Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144529.roa
File:                     AS144529.roa (raw, json)
Hash identifier:          swkSUj6E6oF+ifzZU4JEeAfFJOiEzHqlQBKoHRm+Quw=
Subject key identifier:   7A:79:E0:40:F3:6C:08:B6:C4:0E:AE:B9:F4:9B:9D:C8:01:3D:30:66
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7A7266925820FBA156C75BB0C58892968C106402
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144529.roa
Signing time:             Tue 26 May 2026 06:30:35 +0000
ROA not before:           Tue 26 May 2026 06:25:35 +0000
ROA not after:            Tue 25 May 2027 06:30:35 +0000
asID:                     144529
IP address blocks:        240a:a757::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:72:66:92:58:20:fb:a1:56:c7:5b:b0:c5:88:92:96:8c:10:64:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:35 2026 GMT
            Not After : May 25 06:30:35 2027 GMT
        Subject: CN=7A79E040F36C08B6C40EAEB9F49B9DC8013D3066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:be:a4:88:74:13:5f:e7:43:90:ee:16:7f:
                    d4:92:8e:b2:9c:bd:de:02:5d:ad:0f:09:75:73:11:
                    d5:0d:85:d4:88:e7:9f:9a:5e:ca:5e:d4:90:62:a6:
                    bb:53:67:53:97:77:74:90:be:a5:0b:4f:82:94:dc:
                    13:9a:02:38:49:69:28:57:23:8b:c6:3a:56:f2:29:
                    d0:b8:a9:48:6f:34:df:d7:eb:eb:49:4f:8d:0c:07:
                    7f:2b:ff:cf:60:0e:29:05:7d:22:05:a3:85:b4:81:
                    bc:5b:a0:4f:30:b2:a6:a2:3e:05:9d:b8:b2:d0:38:
                    76:a3:fb:e6:c4:d2:58:94:5c:90:a0:56:d1:bc:c7:
                    0f:8e:a9:7b:4c:0d:7c:be:cc:e2:ac:98:5e:09:72:
                    b0:a3:ee:e8:1e:e3:6e:68:d2:0a:41:05:0b:ae:93:
                    fd:cb:cf:29:fe:cb:cd:9a:dd:c7:09:37:5b:ca:1d:
                    ec:0c:51:34:13:54:58:a6:84:67:2b:a1:d6:0e:bd:
                    d4:af:ec:51:c3:a3:b3:e8:ec:06:b5:b8:00:f1:5f:
                    1a:9e:8a:e7:b3:f7:a3:84:09:7f:cd:01:9d:ae:7e:
                    45:1e:3d:86:8d:a0:6f:2a:88:5f:3b:c6:57:0d:3e:
                    ac:93:fa:42:36:00:e5:98:c8:b1:e0:7f:e9:91:60:
                    06:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:79:E0:40:F3:6C:08:B6:C4:0E:AE:B9:F4:9B:9D:C8:01:3D:30:66
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144529.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a757::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:ad:93:2a:cc:f2:af:6a:c3:81:67:0f:ac:ab:7d:a5:50:cc:
         de:9c:1d:54:27:c4:dc:a8:44:3f:94:a3:7a:71:98:c9:91:b1:
         37:f2:ec:26:8f:6e:db:38:15:3d:d6:c8:bc:f8:fc:82:94:2c:
         d7:14:6f:70:c0:c6:5c:4f:e8:a1:dd:a2:d8:0d:cd:d8:06:db:
         b8:18:11:ec:f0:14:70:07:c5:5f:4d:a9:9d:69:48:ff:2e:dd:
         61:90:fd:60:41:a0:96:7b:f0:43:7e:9e:b2:70:a6:03:9c:a5:
         c3:8d:50:9e:eb:9a:e6:73:81:b7:73:45:38:b6:80:02:1c:b6:
         b5:b1:1b:03:3b:78:9b:39:73:f3:50:42:c2:d8:04:b5:c1:43:
         7b:9e:28:a2:82:11:12:a7:be:69:1d:0c:0f:c0:36:69:1e:29:
         ad:13:31:a6:64:6b:5d:a4:7d:dd:8a:96:6a:89:60:b8:62:56:
         44:39:f9:ed:06:79:6e:58:1e:97:5f:db:4c:1c:cc:17:3c:18:
         e2:60:36:fa:6d:d2:6c:4c:a0:c1:67:22:da:4d:3e:05:f0:ce:
         b7:1e:66:47:35:b0:1c:0d:58:5f:26:f4:eb:89:89:5d:1f:a1:
         41:01:26:b1:3d:c6:30:43:d4:69:06:5c:6f:f0:37:25:46:07:
         ae:50:e6:06
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUenJmklgg+6FWx1uwxYiSlowQZAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1MzVaFw0yNzA1MjUwNjMwMzVaMDMxMTAvBgNV
BAMTKDdBNzlFMDQwRjM2QzA4QjZDNDBFQUVCOUY0OUI5REM4MDEzRDMwNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWb6kiHQTX+dDkO4Wf9SSjrKc
vd4CXa0PCXVzEdUNhdSI55+aXspe1JBiprtTZ1OXd3SQvqULT4KU3BOaAjhJaShX
I4vGOlbyKdC4qUhvNN/X6+tJT40MB38r/89gDikFfSIFo4W0gbxboE8wsqaiPgWd
uLLQOHaj++bE0liUXJCgVtG8xw+OqXtMDXy+zOKsmF4JcrCj7uge425o0gpBBQuu
k/3Lzyn+y82a3ccJN1vKHewMUTQTVFimhGcrodYOvdSv7FHDo7Po7Aa1uADxXxqe
iuez96OECX/NAZ2ufkUePYaNoG8qiF87xlcNPqyT+kI2AOWYyLHgf+mRYAbxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUenngQPNsCLbEDq659JudyAE9MGYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ0NTI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqnVzANBgkqhkiG9w0BAQsFAAOCAQEAQ62T
Kszyr2rDgWcPrKt9pVDM3pwdVCfE3KhEP5SjenGYyZGxN/LsJo9u2zgVPdbIvPj8
gpQs1xRvcMDGXE/ood2i2A3N2AbbuBgR7PAUcAfFX02pnWlI/y7dYZD9YEGglnvw
Q36esnCmA5ylw41Qnuua5nOBt3NFOLaAAhy2tbEbAzt4mzlz81BCwtgEtcFDe54o
ooIREqe+aR0MD8A2aR4prRMxpmRrXaR93YqWaolguGJWRDn57QZ5blgel1/bTBzM
FzwY4mA2+m3SbEygwWci2k0+BfDOtx5mRzWwHA1YXyb064mJXR+hQQEmsT3GMEPU
aQZcb/A3JUYHrlDmBg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:23 2026 by rpki-client