:          ILTz/+RTSCkdtkgNJ9fYH9M2+gzANLszNK7DRW7BwZk=
Subject key identifier:   C7:79:B3:FA:3B:85:1F:EA:CF:DA:19:01:2D:7E:2C:C9:8B:C5:CB:0D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       05A90698BB11D46BF78CCAA8B56BB28388B52DBB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144481.roa
Signing time:             Mon 25 May 2026 01:38:11 +0000
ROA not before:           Mon 25 May 2026 01:33:11 +0000
ROA not after:            Mon 24 May 2027 01:38:11 +0000
asID:                     144481
IP address blocks:        240a:a727::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a9:06:98:bb:11:d4:6b:f7:8c:ca:a8:b5:6b:b2:83:88:b5:2d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:11 2026 GMT
            Not After : May 24 01:38:11 2027 GMT
        Subject: CN=C779B3FA3B851FEACFDA19012D7E2CC98BC5CB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:15:a2:22:88:b5:e5:88:27:02:2b:23:21:cd:
                    ba:5a:1a:62:1f:0e:f2:e5:74:7f:2d:7e:a3:f3:52:
                    67:12:10:5c:87:da:3e:11:b8:c9:79:2d:5b:83:75:
                    31:04:e6:b1:76:c1:e7:e8:dc:1f:08:14:d3:7e:11:
                    b1:75:2b:6d:f2:7b:4c:5b:85:68:54:77:d6:16:85:
                    8b:7e:45:e2:79:a2:91:55:06:b3:66:cb:6f:54:c1:
                    2a:66:69:c4:b1:1c:44:05:a7:b2:b5:1f:41:67:97:
                    66:57:ae:ff:63:f0:19:2f:ae:5d:6d:bd:a2:36:e9:
                    b2:2e:db:39:19:40:d6:51:96:3e:e8:0b:c2:f5:52:
                    6f:7d:16:ce:d9:61:8a:fa:ad:74:f2:c8:32:19:b7:
                    d1:9e:ca:ef:76:44:83:5b:73:da:af:31:26:06:28:
                    8d:3d:21:6b:bd:bd:62:7d:57:b1:1c:39:91:b0:a9:
                    10:f7:8c:40:a3:46:f1:d3:1c:a4:06:33:cb:d8:35:
                    0c:b2:76:30:64:7b:b9:27:0c:61:e6:18:fd:7d:b6:
                    55:1c:e9:f3:32:06:f8:67:e6:bb:fc:e6:5b:5e:35:
                    36:13:f9:c2:e4:fe:9e:4d:b0:51:3f:84:a3:31:2e:
                    cc:a2:ac:23:d2:ff:72:84:50:78:4c:6e:2c:61:1e:
                    a8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:79:B3:FA:3B:85:1F:EA:CF:DA:19:01:2D:7E:2C:C9:8B:C5:CB:0D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144481.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a727::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:24:22:27:9c:d6:9d:74:d1:0d:07:92:73:f7:be:01:be:b5:
         09:99:b4:21:17:ed:ba:6d:6b:71:49:0a:0a:93:9b:61:49:6d:
         d6:f9:be:6b:fe:37:43:6c:d5:98:9c:a3:63:62:fc:65:ea:85:
         37:f1:54:bc:da:0c:2b:03:47:25:21:bf:89:e9:2f:6b:e5:a4:
         6a:97:5b:44:7d:85:4e:4f:38:74:e7:27:83:94:00:2d:6b:95:
         a3:bc:ce:51:d2:23:5d:cb:66:5f:60:4f:a2:8c:70:2f:ae:7d:
         b3:e0:4f:50:ac:c2:3c:f5:14:dd:61:17:fd:96:12:2c:70:45:
         bb:da:b5:a4:fa:3a:7c:0c:d7:95:72:ab:8b:48:0f:9a:37:5a:
         64:b0:eb:ee:30:20:6f:a6:fd:57:89:ed:52:18:dd:70:fb:0a:
         70:d8:f9:38:90:b2:ff:e5:c1:9e:2f:23:68:32:65:82:e5:78:
         cb:3e:e6:ae:fc:ab:c8:3c:81:b3:90:07:70:10:1f:e7:3c:ae:
         6b:6a:71:6a:39:22:d7:24:b0:b3:f5:47:6a:5e:74:d5:60:79:
         c5:cc:8e:ab:96:92:11:13:5f:1d:14:30:ba:b5:ae:b9:8d:fd:
         43:aa:47:80:4c:70:34:a8:57:7d:32:4f:e9:27:e4:62:e2:4f:
         dd:33:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:40 2026 by rpki-client