Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144523.roa
File:                     AS144523.roa (raw, json)
Hash identifier:          d+LA3cfrjYMkNQiVXiMQk9Bh5+nncmq1evfbTp/mv8A=
Subject key identifier:   F9:75:5D:75:AE:84:63:87:BA:C5:C1:89:7B:3C:AE:51:44:88:04:FE
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3698D609305159CD559E6F14FF8E92BFDDE61FA5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144523.roa
Signing time:             Mon 25 May 2026 01:51:26 +0000
ROA not before:           Mon 25 May 2026 01:46:26 +0000
ROA not after:            Mon 24 May 2027 01:51:26 +0000
asID:                     144523
IP address blocks:        240a:a751::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:98:d6:09:30:51:59:cd:55:9e:6f:14:ff:8e:92:bf:dd:e6:1f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:26 2026 GMT
            Not After : May 24 01:51:26 2027 GMT
        Subject: CN=F9755D75AE846387BAC5C1897B3CAE51448804FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bf:33:3b:f7:31:90:75:fb:3a:47:34:36:53:
                    b8:43:1c:53:95:05:7e:eb:dd:4c:f7:40:5e:70:44:
                    71:6a:e2:6a:42:2a:83:b9:68:30:87:ca:e4:08:25:
                    23:75:bf:95:0d:e2:a7:c2:c6:03:a8:22:34:33:2b:
                    84:b1:20:f5:ae:53:7a:76:ac:88:f8:a9:db:0f:7d:
                    2e:03:b6:d3:1d:7e:9e:e2:12:8e:07:ef:7b:e0:d8:
                    0b:cf:8e:c6:2a:fb:9e:b3:d6:61:14:79:70:d6:06:
                    b9:f8:c1:24:53:ff:f5:6c:2b:c2:81:b3:71:fe:94:
                    aa:85:96:51:46:d5:e6:4b:0e:6e:ea:ab:95:d4:5f:
                    e9:fd:f9:e7:e4:d0:a3:61:f3:38:4d:52:8f:aa:6f:
                    0d:56:b5:ef:47:9f:10:94:4d:7d:40:65:02:46:8f:
                    35:d4:13:e0:57:e5:e0:c0:af:93:dd:9a:26:0d:98:
                    b3:00:fd:9e:25:6e:85:1c:8d:eb:f0:e4:42:bf:28:
                    af:d6:7a:d5:58:8f:34:93:56:17:95:f2:f4:14:e7:
                    d8:12:4c:92:89:ad:49:e9:b6:38:82:87:55:bc:17:
                    7f:be:d7:33:1e:17:de:3f:8a:d6:22:e3:6f:fe:3e:
                    0f:18:a5:7f:61:11:40:f5:7d:44:5c:8b:b0:58:e2:
                    70:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:75:5D:75:AE:84:63:87:BA:C5:C1:89:7B:3C:AE:51:44:88:04:FE
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144523.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a751::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:d8:a0:ec:3c:45:55:1e:3c:81:da:e6:2d:7a:44:b8:ad:18:
         39:cd:e1:72:88:b1:cf:c3:ca:e6:93:1d:91:7c:d5:51:04:cf:
         ce:82:9b:bc:3d:d5:40:42:33:e1:5f:09:2a:8b:66:13:e8:8b:
         e8:2e:9e:69:c2:06:71:e9:ce:03:5e:d1:4c:ac:15:d3:83:69:
         46:a6:71:7f:25:87:c1:5c:0f:23:68:55:18:32:8b:52:36:16:
         df:7b:3c:75:24:2c:9a:fa:87:76:03:6a:4f:aa:08:b7:1c:30:
         ae:73:b4:a0:6e:c5:d2:ad:3e:ff:d9:86:12:91:c2:4b:f7:67:
         ff:0d:19:66:dc:5c:4a:9c:2b:37:86:17:60:f6:9e:ff:27:22:
         89:9a:62:ea:8d:69:0a:eb:42:3a:ae:1f:43:2e:a7:72:68:5e:
         66:e7:f1:0b:45:4a:1f:75:90:03:cd:d6:7f:1e:b4:c3:22:60:
         55:ca:a6:2d:28:4b:95:67:8d:59:d5:44:ae:eb:8d:f6:72:f6:
         a9:31:32:1b:86:60:3e:32:e5:e2:b8:1e:40:6b:dd:9f:ad:be:
         09:11:11:0f:50:60:a9:e4:06:10:12:9b:52:fd:c4:c6:0b:cd:
         cb:19:af:bf:a0:af:7f:5a:4a:51:84:b7:ae:6e:47:2c:7a:7b:
         c5:db:ba:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:01 2026 by rpki-client