Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144514.roa
File:                     AS144514.roa (raw, json)
Hash identifier:          qlwLTZONnrzn07JFcOsDRwj0jpULilffbFbep7RcLiM=
Subject key identifier:   64:C3:35:6F:4E:A8:09:64:8E:D3:75:69:65:F9:87:8A:08:D8:59:50
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       364F0583EBD22130C1688A16FCA33461A2416562
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144514.roa
Signing time:             Fri 22 May 2026 07:08:55 +0000
ROA not before:           Fri 22 May 2026 07:03:55 +0000
ROA not after:            Fri 21 May 2027 07:08:55 +0000
asID:                     144514
IP address blocks:        240a:a748::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4f:05:83:eb:d2:21:30:c1:68:8a:16:fc:a3:34:61:a2:41:65:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:03:55 2026 GMT
            Not After : May 21 07:08:55 2027 GMT
        Subject: CN=64C3356F4EA809648ED3756965F9878A08D85950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:7b:6a:30:de:e7:27:0e:d8:f4:c1:1a:88:
                    51:00:11:a5:a4:ea:25:8e:5c:5e:ac:08:fc:db:1f:
                    f4:51:4a:ef:d6:c1:48:33:cc:ad:58:68:a5:71:0e:
                    ca:03:0e:dc:c0:87:eb:e1:98:d8:6c:bd:9a:56:7c:
                    e0:3c:18:66:7b:9f:a0:9d:3e:54:4f:a2:1f:5d:4c:
                    3d:ce:24:af:21:cf:33:b1:24:bb:4b:37:26:70:2e:
                    98:fa:83:ad:21:0b:ca:ed:19:5c:57:24:5e:eb:99:
                    08:41:5d:52:e4:7b:74:dc:11:d2:5b:97:44:e8:e9:
                    18:cb:88:0f:da:03:61:6c:7b:0c:17:2c:4b:a3:91:
                    44:05:9a:ae:6b:0c:ec:cd:3f:fe:09:89:fe:d2:8d:
                    dd:70:8e:31:d2:d4:6f:38:76:ca:c8:1c:2d:bb:45:
                    ad:e2:eb:a8:f4:df:c3:94:da:99:af:f8:3c:6c:a7:
                    76:54:78:41:a5:06:8a:af:9b:fa:01:97:3f:24:5c:
                    92:95:f8:d1:43:ef:3c:2e:df:b2:b2:e9:ba:83:37:
                    ff:55:80:cd:79:b9:45:ff:e9:41:fc:b2:5f:35:20:
                    6d:16:0f:81:b9:e9:d8:22:e7:10:dc:9a:5d:c7:4f:
                    58:50:ae:ca:91:ae:45:8a:94:38:61:c5:0c:17:5a:
                    de:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C3:35:6F:4E:A8:09:64:8E:D3:75:69:65:F9:87:8A:08:D8:59:50
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144514.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a748::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:03:8a:1b:14:23:78:dc:fe:a1:1d:80:4e:6c:9e:fb:a8:91:
         ef:06:57:64:de:62:6b:4a:ca:a1:df:4c:e4:97:47:a1:72:2a:
         7b:9d:06:7f:41:bc:e8:3a:ea:c8:81:11:06:09:07:1a:b9:a9:
         7b:fa:2c:b5:58:d2:80:c4:5a:18:4f:26:96:0f:a2:a7:2f:cb:
         fb:bb:28:08:2f:bb:5b:ac:d7:c1:f5:ab:c0:bd:ae:a4:a7:cb:
         cf:4d:91:c3:83:d5:96:05:b5:47:75:bf:26:45:b6:a1:ac:9b:
         f1:f6:73:c6:47:a7:59:6e:9e:0d:29:a1:75:13:d8:4b:82:59:
         a7:da:a0:dc:e3:96:0f:40:c8:5c:d1:6f:2b:c6:16:d4:c9:f7:
         b9:5f:fc:25:1f:fc:ed:99:a0:e3:d5:27:69:60:5d:90:ea:9d:
         b4:df:32:b7:ae:92:1b:d0:2f:0e:77:8c:65:8f:d6:f0:10:91:
         e2:11:33:76:5b:f7:9b:f8:b3:14:c0:6b:44:75:5c:ce:ff:53:
         48:9d:a8:23:98:3a:92:ce:01:f9:db:9d:55:5c:66:b3:70:88:
         dc:84:87:51:fa:3f:ba:52:cf:89:7d:eb:e8:da:a3:c0:74:b1:
         b7:c3:7d:3b:18:a8:d9:95:b6:a4:9a:bd:82:8a:ba:f3:76:b0:
         ec:2a:bd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:03 2026 by rpki-client