Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144539.roa
File:                     AS144539.roa (raw, json)
Hash identifier:          +QBLlTyFFrtGWzAWkm4Mv94iQtaILvp/fTpcRQB6/JI=
Subject key identifier:   F9:24:F5:A1:7E:78:43:68:DD:1D:4D:C0:8B:37:20:F4:92:D5:9D:34
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       72C1C9B13CB743C371A13A38421F1DEFCE37FCBC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144539.roa
Signing time:             Tue 26 May 2026 06:30:26 +0000
ROA not before:           Tue 26 May 2026 06:25:26 +0000
ROA not after:            Tue 25 May 2027 06:30:26 +0000
asID:                     144539
IP address blocks:        240a:a761::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c1:c9:b1:3c:b7:43:c3:71:a1:3a:38:42:1f:1d:ef:ce:37:fc:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:26 2026 GMT
            Not After : May 25 06:30:26 2027 GMT
        Subject: CN=F924F5A17E784368DD1D4DC08B3720F492D59D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:07:e8:bf:c8:cd:e3:01:23:12:0e:9b:67:
                    32:ae:9d:4e:fa:c0:94:4b:f9:f5:3d:ba:15:73:9b:
                    1f:57:52:c0:95:cf:e9:17:86:0d:c8:e0:0e:b1:4e:
                    77:83:4f:ad:28:e1:04:7d:1e:bd:db:70:fe:d8:3d:
                    b2:e4:83:35:20:cb:47:2d:bf:be:0f:2d:7f:95:16:
                    8c:ea:38:00:e3:61:e6:57:3a:72:2f:e9:e5:7c:6f:
                    d5:9b:86:4d:30:27:3f:88:44:da:84:9f:8c:c4:0f:
                    bf:62:17:f8:8a:e7:39:e3:1a:3e:c6:60:ca:d5:09:
                    0b:af:da:6e:e6:9f:3d:f4:f2:4e:c4:11:c2:87:02:
                    27:df:aa:78:39:67:ea:c6:d4:3a:7a:cf:cf:09:30:
                    c2:23:56:03:c3:d5:99:78:c0:c6:5f:91:bd:6f:12:
                    38:22:f3:e0:93:77:4c:a8:ac:82:d9:87:06:02:47:
                    cf:c7:31:1f:25:fa:c4:ad:77:19:96:67:15:08:61:
                    29:ad:64:c9:8e:95:59:4d:f3:63:d9:3a:23:1b:72:
                    0d:b6:ae:64:38:1f:a4:ff:d8:db:a3:de:60:35:9d:
                    7b:6d:54:25:14:b1:56:a1:aa:64:8f:75:d3:75:17:
                    75:05:d9:1f:7a:ac:04:90:01:62:98:5c:45:50:5a:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:24:F5:A1:7E:78:43:68:DD:1D:4D:C0:8B:37:20:F4:92:D5:9D:34
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a761::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:b2:aa:df:dd:38:12:d0:be:07:a7:dc:a3:15:72:db:51:e4:
         2f:22:18:2b:e4:e1:67:9c:73:2d:47:3d:c6:db:aa:33:ee:4a:
         b1:11:94:33:37:eb:47:10:17:94:23:cc:f5:ac:f3:60:88:ae:
         dc:0c:59:0f:48:78:b8:4f:a5:27:22:14:5e:85:40:0e:8e:96:
         02:d7:04:d0:1b:56:4b:5b:7c:7e:47:5f:2b:30:a9:27:40:ae:
         90:ca:d1:0e:b5:8f:2a:b6:9c:98:7f:ce:72:74:15:31:12:71:
         fc:91:9c:69:33:17:72:89:7f:11:3d:be:a7:25:81:ee:5b:bc:
         92:2e:35:de:c5:51:82:0a:3c:09:19:0d:85:c3:09:91:7f:fb:
         6a:4d:06:c1:ca:f3:e2:36:fd:58:cd:95:20:9a:90:a0:ac:b9:
         6b:65:57:af:ee:97:8f:29:32:30:97:d2:b6:b5:af:e7:07:15:
         3a:06:88:76:e7:a5:94:f1:15:1b:42:5e:bb:de:f4:e1:6b:df:
         61:fc:5e:04:30:03:bd:b0:f6:fa:dd:cd:47:15:43:9e:65:99:
         3b:bd:cf:63:ae:3b:b9:e7:59:f5:34:6c:c9:bd:5a:83:2f:5f:
         3f:6b:8f:50:40:5f:7d:48:4c:0b:e0:f1:21:c2:b9:97:34:2d:
         08:75:e1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:02 2026 by rpki-client